The vulnerability of Eclipse Jetty servlet containers, related to duplicate resource operations, allows attackers to gain unauthorized access to protected information, execute arbitrary code, or cause service failures.

The vulnerability of Eclipse Jetty servlet containers is related to the duplication of resource operations. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information, execute arbitrary code, or cause service failures...

The vulnerability of the command-line interface (CLI) of the programmatically defined Cisco SD-WAN network allows a attacker to trigger a service failure.

The vulnerability of the command-line interface CLI of the programmatically defined Cisco SD-WAN network is related to an incorrect path name limitation for the directory. Exploiting this vulnerability could allow a attacker to cause service failures...

On Blockchain Voting

Blockchain voting is a spectacularly dumb idea for a whole bunch of reasons. I have generally quoted Matt Blaze: Why is blockchain voting a dumb idea? Glad you asked. For starters: It doesnt solve any problems civil elections actually have. Its basically incompatible with "software independence",...

Oracle Linux 8 : bind (ELSA-2020-4500)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4500 advisory. - Fix tsig-request verify CVE-2020-8622 - Prevent PKCS11 daemon crash on crafted packet CVE-2020-8623 - Correct update-policy type subdomain to match...

The vulnerability of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense’s microprogramming software, related to uncontrolled resource consumption, allows attackers to trigger service failures.

The vulnerability of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense’s microprogramming software is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted fragmented IP...

The vulnerability of the Smart View Provider component of the Hyperion Analytic Provider Services software allows a malicious individual to gain unauthorized access to protected information, modify, add, or delete data, or cause service failures.

The vulnerability of the Smart View Provider component of the Hyperion Analytic Provider Services software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information, modify, add,...

The vulnerability of the Serialization component in Java SE and Java SE Embedded software platforms allows attackers to trigger a service failure.

The vulnerability of the Serialization component in Java SE and Java SE Embedded software platforms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the TCP packet processing service provided by micro-programming software for Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense allows attackers to induce service failures.

The vulnerability of the TCP packet processing service provided by micro-programmed network interface devices from Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor t...

WordPress Pushes Out Multiple Flawed Security Updates

The day after WordPress pushed out a critical 5.5.2 security update, patching a remote code execution bug and nine additional flaws, it was forced push out a second update and then a third 5.5.3 update. The hiccup is tied to the WordPress auto-update feature that accidentally started sending 455...

The vulnerability of the Rack module in the Ruby programming language, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the Ruby interpreter’s Rack module is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures due to specially crafted requests...

The vulnerabilities in the VMCI drivers of VMware ESXi, VMware Workstation, and VMware Fusion allow attackers to cause system failures.

The vulnerability of VMCI drivers in hypervisor graphics of VMware ESXi, VMware Workstation, and VMware Fusion is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a attacker to cause service failures...

The vulnerability of the Apache Tomcat application server arises from the execution of a loop with an unreachable exit condition, allowing attackers to cause service failures.

The vulnerability of the Apache Tomcat application server is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

The vulnerability of the General component (jQuery) of the Oracle REST Data Services data service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the General component jQuery in the Oracle REST Data Services data service is related to security mechanism failures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information via the HTTP network...

Django: Incorrect HTTP detection with reverse-proxy connecting via HTTPS

An HTTP detection flaw was discovered in Django. If deployed behind a reverse-proxy connecting to Django via HTTPS, django.http.HttpRequest.scheme incorrectly detected client requests made using HTTP as using HTTPS. This resulted in incorrect results for issecure and buildabsoluteuri, and HTTP...

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules exists due to insufficient testing of input data. This allows attackers to trigger service failures.

Vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules, related to access control deficiencies, allows attackers to trigger service failures.

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules relates to the improper activation of a pointer, allowing an attacker to trigger a service failure.

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to the exploitation of a faulty pointer. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of Intel processor BIOS microprogramming software, related to privilege management errors, allows a perpetrator to cause system failures.

The vulnerability of Intel processor BIOS microprogramming software is related to privilege management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of Intel processor BIOS microprogramming software, related to the execution of operations outside the buffer in memory, allows attackers to enhance their privileges or cause system failures.

The vulnerability of Intel processor BIOS microprogramming software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges or cause system failures...

The vulnerability of Intel processor BIOS microprogramming software, related to reading data beyond the buffer in memory, allows attackers to exploit their privileges or cause system failures.

The vulnerability of Intel processor BIOS microprogramming software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges or cause system failures...