8089 matches found
Critical Vulnerabilities Affecting SAP Applications Employing Internet Communication Manager (ICM)
On February 8, 2022, SAP released security updates to address vulnerabilities affecting multiple products, including critical vulnerabilities affecting SAP applications using SAP Internet Communication Manager ICM. SAP applications help organizations manage critical business processes—such as...
Mitsubishi IU1 Argument Injection (CVE-2020-5546)
Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows an attacker on the same network segment to stop the network functio...
The vulnerability of the centralized system for managing emergency messages and events in CAMS for HIS distributed control systems CENTUM VP and CENTUM VP Entry Class, along with the OPC-server Exaopc, allows a intruder to cause service failures or modify the log files on the server.
The vulnerability of the centralized system for managing emergency messages and events in CAMS for HIS distributed control systems CENTUM VP and CENTUM VP Entry Class, along with the OPC-server Exaopc, stems from improper processing of output data for registration logs. Exploiting this...
The vulnerability of Juniper Networks Junos OS routers in the QFX5000 and EX4600 series, related to a memory release error, allows a hacker to trigger a service failure.
The vulnerability of Juniper Networks Junos OS routers in the QFX5000 and EX4600 series is related to a memory release error during the processing of incoming IPv6 packets. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
Kronos Still Dragging Itself Back From Ransomware Hell
Remember when Kronos, the workforce-management workhorse, got whacked by ransomware in December, right in time to gum up end-of-year HR busywork such as bonuses and vacation tracking? Could take days to crawl back, Ultimate Kronos Group UKG said at the time. Or, then again, could take up to sever...
KP Snacks Left with Crumbs After Ransomware Attack
KP Snacks, maker of the high-end Tyrrell’s and Popchips potato-chip brands, has suffered a ransomware attack that it said could affect deliveries to supermarkets through the end of March – at the earliest. The British company also the purveyor of deeply English treats such as Skips prawn cocktail...
[updated]Cyberattack on fuel supplier causes supply chain disruption
A cyberattack has disrupted the activities in Germany of fuel supplier Oiltanking Deutschland GmbH & Co. KG. The supplier is, among others, responsible for deliveries to the thousands of Shell and Aral gas stations in Germany. The Oiltanking division of Hamburg-based Marquard & Bahls owns and...
The vulnerability of operating systems such as iOS, iPadOS, tvOS, watchOS, and macOS, related to writing beyond the buffer in memory, allows attackers to access confidential information or cause service failures.
The vulnerability of operating systems such as iOS, iPadOS, tvOS, watchOS, and macOS is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...
The vulnerability of the nf_tables_newset function (net/netfilter/nf_tables_api.c) in Linux operating system kernels, which allows a hacker to cause a service failure
The vulnerability of the nftablesnewset function net/netfilter/nftablesapi.c in Linux operating systems is related to memory initialization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
Denial Of Service (DoS)
openjdk1 is vulnerable to denial of service. The vulnerability exists due to improper input validation in the ImageIO component allows attacker to perform service disruption...
Denial Of Service (DoS)
openjdk1 is vulnerable to denial of service. The vulnerability exists due to improper input validation in the ImageIO component allows attacker to perform service disruption...
CVE-2021-44414
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. DelUser param is not object. An attacker can send an HTTP request to trigger this vulnerability...
Conti, DeadBolt Target Delta, QNAP
Two Taiwanese companies were affected by separate ransomware incidents this week, forcing one to scramble to restore crippled systems and another to push out an emergency update to mitigate attacks on its customers. Delta Electronics, an electronics company that provides products for Apple, Tesla...
OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646)
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows...
DDoS attacks on Minecraft event crippled the internet of a European country
By Waqas The series of DDoS attacks took place during a live online gaming event titled "SqiudCraft" inspired by Netflixs… This is a post from HackRead.com Read the original post: DDoS attacks on Minecraft event crippled the internet of a European country...
The vulnerability of the built-in software on NETGEAR Wi-Fi routers such as DC112A, R6400, RAX200, WNDR3400v3, XR300, R8500, RAX75, R8300, and RAX80 lies in the copying of buffers without checking the size of the input data. This allows a malicious actor to execute arbitrary code or cause a service failure.
The vulnerability of the built-in software on NETGEAR Wi-Fi routers such as DC112A, R6400, RAX200, WNDR3400v3, XR300, R8500, RAX75, R8300, and RAX80 lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute...
The vulnerability of the SProcRenderCompositeGlyphs function in the X Window System X.Org Server implementation allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the SProcRenderCompositeGlyphs function in the X Window System X.Org Server implementation is related to the execution of operations that exceed the permissible buffer data limits. Exploiting this vulnerability can allow attackers to access confidential data, compromise its...
The vulnerability of the built-in software on NETGEAR Wi-Fi routers such as D8500, R6250, R7000, R7100LG, R7900, R8300, R8500, XR300, R7000P, and R6900 lies in the copying of buffers without checking the size of the input data. This allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of NETGEAR Wi-Fi router software models such as D8500, R6250, R7000, R7100LG, R7900, R8300, R8500, XR300, R7000P, and R6900P lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary co...
The vulnerability of NETGEAR R8000 Wi-Fi routers’ microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of NETGEAR R8000 Wi-Fi routers’ microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary codes remotely...
The vulnerability of microprogrammed Wi-Fi router software from NETGEAR models D6220, D6400, D7000v2, D8500, DC112A, EX7000, EX7500, R6250, R6300v2, R6400, R6400v2, R6700v3, R7000, R7100LG, R7850, R7900, R7960P, R8000, RAX200, RBS40V, RS400, XR300, R7000P, R8000P, R8500, RAX80, R6900P, R7900P, R8300, RAX75, RBR750, RBR850, RBS750, RBS850, RBK752, RBK852 lies in the copying of buffers without checking the size of the input data. This allows a malicious actor to cause malfunctions or execute arbitrary code.
The vulnerability of Wi-Fi router microprogramming systems from NETGEAR, including models D6220, D6400, D7000v2, D8500, DC112A, EX7000, EX7500, R6250, R6300v2, R6400, R6400v2, R6700v3, R7000, R7100LG, R7850, R7900, R7960P, R8000, RAX200, RBS40V, RS400, XR300, R7000P, R8000P, R8500, RAX80, R6900P,...