The vulnerability of the applyilters() function in the HDF5 library, which allows a hacker to cause a service failure

The vulnerability of the applyilters function h5repackfilters.c in the HDF5 library is related to a division by zero error. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the ReadGifImageDesc() function (gifread.c) in the HDF5 library, which allows a hacker to cause a service failure

The vulnerability of the ReadGifImageDesc function in the HDF5 library arises from the occurrence of operations outside the buffer’s boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using a specially crafted HDF5 file...

The vulnerability of the remap_struct function in the sysstat system monitoring and analysis tool allows a attacker to execute arbitrary code or cause service interruptions.

The vulnerability of the remapstruct function in the sysstat system performance monitoring and analysis utility arises from reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure...

The vulnerability of the sshd server functions of the OpenSSH cryptographic protection mechanism, which allows a hacker to cause a service failure.

The vulnerability of the sshd server functions kex.c and packet.c in the OpenSSH cryptographic protection mechanism exists due to a bug that causes the null pointer to be reassigned when processing an emergency message NEWKEYS. Exploiting this vulnerability could allow a remote attacker to cause ...

The vulnerability of the Squid proxy server, related to accessing beyond the allocated buffer memory, allows attackers to cause a service failure.

The vulnerability of the Squid proxy server is related to an error that causes data to exceed the allocated memory buffer when processing ESI responses or loading certificates from intermediate certification centers. Exploiting this vulnerability can allow a malicious actor to cause service...

The vulnerability of the OpenSSL library, related to stack overflow, allows a hacker to cause a service failure.

The vulnerability of the OpenSSL library lies in the fact that complex ASN.1 types with recursive definitions may cause a stack overflow. Exploiting this vulnerability could allow an attacker to induce a service failure...

The vulnerability of the django.utils.html.urlize function, as well as the chars and words methods of the django.utils.text.Truncator object in the Django web application framework, allows attackers to trigger a denial-of-service attack.

The vulnerability of the django.utils.html.urlize function, as well as the chars and words methods of the django.utils.text.Truncator object in the Django web application framework, lies in the fact that when control over input data is possible, a malicious attacker can create a string that will...

The vulnerability of the UDP protocol implementation in the Net-SNMP software suite allows a attacker to cause service failures, gain access to confidential data, or compromise the integrity of that data.

The vulnerability of the UDP protocol implementation in the Net-SNMP software suite is related to memory-related errors during the processing of the UDP protocol. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the GNU Patch Unix utility lies in insufficient validation of input data. This allows a perpetrator to cause service failures, gain access to confidential data, or compromise the integrity of that data.

The vulnerability of the GNU Patch software tool is related to its support for working with patches in the outdated “ed” format. This format allows for the execution of external commands using the “!” operator. Exploiting this vulnerability can enable a remote attacker to execute arbitrary code...

The vulnerability of the `pack` function in the Perl interpreter allows attackers to cause service failures, gain access to confidential data, or compromise its integrity.

The vulnerability of the pack function in the Perl interpreter is related to an error that causes overflow in the dynamic memory when writing data to it during operations involving a large number of elements within the pack function. Exploiting this vulnerability allows a remote attacker to execu...

The vulnerability of the multimedia library libvorbis, related to the escape from memory buffer reading, allows attackers to cause service failures or compromise data confidentiality and integrity.

The vulnerability of the multimedia library libvorbis is related to an error that causes reading beyond the allocated buffer memory space. Exploiting this vulnerability can allow a malicious actor to cause service failures or compromise data confidentiality and integrity through the use of...

Denial of Service Vulnerability in Multiple Rockwell Automation Products

Rockwell Automation MicroLogix 1400 Controllers Series A and others are programmable logic controllers from Rockwell Automation. A security vulnerability exists in several Rockwell Automation products that stems from a lack of authentication in the program. An attacker could exploit this...

The vulnerability of the Simple Network Management Protocol packet processor in the Cisco NX-OS operating system allows a attacker to trigger a service failure.

The vulnerability of the Simple Network Management Protocol SNMP packet handler in the Cisco NX-OS operating system arises due to errors in the data block verification of the SNMP protocol. Exploiting this vulnerability can allow a malicious actor to perform a reboot on the device remotely...

The vulnerability of the RSLinx Classic communication server arises from the execution of operations beyond the buffer boundaries in memory, allowing attackers to cause service failures.

The vulnerability of the RSLinx Classic communication server lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending a specially crafted CIP packet to port 44818...

The vulnerability of the DLL component of Cisco AMP’s security tools for end devices allows a malicious actor to disable the security services and system scanning functions.

The vulnerability of the DLL component used by Cisco AMP’s security tools for end devices relates to resource management errors. Exploiting this vulnerability allows a malicious actor to remotely disable security services and system scanning services using a specially crafted DLL file...

IBM MQ Console REST API Denial of Service Vulnerability

IBM MQ formerly known as IBM WebSphere MQ is a messaging middleware product from IBM in the United States. It provides a reliable and proven messaging backbone for Service Oriented Architecture SOA.Console REST AP is one of the console REST application program interface components. A security...

Weak Password Vulnerability in Various Security Products of Tiantai Networks

Shanghai Tiantai Network Technology Co., Ltd. is a professional manufacturer and supplier of WEB security and website protection. A weak password vulnerability exists in a number of Tiantai network security products. An attacker can exploit this vulnerability to control security devices, resultin...

Partner Perspectives: Notes from the Field: Extending Carbon Black Visibility to Undetected Malware

Daniel LaVoie is a Senior Solutions Specialist at ReversingLabs. On a recent customer visit, I asked the company’s Director of Security Operations how ReversingLabs came to be deployed as a part of their SOC tool set. The answer was quite interesting, and one that I wanted to share with our blog...

Presumed technical issue disrupts Google Adsense payouts worldwide

By Waqas Still didn't receive your Google Adsense payouts? Don't worry, you are not alone. For the many millions of Google Adsense users, the earnings derived from it is their bread and butter so when there is a delay in AdSense payouts, predictably there is online pandemonium as many seek answer...

The vulnerability of the Extensible Authentication Protocol over LAN (EAPOL) implementation in microprogrammable routering software from Cisco’s Small Business 100 Series and Cisco Small Business 300 Series allows a perpetrator to induce a service failure.

The vulnerability of the Extensible Authentication Protocol over LAN EAPOL implementation in microprogramming-based router software from Cisco’s Small Business 100 Series and Cisco Small Business 300 Series models is related to errors in processing EAPOL frames. Exploiting this vulnerability allo...