The vulnerability of the do_hidp_sock_ioctl function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the dohidpsockioctl function in the Linux kernel’s net/bluetooth/hidp/sock.c file arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Chassis Manager (CMLC) component of the JunOS operating system, which allows a hacker to trigger a maintenance failure.

The vulnerability of the Chassis Manager CMLC component in the JunOS operating system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

CVE-2018-11782

In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only request produces a particular answer. This can lead to disruption for users of the server...

CVE-2019-0203

In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a client sends certain sequences of protocol commands. This can lead to disruption for users of the server...

CVE-2018-11782

In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only request produces a particular answer. This can lead to disruption for users of the server...

Nation-State Actors Go All-In on Mobile Malware

APTs, including a range of nation-state groups operating in China, North Korea, Pakistan and Russia, are shifting their malware development focus to target mobile users for intelligence gathering, financial gain and disruption of national rivals. That’s according to CrowdStrike’s Mobile Threat...

The vulnerability of the Java VM component of the Oracle Database Server management system allows a hacker to gain access to modify, add, or delete data, or to cause service failures.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to modify, add, or delete data, or cause service interruptions...

The vulnerability of Google Chrome, related to font sizes, allows attackers to gain unauthorized access to protected information or cause service interruptions.

The vulnerability of Google Chrome is related to the size of the font used. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information or cause a service failure through a specially crafted web page...

The vulnerability of the SymCrypt library in the Windows operating system, related to errors in digital signature verification, allows a perpetrator to trigger a service failure.

The vulnerability of the SymCrypt library in the Windows operating system is related to errors in digitized signatures. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

CVE-2019-2854

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2019-2831

Vulnerability in the PeopleSoft Enterprise FIN Project Costing component of Oracle PeopleSoft Products subcomponent: Projects. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

The vulnerability in the web-based management interfaces of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers allows a attacker to cause service interruptions.

The vulnerability in the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router web management interfaces is related to authentication process errors. Exploiting this vulnerability can allow an attacker to disable clients...

RANGER Studio Directus License Issue Vulnerability

RANGER Studio Directus is a set of open source headless CMS and API for managing custom databases from RANGER Studio, U.S.A. The Directus API is one of the components that can add a RESTful API layer to new or existing SQL databases. An authorization issue vulnerability exists in the Directus 7...

The vulnerability of the goldendict software package for the Astra Linux operating system arises from a validation error in the input data received from web servers. This error allows attackers to trigger a service failure.

The vulnerability of the goldendict software package for the Astra Linux operating system is related to a validation error in the input data received from web servers. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Kazakhstan Begins Intercepting HTTPS Internet Traffic Of All Citizens Forcefully

If you are in Kazakhstan and unable to access the Internet service without installing a certificate, you're not alone. The Kazakhstan government has once again issued an advisory to all major local Internet Service Providers ISPs asking them to make it mandatory for all their customers to install...

The vulnerability of the gsskrb5_extract_authz_data_from_sec_context_ex function in the gssapi module of the Secret Net Studio security system allows a attacker to cause a service failure.

The vulnerability of the gsskrb5extractauthzdatafromseccontextex function in the gssapi module of the Secret Net Studio security system is related to the lack of checks for the execution of the memory allocation command. Exploiting this vulnerability could allow a remote attacker to cause service...

The vulnerability of the _asn1_expand_object_id function (p_tree) in the Libtasn1 library of the Debian GNU/Linux operating system, related to resource management errors, allows a perpetrator to cause a service failure.

The vulnerability of the asn1expandobjectid function in the Libtasn1 library for the Debian GNU/Linux operating system is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PT-2019-16514 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.16 and prior Description: The issue affects the MySQL Server component, specifically the InnoDB subcomponent. It allows a high-privileged attacker with network access via multiple protocols to compromise the MySQL...

The vulnerability of the IRC client Irssi for the Ubuntu operating system relates to the use of memory after it is freed when sending SASL logs to the server. This allows a malicious user to cause a service failure or execute arbitrary code.

The vulnerability of the IRC client Irssi for the Ubuntu operating system relates to the use of memory after it is freed when sending SASL login information to the server. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

The vulnerability of the software-hardware protection system VipNet Coordinator HW allows a perpetrator to trigger an emergency shutdown of the system or execute arbitrary code.

The vulnerability of the MFTPD software-based information protection system, implemented by the VipNet Coordinator HW, exists due to incorrect processing of the F field in the OFS command. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a crash, thereby...