The vulnerability of JunOS’s router operating systems vMX and MX150 allows a hacker to trigger a service failure.

The vulnerability of JunOS’ vMX and MX150 routers exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Windows operating system’s DNS server, related to errors in handling DNS requests, allows a hacker to cause a service failure.

The vulnerability of the Windows operating system’s DNS server is related to errors in handling DNS requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted DNS request...

The vulnerability of Yokogawa’s software products, related to writing beyond buffer boundaries in memory, allows a hacker to trigger a service failure.

The vulnerability of Yokogawa software products is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the software package for comparing URL addresses, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the URL-regex comparison software package is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component, the database management system, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL Protocol network protocol...

The vulnerability of the C API component of the MySQL Database Management System client, which allows a hacker to trigger a service failure.

The vulnerability of the C API component of the MySQL Database Management System client exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL Protocol network protocol...

EUVD-2020-12341

A denial of service vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RD Gateway service on the target system to...

Security Bulletin: Incorrect permissions on IBM Spectrum Protect Plus agent files (CVE-2020-4631)

Summary IBM Spectrum Protect Plus agent files on Windows have incorrect access permissions. Vulnerability Details CVEID: CVE-2020-4631 DESCRIPTION: IBM Spectrum Protect Plus agent files, in non-default configurations, on Windows are assigned access to everyone with full control permissions, which...

The vulnerability affects the mechanism for executing scripts in Web Workers of Firefox ESR and Firefox browsers, as well as the Thunderbird email client. This allows attackers to trigger a service failure.

The vulnerability of the script for executing scenarios in Firefox ESR and Firefox web browsers, as well as in Thunderbird’s email client, is related to multi-threaded execution errors race conditions. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Web Container server component of Oracle WebLogic Server allows a attacker to cause a service failure.

The vulnerability of the Web Container component of Oracle WebLogic Server applications is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

CVE-2020-4631

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned access to everyone with full control permissions, which could allow a local user to cause interruption of the service operations. IBM X-Force ID: 185372...

CVE-2020-4631

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned access to everyone with full control permissions, which could allow a local user to cause interruption of the service operations. IBM X-Force ID: 185372...

The vulnerability of the opj_t1_clbl_decode_processor function (openjp2/t1.c) in the OpenJPEG image encoding and decoding library, which allows a hacker to trigger a service failure.

The vulnerability of the opjt1clbldecodeprocessor function in the OpenJPEG image encoding and decoding library is related to writing beyond the buffer memory boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability in the vManage web interface of the programmatically defined Cisco SD-WAN network allows a attacker to trigger a service failure.

The vulnerability in the vManage web interface of the Cisco SD-WAN program-defined network is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the CERM Crypto Export Restrictions Manager implementation in the RouterOS operating system of MikroTik allows a perpetrator to trigger a service failure.

The vulnerability of the CERM Crypto Export Restrictions Manager implementation in the RouterOS operating system of MikroTik relates to the uncontrolled use of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted...

The vulnerability of microprogramming software for managing video cards (motherboards) in hypervisors such as VMware ESXi, VMware Workstation, and VMware Fusion allows attackers to cause partial service interruptions.

The vulnerability of microprogramming software for managing video cards controllers in VMware ESXi, VMware Workstation, and VMware Fusion lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a partial service...

The vulnerability of the CMS parser for OpenSSL structures allows a hacker to induce a service failure.

The vulnerability of CMS parsers in OpenSSL libraries is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability in the implementation of the Common Industrial Protocol (CIP) for Cisco IOS and Cisco IOS XE operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the implementation of the Common Industrial Protocol CIP in Cisco IOS and Cisco IOS XE operating systems is related to insufficient validation of input data during the processing of CIP packets. Exploiting this vulnerability can allow a malicious actor to cause service...

The vulnerability of the OpenSSL library, related to reading beyond the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the OpenSSL library is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Locally Significant Certificate (LSC) management mechanism in the Cisco IOS XE operating system allows a perpetrator to trigger a service failure.

The vulnerability of the Locally Significant Certificate LSC management mechanism in the Cisco IOS XE operating system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...