Denmark’s largest train operator hit by service crippling DDoS attack

By Waqas Another day, another DDoS attack causing passengers a great deal This is a post from HackRead.com Read the original post: Denmark's largest train operator hit by service crippling DDoS attack...

CVE-2018-2422

SAP Internet Graphics Server IGS Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...

Cross site request forgery (csrf)

SAP Internet Graphics Server IGS Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...

CVE-2018-2421

SAP Internet Graphics Server IGS Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...

CVE-2018-2423

SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, HTTP and RFC listener allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...

The vulnerability of the ZyXEL P-870H-51 DSL router’s microprogramming software, due to lack of access control, allows a intruder to trigger a service failure or cause other adverse effects.

The vulnerability of the ZyXEL P-870H-51 DSL router’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions or other adverse effects...

The vulnerability of the ReadTIFFImage function in the console-based image editing tool ImageMagick, which allows a hacker to cause a service failure.

The vulnerability of the ReadTIFFImage function in the coders/tiff.c file of the console-based graphic editor ImageMagick is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through the use of a specially crafted file...

OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JAXP. Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2018-2829

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Enterprise Management Console. The supported version that is affected is 2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2797

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JMX. Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2018-2750

Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Products Suite subcomponent: UI Framework. The supported version that is affected is 12.1.0.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-6155

The CVE-2017-6155 issue affects F5 BIG-IP TMM in versions with SPDY or HTTP/2 profiles (BIG-IP 11.2.x, 11.4.1–11.5.5, 11.6.0–11.6.2, 12.0.0–12.1.3.1, 13.0.0). Malformed SPDY/HTTP/2 requests can disrupt service on TMM when such profiles are attached; no control-plane exposure is reported. Impact i...

The vulnerability of the php_stream_url_wrap_http_ex function in the PHP interpreter allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the phpstreamurlwraphttpex function located in ext/standard/httpfopenwrapper.c in the PHP interpreter arises due to an out-of-buffer operation on the stack. Exploitation of this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by usi...

CVE-2017-17308

SCCPX module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has an invalid memory access vulnerability. An unauthenticated, remote...

The vulnerability of the gplotRead and ptaReadStream functions in the Leptonica image processing library, which allows a hacker to cause a service failure or exert other effects.

The vulnerability of the gplotRead and ptaReadStream functions in the Leptonica image processing library is related to buffer overflow in the stack %s in the fscanf and sscanf functions. Exploiting this vulnerability can allow a malicious actor to cause service failures by using a specially craft...

The vulnerability of the ReadImage function in the Sam2p image conversion utility allows a attacker to cause a service failure or exert other effects.

The vulnerability of the ReadImage function input-bmp.ci in the Sam2p image conversion utility is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or other adverse effects...

The vulnerability of the blkcg_init_queue function in the Linux operating system allows a hacker to cause a service failure or exert other effects.

The vulnerability of the blkcginitqueue function in the Linux kernel’s block/blk-cgroup.c file is due to the repeated release of memory. Exploiting this vulnerability could allow an attacker to cause a service failure or have other adverse effects...

The vulnerability of the functions snd_seq_write and snd_seq_ioctl_set_client_pool (seq_clientmgr.c) in the Linux kernel sound subsystem allows a attacker to cause a service failure.

The vulnerability of the sndseqwrite and sndseqioctlsetclientpool functions in the Linux kernel’s audio subsystem is related to multiprogramming errors race conditions. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2017-17282

SCCP Signalling Connection Control Part module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has a buffer overflow vulnerability. An...

CVE-2017-17327

Huawei smartphones with software of MHA-AL00AC00B125 have an improper resource management vulnerability. The software does not properly manage the resource when do device register operation. An attacker tricks the user who has root privilege to install a crafted application, successful exploit...