K000137106: HTTP/2 vulnerability CVE-2023-44487

Security Advisory Description The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. CVE-2023-44487 also known as HTTP/2 Rapid Reset Attack Impact BIG-IP and...

SUSE: Security Advisory (SUSE-SU-2023:2541-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-2541

The Web Frontend of KNIME Business Hub before 1.4.0 allows an unauthenticated remote attacker to access internals about the application such as versions, host names, or IP addresses. No personal information or application data was exposed...

CVE-2023-2541 Sensitive information disclosure in KNIME Hub Web Application

The Web Frontend of KNIME Business Hub before 1.4.0 allows an unauthenticated remote attacker to access internals about the application such as versions, host names, or IP addresses. No personal information or application data was exposed...

CVE-2023-2541

CVE-2023-2541 affects the KNIME Business Hub Web Frontend prior to 1.4.0. The issue allows an unauthenticated remote attacker to access internal application details such as version numbers, host names, and IP addresses. No personal information or application data is exposed. Root cause and exact ...

CVE-2022-2541

CVE-2022-2541 affects the WordPress plugin uContext for Amazon (versions up to and including 3.9.1). The root cause is missing nonce validation in the Ajax handler (~/app/sites/ajax/actions/keyword_save.php) invoked via doAjax(), enabling Cross-Site Request Forgery that can lead to Cross-Site Scr...

PT-2022-2541 · Microsoft · Windows Cluster Shared Volume +1

Name of the Vulnerable Software and Affected Versions: Windows Cluster Shared Volumes CSV affected versions not specified Description: The issue is related to insufficient protection of service data in the Cluster Shared Volumes CSV of Windows operating systems. This can allow an attacker to gain...

SUSE: Security Advisory (SUSE-SU-2012:0553-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-2541

Technical details about CVE-2020-2541 are not publicly provided in the supplied documents. Monitor for updates from Oracle advisories and affected vendors for concrete vulnerability information.

CVE-2019-2541

CVE-2019-2541 describes a vulnerability in the DHCP Client subcomponent of Oracle Solaris (Sun Systems Products Suite) affecting Solaris 10. The issue allows an unauthenticated attacker with access to the physical network segment to compromise Solaris, with potential full takeover of the system. ...

Solaris 10 (sparc) : 148309-10

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Client. The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware...

CVE-2016-2541

Audacity before 2.1.2 is affected by a vulnerability in MP2 file handling that can cause memory corruption and a denial-of-service (application crash) when processing a crafted MP2 file. Remediation: upgrade to Audacity 2.1.2 (as noted in the 2.1.2 release notes). If exploitation details are not ...

CVE-2016-2541

Audacity before 2.1.2 allows remote attackers to cause a denial of service memory corruption and application crash via a crafted MP2 file...

CVE-2017-2541

CVE-2017-2541 affects macOS Sierra WindowServer. The issue is a stack-based buffer overflow in WindowServer’s _XGetWindowMovementGroup() path, enabling a local attacker to execute arbitrary code with WindowServer/kernel-level privileges. Affected products: macOS Sierra 10.12.x before 10.12.5. Mit...

Apple Mac OS X Multiple Vulnerabilities - 01 - (HT207797)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-2541

...

CVE-2012-2541

CVE-2012-2541 is rejected/not used as it was not associated with any vulnerability.

CVE-2015-2491

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2485 and CVE-2015-2541...

CVE-2015-2541

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2485 and CVE-2015-2491...

CVE-2015-2541

CVE-2015-2541 affects Microsoft Internet Explorer 9–11. Description: a memory corruption vulnerability exploitable via a crafted web site, leading to remote code execution or denial of service. It is part of the broader “Memory corruption vulnerability” family and is distinguished from CVE-2015-2...