708 matches found
Yandex ClickHouse 缓冲区错误漏洞
Yandex ClickHouse is a set of open source columnar databases for online analytical processing from the Russian company Yandex. A buffer error vulnerability exists in Yandex ClickHouse, no information about the vulnerability is available at this time, please stay tuned to CNNVD or vendor...
Yandex ClickHouse 数字错误漏洞
Yandex ClickHouse is an open source columnar database for online analytical processing from the Russian company Yandex. There is a security vulnerability in Yandex ClickHouse, there is no information about the vulnerability at the moment, please stay tuned to CNNVD or the vendor's announcement...
Yandex ClickHouse 数字错误漏洞
Yandex ClickHouse is an open source columnar database for online analytical processing from the Russian company Yandex. There is a security vulnerability in Yandex ClickHouse, there is no information about the vulnerability at the moment, please stay tuned to CNNVD or the vendor's announcement...
Yandex ClickHouse 缓冲区错误漏洞
Yandex ClickHouse is a set of open source columnar databases for online analytical processing from the Russian company Yandex. Yandex ClickHouse suffers from a buffer error vulnerability that stems from a heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query...
Yandex ClickHouse 缓冲区错误漏洞
Yandex ClickHouse is an open source columnar database for online analytical processing from the Russian company Yandex. There is a security vulnerability in Yandex ClickHouse, there is no information about the vulnerability at the moment, please stay tuned to CNNVD or the vendor's announcement...
Yandex ClickHouse 数字错误漏洞
Yandex ClickHouse is a set of open source columnar databases for online analytical processing from the Russian company Yandex. A numeric error vulnerability exists in Yandex ClickHouse, no information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor...
What Microsoft Bing’s IndexNow Means for CDN Users
Microsoft Bing today announced the rollout of IndexNow, a new protocol designed in conjunction with Yandex that can allow “websites to easily notify search engines whenever their website content is created, updated, or deleted.” The goal is to reduce the amount of time it takes for search engines...
Microsoft Fended Off a Record 2.4 Tbps DDoS Attack Targeting Azure Customers
Microsoft on Monday revealed that its Azure cloud platform mitigated a 2.4 Tbps distributed denial-of-service DDoS attack in the last week of August targeting an unnamed customer in Europe, surpassing a 2.3 Tbps attack stopped by Amazon Web Services in February 2020. "This is 140 percent higher...
webmaster.yandex.com Open Redirect vulnerability OBB-2153729
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
DDoS Chart Toppers—BPS, PPS and RPS Greatest Hits
New to the scene, monster-sized botnet Mēris is raising some eyebrows with giant requests per second rps attacks as shared by Cloudflare 17.2M rps, reported August 19, Yandex peaking at 21.8M rps on September 5, and KrebsOnSecurity 2M rps on September 9. Some commentary came in on Slashdot, The...
CVE-2020-27970
Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar...
CVE-2020-27970
Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar...
CVE-2020-27969
Yandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar spoofing...
CVE-2020-27969
Yandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar spoofing...
Design/Logic Flaw
Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar...
Spoofing
Yandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar spoofing...
CVE-2020-27970
Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar...
CVE-2020-27970
CVE-2020-27970 affects Yandex Browser prior to 20.10.0. The vulnerability stems from insufficient validation of the address bar’s authenticity, enabling remote attackers to spoof the address bar. Public sources in the connected documents consistently reference “Yandex Browser before 20.10.0 allow...
CVE-2020-27969
CVE-2020-27969 affects Yandex Browser for Android (version 20.8.4). Multiple sources describe a vulnerability enabling remote SOP bypass and address bar spoofing. The available connected documents note the software and impact but do not provide root-cause details or a published fix/remediation. I...