The vulnerability of the SMBv2 component of the Windows operating system allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the SMBv2 component of the Windows operating system is related to errors in code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

The vulnerability of Adobe Acrobat’s PDF editing software, related to errors in code generation, allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the Adobe Acrobat PDF editing program is related to errors in code generation. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service interruptions...

The vulnerability of the SMBv2 component of the Windows operating system, which allows a hacker to trigger a service failure

The vulnerability of the SMBv2 component of the Windows operating system is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

FBI warns of ransomware threat to food and agriculture

The FBI has issued a Private Industry Notification PIN about cybercriminal actors targeting the food and agriculture sector with ransomware attacks. Farms are literally the first step in one of the most important, if not the most important, supply chain in our economy: The food supply chain. As...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the manipulation of the null pointer, allowing attackers to trigger service interruptions.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the handling of the null pointer. Exploiting these vulnerabilities can allow...

How to stay secure from ransomware attacks this Labor Day weekend

Labor Day weekend is just around the corner and, believe it or not, cybercriminals are likely just as excited as you are! Ransomware gangs have nurtured a nasty habit of starting their attacks at the least convenient times: When computers are idle, when employees who might notice a problem are ou...

F5 BIG-IP Advanced WAF and ASM WebSocket Denial of Service Vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in the F5 BIG-IP Advanced WAF and ASM WebSocket, which originates from the BIG-IP...

CVE-2021-1523

A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI Mode could allow an unauthenticated, remote attacker to cause a queue wedge on a leaf switch, which could result in critical control plane traffic to the device being dropped. This could result in...

CVE-2021-21778

A denial of service vulnerability exists in the ASDU message processing functionality of MZ Automation GmbH lib60870.NET 2.2.0. A specially crafted network request can lead to loss of communications. An attacker can send an unauthenticated message to trigger this vulnerability...

F5 BIG-IP Advanced WAF and ASM TMUI is vulnerable to unspecified vulnerabilities

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. An unspecified vulnerability exists in the F5 BIG-IP Advanced WAF and ASM TMUI, which, when cracked, allows an authenticated...

The vulnerability in the driver/net/ethernet/xilinx/ll_temac_main.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/ethernet/xilinx/lltemacmain.c component of the Linux operating system is related to buffer overflow vulnerabilities. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

The vulnerability of the Apache Commons Compress library, related to the allocation of unlimited memory, allows attackers to cause a service failure.

The vulnerability of the Apache Commons Compress library is related to the allocation of unlimited memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using specially created TAR format files...

The vulnerability of the uv__idna_toascii() function on the Node.js software platform, which allows a malicious actor to gain unauthorized access to protected information or cause service failure.

The vulnerability of the uvidnatoascii function on the Node.js platform is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or cause service failures...

Unix Software Discovery Commands Not Available

Nessus found problems running commands on the target host which are used to find software that is not managed by the operating system. Details of the issues encountered are reported by this plugin. Failure to properly execute commands used to find and characterize unmanaged software on the target...

The vulnerability of the microprogramming software of the modular controller for transformer substations automation by Schneider Electric Easergy T300 RTU, related to access control deficiencies, allows a intruder to gain unauthorized access to protected information, cause service failures, or execute arbitrary commands.

The vulnerability of the microprogrammed control module software for Schneider Electric Easergy T300 RTU-based transformer automation systems is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to...

The vulnerability of the PostgreSQL database management system lies in the lack of measures taken to protect SQL query structures. This allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of the PostgreSQL database management system is related to the lack of measures taken to protect SQL query structures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or cause service failures by using...

Cloudflare mitigated one of the largest DDoS attack involving 17.2 million rps

Web infrastructure and website security company Cloudflare on Thursday disclosed that it mitigated the largest ever volumetric distributed denial of service DDoS attack recorded to date. The attack, launched via a Mirai botnet, is said to have targeted an unnamed customer in the financial industr...

The vulnerability of NTP protocol implementations allows attackers to induce service failures.

The vulnerability of NTP synchronization protocol implementations exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger a service failure ntpd daemon failure due to an invalid value in the :config directive...

The vulnerability of the d2alaw_array() function in the SI libsndfile library, which involves reading data beyond the permissible buffer size, allows an attacker to access confidential data and also cause a service failure.

The vulnerability of the d2alawarray function in the SI libsndfile library is related to reading data beyond the permissible buffer size. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and also cause service interruptions...

The vulnerability of the Microsoft Malware Protection Engine’s antivirus kernel, related to access control deficiencies, allows attackers to escalate their privileges or cause service failures.

The vulnerability of the Microsoft Malware Protection Engine’s antivirus kernel is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges or cause service interruptions...