Intel PROSet/Wireless WiFi Network DoS

The vulnerability of the Intel PROSet/Wireless WiFi networking connection tool exists due to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Intel Wireless Bluetooth Driver DoS

The vulnerability of the Intel Wireless Bluetooth driver exists due to insufficient testing of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Windows DoS

The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by transmitting specially crafted data...

Intel Heap Buffer Overflow DoS

The vulnerability of Intel microprogramming software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and cause system failures...

Eclipse Jetty Duplicate Resource Code Execution

The vulnerability of Eclipse Jetty servlet containers is related to the duplication of resource operations. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information, execute arbitrary code, or cause service failures...

Cisco SD-WAN CLI DoS

The vulnerability of the command-line interface CLI of the programmatically defined Cisco SD-WAN network is related to an incorrect path name limitation for the directory. Exploiting this vulnerability could allow a attacker to cause service failures...

On Blockchain Voting

Blockchain voting is a spectacularly dumb idea for a whole bunch of reasons. I have generally quoted Matt Blaze: Why is blockchain voting a dumb idea? Glad you asked. For starters: It doesnt solve any problems civil elections actually have. Its basically incompatible with "software independence",...

Oracle Linux 8 : bind (ELSA-2020-4500)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4500 advisory. - Fix tsig-request verify CVE-2020-8622 - Prevent PKCS11 daemon crash on crafted packet CVE-2020-8623 - Correct update-policy type subdomain to match...

Cisco Adaptive Security Appliances TCP DoS

The vulnerability of the TCP packet processing service provided by micro-programmed network interface devices from Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor t...

Smart View Provider Component Unauthorized Access

The vulnerability of the Smart View Provider component of the Hyperion Analytic Provider Services software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information, modify, add,...

Cisco Adaptive Security Appliance Resource Consumption DoS

The vulnerability of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense’s microprogramming software is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted fragmented IP...

Serialization Component DoS

The vulnerability of the Serialization component in Java SE and Java SE Embedded software platforms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

WordPress Pushes Out Multiple Flawed Security Updates

The day after WordPress pushed out a critical 5.5.2 security update, patching a remote code execution bug and nine additional flaws, it was forced push out a second update and then a third 5.5.3 update. The hiccup is tied to the WordPress auto-update feature that accidentally started sending 455...

VMware VMCI Drivers System Failure

The vulnerability of VMCI drivers in hypervisor graphics of VMware ESXi, VMware Workstation, and VMware Fusion is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a attacker to cause service failures...

Rack Uncontrolled Resource Consumption

The vulnerability of the Ruby interpreter’s Rack module is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures due to specially crafted requests...

Oracle REST Data Services General Component jQuery Unauthorized Access

The vulnerability of the General component jQuery in the Oracle REST Data Services data service is related to security mechanism failures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information via the HTTP network...

Apache Tomcat DoS

The vulnerability of the Apache Tomcat application server is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

Django: Incorrect HTTP detection with reverse-proxy connecting via HTTPS

An HTTP detection flaw was discovered in Django. If deployed behind a reverse-proxy connecting to Django via HTTPS, django.http.HttpRequest.scheme incorrectly detected client requests made using HTTP as using HTTPS. This resulted in incorrect results for issecure and buildabsoluteuri, and HTTP...

Pointer Activation DoS

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to the exploitation of a faulty pointer. Exploiting this vulnerability can allow attackers to cause service failures...

access control DoS

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to cause service failures...