The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to insufficient validation of input data, allows a perpetrator to cause service failures.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted reques...

expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate

A use-after-free flaw was found in the Expat package, caused by destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations. This may lead to availability disruptions...

The vulnerability of the NetRandomInitSeed() function in the Tianocore edk2 library, which allows a hacker to gain unauthorized access to protected information or cause service failures.

The vulnerability of the NetRandomInitSeed function in the Tianocore edk2 library is related to errors in the code of the pseudo-random number generator when processing the Seed parameter. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or...

The vulnerability of the Ip6IsOptionValid() function in the Tianocore edk2 library, which allows a attacker to compromise the accessibility of protected information or cause service failures.

The vulnerability of the Ip6IsOptionValid function in the Tianocore edk2 library is related to the execution of a loop with an unreachable exit condition when processing the PadN parameter. Exploiting this vulnerability could allow a remote attacker to compromise the accessibility of protected...

The vulnerability of the Visual Analyzer (Snappy) component of the Oracle Business Intelligence Enterprise Edition software platform, which allows a hacker to trigger a service failure.

The vulnerability of the Visual Analyzer Snappy component of the Oracle Business Intelligence Enterprise Edition software platform is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the AIX operating system, related to deficiencies in access control, allows attackers to escalate their privileges or cause service failures.

The vulnerability of the AIX operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges or cause service interruptions using the qdaemon command...

The vulnerability of the AIX operating system, related to insufficient validation of input data, allows attackers to escalate their privileges or cause service failures.

The vulnerability of the AIX operating system is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to access to resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

The vulnerability of the Event Management component of the Oracle Enterprise Manager Base Platform allows a malicious actor to gain read, modify, or delete access to data, or to cause a service failure.

The vulnerability of the Event Management component of the Oracle Enterprise Manager Base Platform is related to insufficient validation of input data. Exploiting this vulnerability may allow a malicious actor to gain read, modify, or delete access to data, or cause service interruptions...

The vulnerability of the UploadCustomModule() function (/cgi-bin/cstecgi.cgi) in the Totolink LR1200GB router software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the UploadCustomModule function /cgi-bin/cstecgi.cgi of the Totolink LR1200GB router software lies in the escape of operations from memory buffers. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

The vulnerability of the Infrastructure component of Oracle Financial Services Analytical Applications Infrastructure (OFSAAI) allows a attacker to gain read, modify, or delete access to data, or cause a service failure.

The vulnerability of the Infrastructure component of the Oracle Financial Services Analytical Applications Infrastructure OFSAAI business analytics platform is related to insufficient validation of input data. Exploitation of this vulnerability could allow a malicious actor to gain read, modify, ...

The vulnerability of the bbe-smgd daemon in Juniper Networks’ Junos OS-based MX routers allows a attacker to cause a service failure.

The vulnerability of Juniper Networks Junos OS-enabled MX routers in BBE-SMGD operating systems is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the DHCP Daemon (jdhcpd) on Juniper Networks Junos OS allows a attacker to cause a service failure.

The vulnerability of the DHCP Daemon jdhcpd on Juniper Networks Junos OS operating systems is related to improper handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Anonymous Sudan’s DDoS Attacks Disrupt Network at Israeli BAZAN Group

By Waqas The DDoS attacks occurred on January 17, 2023, and NetBlocks, a global internet monitoring platform, has confirmed the network disruption. This is a post from HackRead.com Read the original post: Anonymous Sudans DDoS Attacks Disrupt Network at Israeli BAZAN Group...

Oracle Linux 8 / 9 : python-cryptography (ELSA-2024-12079)

The remote Oracle Linux 8 / 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-12079 advisory. - Fix CVE-2023-49083: NULL-dereference when loading PKCS7 certificates Orabug: 36119159 - Fix CVE-2023-23931: Don't allow updateinto to mutate immutable...

The vulnerability of Juniper Networks Junos OS Evolved routers of the ACX7024, ACX7100-32C, and ACX7100-48L series is related to pointer aliasing errors, which allows a attacker to cause a service failure.

The vulnerability of Juniper Networks Junos OS Evolved routers from the ACX7024, ACX7100-32C, and ACX7100-48L series is related to pointer swapping errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the kernel of Juniper Networks Junos OS-based MX routers, which allows a hacker to cause a service failure.

The vulnerability of Juniper Networks Junos OS routers in the MX series is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Packet Forwarding Engine (PFE) in Juniper Networks’ Junos operating system, which allows a attacker to trigger a service failure.

The vulnerability of the packet forwarding engine PFE in Juniper Networks’ Junos operating system is related to improper validation of syntax correctness in input data. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

Hathway Router CM5100 Cross-Site Scripting Vulnerability

Hathway Router is a router from Hathway India. The Hathway Router CM5100 suffers from a cross-site scripting vulnerability that stems from multiple vulnerabilities in the router, which could allow a remote attacker to perform a stored cross-site scripting XSS attack, obtain sensitive information,...

The vulnerability of the BMC (Baseboard Management Controller) on the NVIDIA DGX A100 server allows a hacker to enhance their privileges, gain access to read, modify, or delete data, execute arbitrary code, or cause a service failure.

The vulnerability of the BMC Baseboard Management Controller in NVIDIA’s DGX A100 server lies in the absence of authentication procedures for critical functions. Exploiting this vulnerability allows an attacker to enhance their privileges, gain read, write, or delete access to data, execute...