Design/Logic Flaw

In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk. This can be problematic in a case where an administrator scans the dirs of potentially untrusted users. This has been patched in 0.1.1...

The vulnerability of microprogramming software for managing video cards (motherboards) in hypervisors such as VMware ESXi, VMware Workstation, and VMware Fusion allows attackers to cause partial service interruptions.

The vulnerability of microprogramming software for managing video cards controllers in VMware ESXi, VMware Workstation, and VMware Fusion lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a partial service...

The vulnerability of the CMS parser for OpenSSL structures allows a hacker to induce a service failure.

The vulnerability of CMS parsers in OpenSSL libraries is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability in the implementation of the Common Industrial Protocol (CIP) for Cisco IOS and Cisco IOS XE operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the implementation of the Common Industrial Protocol CIP in Cisco IOS and Cisco IOS XE operating systems is related to insufficient validation of input data during the processing of CIP packets. Exploiting this vulnerability can allow a malicious actor to cause service...

The vulnerability of the OpenSSL library, related to reading beyond the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the OpenSSL library is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the SSH Secure Shell server of the Cisco IOS operating system, which allows a hacker to trigger a maintenance failure.

The vulnerability of the Cisco IOS operating system’s Secure Shell server is related to state management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Locally Significant Certificate (LSC) management mechanism in the Cisco IOS XE operating system allows a perpetrator to trigger a service failure.

The vulnerability of the Locally Significant Certificate LSC management mechanism in the Cisco IOS XE operating system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Flexible NetFlow operating system tool in Cisco IOS XE allows a attacker to trigger a service failure.

The vulnerability of the Cisco IOS XE operating system’s Flexible NetFlow tool is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the TSDNS discriver and the traffic analyzer for computer networks, Wireshark, allows a hacker to cause a service failure.

The vulnerability of the TSDNS discoverer and the Wireshark traffic analyzer in computer networks is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the GSUP discapper of the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the GSUP scanner, a traffic analysis tool for computer networks developed by Wireshark, is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the disct_gssapi_work function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the disctgssapiwork function in the Wireshark network traffic analyzer program is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the implementation of the Open Shortest Path First (OSPF) protocol in Cisco Adaptive Security Appliance (ASA) and Configure Firepower Threat Defense (FTD) software allows a attacker to induce a service failure.

The vulnerability of the OSPF implementation in Cisco Adaptive Security Appliance ASA and Configure Firepower Threat Defense FTD software relates to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Secure Sockets Layer and Transport Layer Security implementations in Cisco Firepower Threat Defense’s microprogramming-based network interface controllers allows attackers to induce service failures.

The vulnerability of the Secure Sockets Layer and Transport Layer Security implementations of Cisco Firepower Threat Defense’s microprogramming-based network interface controllers is related to the execution of operations beyond the buffer in memory. Exploitation of this vulnerability could allow...

The vulnerability of the PluginTIFF.cpp component in the FreeImages graphics format library, related to the lack of mechanisms for controlling the system’s resources, allows a malicious actor to cause service failures.

The vulnerability of the PluginTIFF.cpp component in the FreeImages graphics format library is related to the lack of mechanisms for controlling the resources used by the system. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of Google Chrome, related to the use of memory after it is freed, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome relates to a memory management flaw after memory is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the WriteTGAImage function in the GraphicsMagick graphics editor allows an attacker to cause a service failure by causing the operation to exceed the buffer limits in memory.

The vulnerability of the WriteTGAImage function in the GraphicsMagick graphics editor is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by using a specially created image file...

Switching from a “Just in Time” delivery system should include planning ahead

As it becomes clear that some things will never again be the same after the global coronavirus pandemic, it is time to prepare for the future. The cybersecurity implications of upcoming changes will be most noticeable in organizations that rely on security models like the software defined...

The vulnerability of the libarchive library, related to reading beyond the buffer boundaries of memory, allows a hacker to cause a service failure.

The vulnerability of the libarchive library is related to reading beyond the buffer boundaries of memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions through a specially created archive...

The vulnerability of the Info-ZIP file archiver Unzip, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Info-ZIP unzip file compressor is related to the use of memory after deallocation. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Spidermonkey component in Firefox and Firefox ESR web browsers allows a hacker to trigger a service failure.

The vulnerability of the Spidermonkey component in Firefox and Firefox ESR browsers is related to incorrect type conversion. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...