8289 matches found
CVE-2019-6598
In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise Manager 3.1.1, malformed requests to the Traffic Management User Interface TMUI, also referred to as the BIG-IP Configuration utility, may lead to disruption of TMUI services. This attack...
The vulnerability in the web interface of software for network monitoring in Cisco Network Assurance Engine allows a perpetrator to disclose protected information or cause service failures.
The vulnerability of the software web interface for network monitoring in the Cisco Network Assurance Engine lies in the use of pre-installed credentials. Exploiting this vulnerability can allow attackers to disclose sensitive information or cause service failures...
The vulnerability of the libparsec-mac-qt5 library, used for developing graphical applications with Qt 5 graphical interfaces on the Astra Linux operating system, allows a hacker to cause a service failure.
The vulnerability of the libparsec-mac-qt5 library for developing graphical applications using Qt 5 graphical interfaces on the Astra Linux operating system is related to a flaw that causes excessive load when there are a large number of domain users. Exploiting this vulnerability may allow a...
The vulnerability of the union data structure interpretation in Xen hypervisors, related to background data corruption, allows attackers to cause service failures or increase their privileges within the system.
The vulnerability of the union data structure interpretation in Xen hypervisors is related to errors during data underpressure situations. Exploiting this vulnerability can allow attackers to cause service failures or increase their privileges within the system...
F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K44603900)
Malformed requests to the Traffic Management User Interface TMUI, also referred to as the BIG-IP Configuration utility,may lead to disruption of TMUI services. This attack requires an authenticated user with any role other than the No Access role. The No Access user role cannot login and does not...
The vulnerability of the HTTP/2 server implementation in nginx allows a attacker to trigger a service failure.
The vulnerability of the HTTP/2 server implementation based on nginx is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
Vulnerability in Firefox web browsers, Firefox ESR, and the Thunderbird email program, related to accessing freed memory cells, allowing attackers to trigger a service failure.
The vulnerability in web browsers Firefox, Firefox ESR, and the email processing program Thunderbird relates to the release of a static flow analyzer object during use. Exploiting this vulnerability can allow an attacker to cause service interruptions using specially crafted HTML5 content with...
The vulnerability of the QXMLStreamReader function in the QXmlStream component of the cross-platform software development framework for Qt allows a perpetrator to cause a system failure or gain unauthorized access to information.
The vulnerability of the QXMLStreamReader function in the QXmlStream component of the cross-platform software development framework for Qt is related to double memory deallocation. Exploiting this vulnerability can allow an attacker to cause service failures or gain unauthorized access to...
The vulnerability of the `archive_le32dec` function in the libarchive library, which allows a hacker to trigger a service failure.
The vulnerability of the archivele32dec function in the archiveendian.h header file of the libarchive library is related to overflow in the dynamic buffer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through the use of a specially created file...
The vulnerability of the kernel of Linux and FreeBSD systems lies in errors in the algorithms used for reassembling packages in TCP stacks, which allows a hacker to cause a service failure.
The vulnerability of the kernel of Linux and FreeBSD systems is related to errors in the algorithms used for repackaging packages in TCP stacks. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially crafted traffic...
The vulnerability of the WkbProgramLow function in the WibuKey Network Server Management security tool allows a hacker to trigger a service failure.
The vulnerability of the WibuKey Network Server Management security software in the WkbProgramLow function is related to buffer overflow. Exploiting this vulnerability could allow a malicious actor to cause service interruptions and potentially execute arbitrary code, using specially crafted...
Payroll Provider Gives Extortionists a Payday
Payroll software provider Apex Human Capital Management suffered a ransomware attack this week that severed payroll management services for hundreds of the company's customers for nearly three days. Faced with the threat of an extended outage, Apex chose to pay the ransom demand and begin the...
CVE-2019-1684
A vulnerability in the Cisco Discovery Protocol or Link Layer Discovery Protocol LLDP implementation for the Cisco IP Phone 7800 and 8800 Series could allow an unauthenticated, adjacent attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service DoS...
The vulnerability of the Solaris operating system’s kernel, which allows a hacker to modify data or cause service interruptions.
The vulnerability of the Solaris operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to modify, add, or delete data, or cause service failures...
The vulnerability of the Foundation UI & Servlets component of the Hyperion BI+ event service allows a perpetrator to gain read access to data, modify data, or cause a partial service failure.
The vulnerability of the Foundation UI & Servlets component of the Hyperion BI+ service is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain read, modify, add, or delete access to data, or cause a partial service outage through HTTP...
The vulnerability of the SwCTBWrapper function:: Read in the LibreOffice office software package allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the SwCTBWrapper function in the LibreOffice office software package’s installer is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using a specially crafted file...
Ncat TLS Listener
This host seems to be running an instance of Ncat that is listening over TLS. Ncat is an open source networking tool that can be used as a backdoor to allow unauthorized entry and control of the remote host An attacker may use it to steal your passwords, modify your data, and prevent you from...
The vulnerability of the software for processing, transforming, and generating Ghostscript documents, related to errors in the code, allows a perpetrator to execute arbitrary code or cause service failures.
The vulnerability of the software for processing, transforming, and generating Ghostscript documents is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or trigger a service failure using a specially crafted PostScript file...
The vulnerability of the SwCTBWrapper function:: Read in the LibreOffice office software package allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the SwCTBWrapper function in the LibreOffice office software package’s installer is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions using a specially crafted file...
The vulnerability of Avahi-daemon, a service for discovering services in a local network, allows attackers to expose sensitive information or cause service failures.
The vulnerability of Avahi-daemon, a service for discovering services in a local network, is related to lack of access control. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information or cause service failures...