CVE-2020-14869

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: LDAP Auth. Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromi...

Denial of Service Vulnerability in Schneider M340

The Schneider M340 is a controller with a wide range of applications in industrial control. A denial of service vulnerability exists in the Schneider M340, which can be exploited by an attacker to cause a denial of service to the server...

SIMATIC S7-300 has a Denial of Service Vulnerability

The S7-300 is a modular compact PLC system. A denial of service vulnerability exists in SIMATIC S7-300, which can be exploited by an attacker to cause a denial of service to the server...

traceroute injection vulnerability

traceroute is a package for executing traceroute-related commands from the American software developer James Weston. An injection vulnerability exists in the traceroute package version 1.0.0 and earlier Node.js. This vulnerability can be exploited by remote attackers to disrupt the operation of a...

IBM DB2 Denial of Service Vulnerability (CNVD-2020-13054)

IBM DB2 is a set of relational database management system of American IBM. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A security vulnerability exists in IBM DB2 version V11.5. An attacker can exploit this vulnerability to cause an...

Amazon Linux AMI : subversion (ALAS-2019-1317)

In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only request produces a particular answer. This can lead to disruption for users of the server.CVE-2018-11782 In Apache Subversion versions up to and...

CVE-2019-0203

In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a client sends certain sequences of protocol commands. This can lead to disruption for users of the server...

DEBIAN-CVE-2019-0203

In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a client sends certain sequences of protocol commands. This can lead to disruption for users of the server...

CVE-2019-0203

The CVE-2019-0203 issue affects Apache Subversion’s svnserve where certain protocol sequences can cause the svnserve process to exit, leading to a remote denial of service. Impact is disruption of service for Subversion servers. Affected Subversion releases include up to 1.9.10, 1.10.4, and 1.12....

CVE-2018-11782

In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only request produces a particular answer. This can lead to disruption for users of the server...

CVE-2019-11608

doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/renamefile.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information or make the server unserviceable...

4 Flaws hit HTTP/2 Protocol that could allow Hackers to Disrupt Servers

If you think that the HTTP/2 protocol is more secure than the standard HTTP Hypertext Transfer Protocol, then you might be wrong, as it took researchers just four months to discover four flaws in the HTTP/2 protocol. HTTP/2 was launched properly just in May last year after Google bundled its SPDY...

JVN#13566542: Cybozu Remote Service Manager vulnerable to denial-of-service (DoS)

Remote Service Manager provided by Cybozu, Inc. is a software to access internal systems such as Cybozu products via "Cybozu Remote Service". Remote Service Manager contains a denial-of-service DoS vulnerability. Note that this vulnerability was caused due to an incomplete fix of JVN10319260...

SAP NetWeaver SDM - denial of service

Application: SAP NetWeaver SDM Versions Affected: SAP NetWeaver SDM Vendor URL: http://www.sap.com Bugs: DoS Exploits: YES Reported: 10.02.2012 Vendor response: 11.02.2012 Date of Public Advisory: 10.12.2012 Reference: SAP Security Note 1724516 Authors: Alexander Polyakov ERPScan Description SAP...

Microsoft IIS vulnerable to DoS via invalid request for very long WebDAV requests

Overview Intruders can disrupt the normal operation of an IIS 5.0 server using a malicious Web Distributed Authoring and Versioning WebDAV request. Description WebDAV is an extension to HTTP used to manage content on web servers. Quoting from RFC 2518: WebDAV is an extension to the HTTP/1.1...

ISC BIND 4 contains buffer overflow in nslookupComplain()

Overview The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS by the Internet Software Consortium ISC. There is a buffer overflow vulnerability in BIND 4.9.x, which may allow remote intruders to gain access to systems running BIND. Although BIND 4.9.x is no...

Alt-N MDaemon 2.8.5 - UIDL Denial of Service

Alt-N MDaemon 2.8.5 - UIDL Denial of Service source: https://www.securityfocus.com/bid/1366/info A remote user is capable of crashing Alt-N MDaemon 2.8.5.0 by executing the pass command, then the UIDL command and quitting the mail server before the UIDL has returned a response. This must be done...

Atrium Software Cassandra NNTP Server 1.10 - Buffer Overflow

source: https://www.securityfocus.com/bid/1156/info Unchecked buffer exists in the code that handles login information in Cassandra NNTP v1.10 server. Entering a login name that consists of over 10 000 characters will cause the server to stop responding until the administrator restarts the...