The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to insufficient validation of input data, allows a perpetrator to cause service failures.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of Juniper Networks’ Junos OS operating system’s IPsec library allows a attacker to induce a service failure.

The vulnerability of Juniper Networks’ Junos OS operating system’s IPsec library is related to improper handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the SIP ALG server of Juniper Networks Junos OS allows a attacker to trigger a service failure.

The vulnerability of the SIP ALG server of Juniper Networks Junos OS is related to incorrect handling of requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the IBM DB2 database management system, related to errors in processing input data, allows a perpetrator to cause a service failure.

The vulnerability of the IBM DB2 database management system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the APC Easy UPS Online Monitoring Software and Easy UPS Online Monitoring Software lies in the lack of authentication for critical functions, allowing attackers to trigger a service failure.

The vulnerability of the APC Easy UPS Online Monitoring Software and Easy UPS Online Monitoring Software lies in the lack of authentication for a critical function. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

The vulnerability of the lou_logFile function in logginc.c, the translator of Liblouis, allows a hacker to cause a service failure.

The vulnerability of the loulogFile function in logginc.c of the Liblouis translator is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the rmacinstring function in the editing and reproduction tools for PCAP files, Tcpreplay, allows a hacker to cause a service failure.

The vulnerability of the rmacinstring function in the PCAP-file editing and reproduction utility Tcpreplay is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

The vulnerability of the Vector Packet Processor (VPP) platform, a microprogramming-based software solution for data packet transmission gateways in Cisco Packet Data Networks, allows a hacker to trigger a service failure.

The vulnerability of the Vector Packet Processor VPP platform, a microprogramming-based software for packet transmission networks like the Cisco Packet Data Network Gateway PGW, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to caus...

The vulnerability of Microprogramming Software in Cisco Business 150, Cisco Business 151 Mesh Extenders, and Cisco Catalyst 9100 arises from the ability to write beyond the buffer boundaries, allowing attackers to cause service interruptions.

The vulnerability of Microprogrammed Software in Cisco Business 150, Cisco Business 151 Mesh Extenders, and Cisco Catalyst 9100 is related to buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Western Digital Hit by Network Security Breach - Critical Services Disrupted!

Data storage devices maker Western Digital on Monday disclosed a "network security incident" that involved unauthorized access to its systems. The breach is said to have occurred on March 26, 2023, enabling an unnamed third party to gain access to a "number of the company's systems." Following th...

The vulnerability of the `zmLoadUser()` function (zm_user.cpp) in the video surveillance software for organizations called ZoneMinder, which allows a intruder to execute arbitrary code or cause service interruptions.

The vulnerability of the zmLoadUser function in the ZoneMinder video surveillance software’s code involves a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the TiledInputFile function in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, allows attackers to trigger a service failure.

The vulnerability of the TiledInputFile function in software for storing images with a wide dynamic range of brightness in OpenEXR is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the slice.cc component in the h.265 Libde265 video codec implementation allows a attacker to cause a service failure.

The vulnerability of the slice.cc component in the h.265 Libde265 video codec implementation is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Wi-Fi WPA Supplicant client, related to deficiencies in authentication procedures, allows attackers to trigger a service failure.

The vulnerability of the Wi-Fi WPA Supplicant client is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the tiffimage_int.cpp component in the Exiv2 media metadata management library allows a attacker to cause a service failure.

The vulnerability of the tiffimageint.cpp component in the Exiv2 metadata management library is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the lsx_aiffstartwrite function in the aiff.c component of the Sound eXchange audio editor allows a hacker to cause a service failure.

The vulnerability of the lsxaiffstartwrite function in the aiff.c component of the Sound eXchange audio editor is related to insufficient comparison. Exploiting this vulnerability could allow an attacker to cause service interruptions...

SPAM SQR 代码注入漏洞

Softnext Technologies SPAM SQR is a comprehensive email filtering platform from China-based Softnext Technologies. A code injection vulnerability exists in SPAM SQR versions prior to 2.221231, which stems from a code injection flaw. An attacker can exploit this vulnerability to execute system...

The vulnerability of the connected module “Kaspersky Security System” of the Eltex network interface “ESR-200” allows a intruder to cause a service failure.

The vulnerability of the connected module “Kaspersky Security System” of the Ethernet switch software “Eltex ESR-200” is related to the improper creation of connections. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Tbase database server in the software solution for monitoring the status of B&R APROL industrial systems allows a intruder to trigger a service failure.

The vulnerability of the Tbase database server of the B&R APROL industrial system monitoring software solution is related to incorrect checking of the returned value from methods or functions. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the Tbase database server in the software solution for monitoring the status of B&R APROL industrial systems allows a intruder to trigger a service failure.

The vulnerability of the Tbase database server of the B&R APROL industrial system monitoring software solution is related to incorrect checking of the returned value from methods or functions. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...