Apache Traffic Server Reverse Proxy Data Compromise

The vulnerability of reverse proxies and proxy redirection in the Apache Traffic Server is related to inconsistent interpretation of HTTP requests. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service failures...

BIND DNS DoS

The vulnerability of the BIND DNS server is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Grub2 Heap Buffer Overflow DoS

The vulnerability of the grubscriptfunctioncreate function, which is part of the Grub2 operating system loader, stems from an error in function overriding. This function is already being executed. Exploiting this vulnerability could allow a perpetrator to access confidential data, compromise data...

Grub2 grub_cmd_initrd grub_initrd_init DoS

The vulnerability of the implementations of grubcmdinitrd and grubinitrdinit, which are used by the Grub2 operating system loader, is related to the introduction of a large number of arguments into the initrd command in 32-bit architectures. Exploiting this vulnerability allows an attacker to gai...

Oracle MySQL Server Replication DoS

The vulnerability of the Server:Replication component of the Oracle MySQL database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause downtime or service failures using the MySQL protocol...

Red Hat Process Automation Manager Resource Consumption DoS

The vulnerability of the Red Hat Process Automation Manager system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures in the target system by sending specially crafted HTTP packets remotely...

Libraries Component DoS

The vulnerability of the Libraries component in Oracle Java SE and Oracle Java SE Embedded software platforms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the enablesacfuaccess function in Linux operating system kernels is related to errors during multi-threaded tasks race conditions. Exploiting this vulnerability can allow an attacker to cause service failures...

Libraries Component DoS

The vulnerability of the Libraries component in Oracle Java SE and Oracle Java SE Embedded software platforms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

MySQL InnoDB DoS

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service failures using the MySQL protocol...

Google Chrome Task Scheduler Confidential Data Access DoS

The vulnerability of Google Chrome’s task scheduler relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially created HTML page...

Google Chrome V8 Engine Data Compromise

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine relates to access to data without type control. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially...

Astra Safepolicy Input Validation DoS

The vulnerability of the astra-safepolicy security configuration is related to the lack of a mechanism for checking input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

fly-fm File Manager DoS

The vulnerability of the fly-fm file manager is related to an error in data processing through the drag-and-drop method for manipulating interface elements. Exploiting this vulnerability can allow attackers to cause service failures...

fly-wm Privilege Escalation

The vulnerability of the fly-wm window manager is related to the lack of mechanisms for privilege control and access management. Exploiting this vulnerability could allow an attacker to cause service failures...

Oracle Coherence CacheStore DoS

The vulnerability of the CacheStore component of the Oracle Coherence software platform relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Grub2 Buffer Overflow DoS

The vulnerability of the Grub.cfg configuration file of Grub2 operating systems is related to errors in eliminating certain elements. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

AMQ: Denial of Service via unrecognized field injection

A flaw was found in AMQ Online before 1.5.2, where injecting an invalid field to a user's address space configuration of the user namespace puts AMQ Online in an inconsistent state. In this inconsistent state, the AMQ Online components do not operate properly. For example, the failure of...

Microsoft .NET Bond DoS

The vulnerability of the Microsoft .NET Bond software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

SUSE SLED15 / SLES15 Security Update : rust, rust-cbindgen (SUSE-SU-2020:2041-1)

"This update for rust, rust-cbindgen fixes the following issues : rust was updated for use by Firefox 76ESR. Fixed miscompilations with rustc 1.43 that lead to LTO failures bsc1173202 Update to version 1.43.1 Updated openssl-src to 1.1.1g for CVE-2020-1967. Fixed the stabilization of AVX-512...