The vulnerability of the ifilter_bank() function in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a intruder to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of the ifilterbank function in the Freeware Advanced Audio Decoder 2 FAAD2 is related to an error that causes a NULL pointer dereferencing. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and...

The vulnerability of the JCE component of the Java SE software platform, which allows a hacker to trigger a service failure

The vulnerability of the JCE component of the Java SE software platform is related to lack of access control. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

The vulnerability of the mkv::event_thread_t() function in the VideoLAN VLC media player software allows a attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the mkv::eventthreadt function in the VideoLAN VLC media player software is related to a buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and even cause service...

Pitney Bowes Hit with Ransomware Attack

Shipping services company Pitney Bowes was hit with a ransomware attack that disrupted customer access to key services, the company said Monday. The attack comes on the heels of an FBI advisory on Oct. 2 that U.S. companies should be on alert for ransomware attacks, which are increasing in...

Vulnerability of the Server component:locking of the Oracle MySQL Server database management system, allowing attackers to cause service interruptions.

The vulnerability of the Server component: Locking the Oracle MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

Vulnerability of the Server: Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the Oracle MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

Delivering Intrinsic, Intelligent and Informed Security: VMware Completes Acquisition of Carbon Black

Editor's Note: This blog also appears on VMware's Newsroom. We are delighted to announce that VMware has completed its acquisition of endpoint security leader Carbon Black. With this move, VMware is launching a new Security Business Unit under the leadership of Patrick Morley, who has led Carbon...

Partner Perspectives: Disrupt Advanced Threats with Blumira + Carbon Black

Matt Warner is the CTO of Blumira. Modern security challenges are not easy to fix or even identify, and despite misleading advertising from some vendors, there is no one-size-fits-all solution. Blumira frequently observes large visibility gaps in existing security implementations, allowing obviou...

The vulnerability of the SIP protocol implementation in Cisco IOS and Cisco IOS XE operating systems allows a attacker to trigger a service failure.

The vulnerability of the SIP protocol implementation in Cisco IOS and Cisco IOS XE operating systems is related to the handling of the zero pointer. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted SIP packets...

The vulnerability of the RADIUS Change of Authorization (CoA) function in the Cisco TrustSec network security management system allows a perpetrator to trigger a service failure.

The vulnerability of the RADIUS Change of Authorization CoA function in the Cisco TrustSec network security system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the InnoDB component in the MySQL Server database management system allows a attacker to cause service interruptions.

The vulnerability of the InnoDB component in the MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the InnoDB component of the MySQL Server database management system allows a attacker to cause a service failure.

The vulnerability of the InnoDB component in the MySQL Server database management system is related to the improper release of resources. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

The vulnerability of the m_cat function in the QEMU hardware emulation software allows a perpetrator to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the mcat function in the QEMU hardware emulation software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures...

The vulnerability of the fly-admin-ftp component in the FLY operating environment of the Astra Linux system, related to improper access control, allows a intruder to trigger a service failure.

The vulnerability of the ftp fly-admin-ftp component in the FLY operating environment of the Astra Linux system is related to the absence of changes in the access parameters for the root user directory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the fly-admin-local-se component in the FLY operating system of the Astra Linux platform allows a attacker to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of the fly-admin-local-se component in the FLY operating system of Astra Linux is related to logging errors when changing user privileges, as well as errors in creating rules for devices with the same name. Exploiting this vulnerability can allow attackers to compromise data...

The vulnerability of the task scheduler fly-admin-cron in the FLY operating system of Astra Linux allows a perpetrator to access confidential data, compromise its integrity, and cause service failures due to improper handling of registration data.

The vulnerability of the task scheduler fly-admin-cron in the FLY environment of the Astra Linux operating system is related to an incorrect definition of the user performing the task editing operations. Exploiting this vulnerability allows a remote attacker to gain access to confidential data,...

The vulnerability of Blink’s web page display mechanism in the Google Chrome web browser allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of Blink’s web page rendering mechanism in the Google Chrome browser is related to the reutilization of dynamic memory after it is freed by a “trash collector”. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protecte...

The vulnerability of the fly-admin-printer print manager in the FLY operating system of Astra Linux allows a attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the fly-admin-printer print manager in the FLY operating system of Astra Linux is related to errors in processing empty tasks, as well as errors in renaming the printer. Exploiting this vulnerability allows a remote attacker to compromise data integrity, gain unauthorized...

The vulnerability of the set_geometry function (drivers/block/floppy.c) in the Linux operating system, which allows a hacker to cause a service failure or disclose sensitive information

The vulnerability of the setgeometry function drivers/block/floppy.c in the Linux kernel is caused by integer overflow and reading of data beyond the buffer’s boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure or disclose sensitive information...

The vulnerability of the png_image_free function in the PNG bitmap handling library libpng, which allows a hacker to cause a service failure.

The vulnerability of the pngimagefree function in the PNG bitmap handling library libpng is related to the call to the freed memory area by the destructor of pngimagefreefunction. Exploiting this vulnerability could allow an attacker to cause a service failure...