Molson Coors Cracks Open a Cyberattack Investigation

Another high-profile company has been hit with a cyber attack that’s causing a major disruption to its business. Brewing company Molson Coors acknowledged on Thursday that it has “experienced a systems outage that was caused by a cybersecurity incident,” according to a Form 8-K filed with the SEC...

OVH cloud datacenter destroyed by fire

A fire in one of the OVH datacenters has destroyed one datacenter and knocked two others offline. It took 100 firefighters and 43 fire trucks to fight the fire in the five-story building. Even though the fire department was quick to respond, and the fire was brought under control relatively...

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. F5 BIGIP Appliance mode AWAF/ASM TMUI remote command execution vulnerability, the vulnerability allows users with elevated...

NewStart CGSL CORE 5.04 / MAIN 5.04 : subversion Vulnerability (NS-SA-2021-0042)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has subversion packages installed that are affected by a vulnerability: - In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only...

Vulnerability of the FloydSteinbergDitheringC() function (contrib/gdevbjca.c) in the software for processing, converting, and generating Ghostscript documents, allowing a hacker to trigger a service failure

The vulnerability of the FloydSteinbergDitheringC function contrib/gdevbjca.c in the software for processing, transforming, and generating Ghostscript documents is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptio...

The vulnerability of the epsc_print_page() function (device/gdevepsc.c) in the software suite for processing, transforming, and generating Ghostscript documents, allowing a hacker to trigger a service failure.

The vulnerability of the epscprintpage function device/gdevepsc.c in the software suite for processing, transforming, and generating Ghostscript documents is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pj_common_print_page() function (device/gdevpjet.c) in the software suite for processing, transforming, and generating Ghostscript documents, related to buffer overflow, allows an attacker to trigger a service failure.

The vulnerability of the pjcommonprintpage function device/gdevpjet.c in the software suite for processing, transforming, and generating Ghostscript documents is related to buffer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2021-5764 · Htmldoc +5 · Htmldoc +5

Name of the Vulnerable Software and Affected Versions: htmldoc versions 1.9.11 and earlier Description: The issue is related to an integer overflow that may allow attackers to execute arbitrary code and cause a denial of service. Exploitation of this issue can allow a remote attacker to access...

Dell SRS Policy Manager XML External Entity Injection Vulnerability

Dell SRS Policy Manager is an application from Dell USA. It provides Dell policy management features. A security vulnerability exists in SRS Policy Manager 6.X. The vulnerability stems from a misconfigured XML parser that fails to perform sufficient validation when processing user-supplied DTD...

CVE-2021-22296

A component of HarmonyOS 2.0 has a DoS vulnerability. Local attackers may exploit this vulnerability to mount a file system to the target device, causing DoS of the file system...

The vulnerability in the function of the file srs2.c in the PostSRSd package allows a hacker to cause a service failure.

The vulnerability in the srs2.c file of the PostSRSd package involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause a service failure consumption of computing resources by using a tag with a time stamp in the SRS address...

The vulnerability of the process-interaction channel of the Cisco AnyConnect Secure Mobility Client encryption protection tool allows a intruder to trigger a service failure.

The vulnerability of the process-interaction channel of the Cisco AnyConnect Secure Mobility Client cryptographic security tool is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the .NET Framework log4net logging library, related to errors in restricting XML references to external objects (XXE), allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the logging library for the .NET Framework log4net is related to errors caused by XML references to external objects XXE. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

CVE-2021-21517

SRS Policy Manager 6.X is affected by an XML External Entity Injection XXE vulnerability due to a misconfigured XML parser that processes user-supplied DTD input without sufficient validation. A remote unauthenticated attacker can potentially exploit this vulnerability to read system files as a...

Dell SRS Policy Manager 代码问题漏洞

Dell SRS Policy Manager is an application from Dell USA. It provides Dell policy management features. A security vulnerability exists in SRS Policy Manager 6.X. The vulnerability stems from a misconfigured XML parser that fails to perform sufficient validation when processing user-supplied DTD...

Podcast: Ransomware Attacks Exploded in Q4 2020

Ransomware attacks continue to plague companies, with researchers from Fortinet’s Fortiguard Labs saying they saw an explosion in ransomware activity towards the end of the fourth quarter of 2020. Derek Manky According to Fortinet’s new “FortiGuard Labs Threat Report: Disruption Key Threat Trend ...

Nexus Series Fabri Access Control Error Vulnerability

Cisco Nexus 9000 Series Fabric Switches is a 9000 series fiber optic switch from Cisco USA. A security vulnerability exists in the Nexus 9000 Series Fabri that can be exploited by an attacker to disable switching on SFP interfaces, which could disrupt the network...

The vulnerability of the authentication interface in Junos operating system routers of the EX, QFX, and SRX series allows a attacker to cause a service failure.

The vulnerability of the 802.1X authentication interface in Junos routing devices of the EX, QFX, and SRX series is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2021-21517

SRS Policy Manager 6.X is affected by an XML External Entity Injection XXE vulnerability due to a misconfigured XML parser that processes user-supplied DTD input without sufficient validation. A remote unauthenticated attacker can potentially exploit this vulnerability to read system files as a...

PT-2021-2161 · Cisco · Cisco Nexus 9000 Series Fabric Switches

Name of the Vulnerable Software and Affected Versions: Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI mode affected versions not specified Description: A vulnerability in the Link Layer Discovery Protocol LLDP could allow an unauthenticated, adjacent attacker to disab...