UDP based applications may get affected when traffic processing is disabled on the SDWAN

On the video conference tool based of IPSEC UDP, Master node isn't able to see the remote nodes sitting behind the SDWAN-WanOP. This tool uses dynamic IPSEC tunnels over the WAN and passes through our WanOP...

CVE-2018-5243

The Symantec Encryption Management Server SEMS product, prior to version 3.4.2 MP1, may be susceptible to a denial of service DoS exploit. A DoS attack is a type of attack whereby the perpetrator attempts to make a particular machine or network resource unavailable to its intended users by...

Palo Alto Networks PAN-OS Denial of Service Vulnerability (CNVD-2018-18131)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A denial of service vulnerability exists in the PAN-OS management web interface in Palo Alto Networks PAN-OS 8.1.2 and prior versions. An attacker can exploit this vulnerability to...

The vulnerability of the SuperCluster Virtual Assistant component of the Oracle SuperCluster software platform allows a perpetrator to gain unauthorized access to protected data or cause service failures.

The vulnerability of the SuperCluster Virtual Assistant component of the Oracle SuperCluster-specific software is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected data, causing system crashes or unexpected...

The vulnerability of the API components of Sun ZFS Storage Appliance Kit allows a perpetrator to gain unauthorized access to protected data or cause service failures.

The vulnerability of the API components of Sun ZFS Storage Appliance Kit AK is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data or cause service failures using network protocols...

The vulnerability of the NVIDIA-GFX Kernel driver for the Solaris operating system allows a perpetrator to gain unauthorized access to protected data or cause service failures.

The vulnerability of the NVIDIA-GFX Kernel driver for the Solaris operating system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected data and cause service failures using ISCSI...

The vulnerability of the Outside In Filters component of the software development kit (SDK) provided by Outside In Technology allows a perpetrator to gain unauthorized access to protected data or cause service failures.

The vulnerability of the Outside In Filters component within the software development kit SDK of Outside In Technology is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data or...

The vulnerability of the Outside In Filters component of the software development kit (SDK) provided by Outside In Technology allows a perpetrator to gain unauthorized access to protected data or cause service failures.

The vulnerability of the Outside In Filters component within the software development kit SDK of Outside In Technology is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data or...

The vulnerability of the Outside In Filters component of the software development kit (SDK) provided by Outside In Technology allows a perpetrator to gain unauthorized access to protected data or cause service failures.

The vulnerability of the Outside In Filters component within the software development kit SDK of Outside In Technology is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected data or cause service failures...

The vulnerability of the Outside In Filters component of the software development kit (SDK) provided by Outside In Technology allows a perpetrator to gain unauthorized access to protected data or cause service failures.

The vulnerability of the Outside In Filters component within the software development kit SDK of Outside In Technology is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected data or cause service failures...

The vulnerability of the Outside In Filters component of the software development kit (SDK) provided by Outside In Technology allows a perpetrator to gain unauthorized access to protected data or cause service failures.

The vulnerability of the Outside In Filters component within the software development kit SDK of Outside In Technology is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data or...

Threatlist: Manufacturing, a Top Target for Espionage

When it comes to cyberattack-related reconnaissance and lateral movement activity, the manufacturing industry exhibits higher than normal rates. That’s according to Vectra’s 2018 Spotlight Report on Manufacturing, which crunched data from more than 4 million devices and workloads from customer...

Oracle Hospitality Applications Hospitality Simphony Component Access Control Error Vulnerability

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle. Hospitality Simphony is one of the cloud-based hotel management components. An access control error vulnerability exists in the Oracle Hospitality Applications...

The vulnerability of the pktmnglr_ipfilter_input function in the kernel of operating systems such as Mac OS X, iOS, tvOS, and watchOS allows a malicious actor to execute arbitrary code with kernel privileges or cause a service failure.

The vulnerability of the pktmnglripfilterinput function in the kernel of operating systems such as Mac OS X, iOS, tvOS, and watchOS is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code with kernel privileges or cause a service failur...

CVE-2018-1288

In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss...

CVE-2018-5537

A remote attacker may be able to disrupt services on F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 if the TMM virtual server is configured with a HTML or a Rewrite profile. TMM may restart while processing some specially prepared HTML content from the back end...

OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Concurrency. Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated...

F5 BIG-IP Denial of Service Vulnerability (CNVD-2019-19065)

F5 BIG-IP is an all-in-one network appliance that integrates network traffic management, application security management, load balancing and other functions from F5 USA. A denial-of-service vulnerability exists in the F5 BIG-IP, which can be exploited by a remote attacker to cause the...

Microsoft Says Russia Tried to Hack Three 2018 Midterm Election Candidates

Microsoft said it detected and helped the US government to block Russian hacking attempts against at least three congressional candidates this year, a Microsoft executive revealed speaking at the Aspen Security Forum today. Although the company refused to name the targets but said, the three...

The vulnerability of the IOHIDFamily component of the Mac OS X operating system allows a perpetrator to execute arbitrary code with kernel privileges or cause a service failure.

The vulnerability of the IOHIDFamily component in the Mac OS X operating system is caused by a buffer overflow in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code with kernel privileges or cause a service failure using a specially created application...