The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to the lack of protective measures for web page structures, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the sssctl command in the access control service allows attackers to gain access to sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the sssctl command in the access control service, which manages access to remote directories and the SSSD authentication mechanism, is related to the lack of measures for input data cleansing. Exploiting this vulnerability could allow a malicious actor to gain access to...

The vulnerability of the is_normal() function in the Glib library allows a attacker to cause a service failure.

The vulnerability of the isnormal function in the Glib library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of Python libraries for working with PDF files, such as PyPDF and PyPDF2, relates to the execution of loops with an unreachable exit condition. This allows attackers to cause service failures.

The vulnerability of Python libraries for working with PDF files, such as PyPDF and PyPDF2, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Brave Browser lies in its improper resource cleaning or release mechanisms, which allows a malicious actor to trigger a service failure.

The vulnerability of the Brave Browser is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through a specially created HTML file...

In batchRefund, adding a check for sufficient balance before attempting refunds could prevent potential failures.

Lines of code Vulnerability details M2 - In batchRefund, adding a check for sufficient balance before attempting refunds could prevent potential failures. poc: solidity function batchRefund external returns requireaddressthis.balance = totalRefundAmount, "Insufficient balance for refunds"; Assess...

WordPress WP User Frontend Plugin <= 3.6.5 is vulnerable to Privilege Escalation

Software WP User Frontend Type Plugin Vulnerable versions = 3.6.5 Fixed in 3.6.6 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-47682 Patch priority High CVSS severity High 7.2 Developer Claim ownership PSID 55cf1b7c7f7f Credits Rafie...

kernel: blk-iolatency: Fix memory leak on add_disk() failures

In the Linux kernel, the following vulnerability has been resolved: blk-iolatency: Fix memory leak on adddisk failures When a gendisk is successfully initialized but adddisk fails such as when a loop device has invalid number of minor device numbers specified, blkcginitdisk is called during init...

WordPress Cloud Templates & Patterns collection Plugin <= 1.2.2 is vulnerable to Sensitive Data Exposure

Software Cloud Templates & Patterns collection Type Plugin Vulnerable versions = 1.2.2 Fixed in 1.2.3 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2023-47529 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID...

The vulnerability of the web interface of Netgear WNDR3700 microprogramming software allows a hacker to trigger a service failure.

The vulnerability of the web interface of Netgear WNDR3700 router software lies in improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

SolarWinds and its CISO accused of misleading investors before major cyberattack

The Securities and Exchange Commission SEC has announced charges against software company SolarWinds Corporation and its chief information security officer CISO, Timothy G. Brown, for “fraud and internal control failures relating to allegedly known cybersecurity risks and vulnerabilities.” In 202...

The vulnerability of the software for managing and monitoring manufacturing processes in Rockwell Automation’s FactoryTalk View Site Edition arises from insufficient verification of input data. This vulnerability allows a perpetrator to trigger service failures.

The vulnerability of the software for managing and monitoring manufacturing processes in Rockwell Automation’s FactoryTalk View Site Edition exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to trigger service failures remotely...

CVE-2023-42803 BigBlueButton Unrestricted File Upload vulnerability

BigBlueButton is an open-source virtual classroom. BigBlueButton prior to version 2.6.0-beta.2 is vulnerable to unrestricted file upload, where the insertDocument API call does not validate the given file extension before saving the file, and does not remove it in case of validation failures...

The vulnerability of the integration software for IBM App Connect Enterprise and IBM Integration Bus lies in insufficient validation of input data, allowing a perpetrator to trigger a service failure.

The vulnerability of the software for integrating IBM App Connect Enterprise and IBM Integration Bus applications is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the software delivery and installation tool for Dell Digital Delivery lies in the unsafe operations at the mount points in the Windows operating system. This allows a malicious actor to cause service failures.

The vulnerability of the software delivery and installation tool for Dell Digital Delivery relates to a unsafe operation at the mount point in the Windows operating system. Exploiting this vulnerability could allow an attacker to cause service failures...

An integrated incident response solution with Microsoft and PwC

Today Microsoft Incident Response is excited to announce a new collaboration with PwC to expand our joint incident response and recovery capability. In this global alliance, Microsoft begins the initial containment and investigation, bringing a deep understanding of a company’s infrastructure to...

An integrated incident response solution with Microsoft and PwC

Today Microsoft Incident Response is excited to announce a new collaboration with PwC to expand our joint incident response and recovery capability. In this global alliance, Microsoft begins the initial containment and investigation, bringing a deep understanding of a company’s infrastructure to...

The vulnerability of the samba networking interaction software library smbd, which allows a hacker to trigger a service failure.

The vulnerability of the samba networking software library smbd is related to an incorrect path name limitation for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Citrix Gateway unable to connect to Citrix Endpoint Management Cloud server

Citrix Gateway unable to connect to Citrix Endpoint Management cloud server due to SSL certificate issue Symptoms include the below, STA shows down. Secure Hub fails in Enrollments Secure Hub fails to access store...

The vulnerability of the Apache Tomcat application server, related to insufficient input validation, allows attackers to cause service failures.

The vulnerability of the Apache Tomcat application server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...