737 matches found
Denial of Service in uap-core when processing crafted User-Agent strings
Impact Some regexes are vulnerable to regular expression denial of service REDoS due to overlapping capture groups. This allows remote attackers to overload a server by setting the User-Agent header in an HTTPS request to maliciously crafted long strings. Patches Please update uap-ruby to = v2.6....
The vulnerability of Linux operating system kernels, related to insufficient input validation and improper implementation of functions, allows attackers to trigger service failures.
The vulnerability of Linux operating system kernels is related to insufficient validation of input data and incorrect implementation of functions. Exploiting this vulnerability can allow an attacker, working remotely, to cause service failures by sending location updates via the IAPP protocol,...
BSS Continuity CMS Denial of Service Vulnerability
BSS Continuity CMS is a content management system CMS from BSS UK. A denial of service vulnerability exists in BSS Continuity CMS version 4.2.22640.0. An attacker can exploit this vulnerability to cause the underlying database to run with an overload...
SAP HANA Extended Application Services Input Validation Error Vulnerability
SAP HANA is a high-performance real-time data analytics platform from SAP. The platform provides data query functions to support users to query real-time business data query and analysis.Extended Application Services is an application server, Web server and SAP HANA System within the Web...
Nord Security: DoS of https://nordvpn.com/ via CVE-2018-6389 exploitation
There is possibility in /wp-admin/load-scripts.php script to generate large 3Mb amount of data via simple non-authenticated request to server. The vulnerability is registered as https://vulners.com/cve/CVE-2018-6389 Details Detailed attack scenario is described for example here:...
Code injection
With pipelining enabled each incoming query on a TCP connection requires a similar resource allocation to a query received via UDP or via TCP without pipelining enabled. A client using a TCP-pipelined connection to a server could consume more resources than the server has been provisioned to...
CVE-2019-6477
With pipelining enabled each incoming query on a TCP connection requires a similar resource allocation to a query received via UDP or via TCP without pipelining enabled. A client using a TCP-pipelined connection to a server could consume more resources than the server has been provisioned to...
Siemens SIPROTEC 5 7SA82 Power Systems Monitoring and Protection Device
Binary data 765244.prm...
Siemens SIPROTEC 5 7SA86 Power Systems Monitoring and Protection Device
Binary data 765245.prm...
Siemens SIPROTEC 5 7SA87 Power Systems Monitoring and Protection Device
Binary data 765246.prm...
HTTP/2: flood using PRIORITY frames results in excessive resource consumption
A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability...
CVE-2019-0363
Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services Advanced model, before version 1.0.118, to overload the server or retrieve information about internal network ports...
CVE-2019-0363
Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services Advanced model, before version 1.0.118, to overload the server or retrieve information about internal network ports...
CVE-2019-0363
Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services Advanced model, before version 1.0.118, to overload the server or retrieve information about internal network ports...
The Sky Has Already Fallen (you just haven’t seen the alert yet)
Of course, the much-touted “Cybersecurity Skills Shortage” isn’t news to anyone, or it shouldn’t be. For seven or more years, journalists, industry analysts and practitioners have been opining about it one way or another. Analyses and opinions vary on how we have reached this impasse, my own bein...
Rockwell Automation E3 EC3 (3-15A) 193/592-EC3B Motor Overload
Binary data 752309.prm...
Rockwell Automation E3 EC4 (9-45A) 193/592-EC4D Motor Overload
Binary data 752318.prm...
Rockwell Automation E3 EC4 (18-90A) 193/592-EC4E Motor Overload
Binary data 752319.prm...