PT-2026-25389

PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, The crsf rc parser accepts an oversized variable-length known packet and copies it into a fixed 64-byte global buffer without a bounds check. In deployments where crsf rc is enabled on a CRSF serial port, an...

CVE-2026-21917 Junos OS: SRX Series: Specifically malformed SSL packet causes FPC crash

An Improper Validation of Syntactic Correctness of Input vulnerability in the Web-Filtering module of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. If an SRX device configured for UTM Web-Filtering receives a specifical...

Denial Of Service (DoS)

github.com/argoproj/argo-workflows is vulnerable to Denial Of Service DoS. The vulnerability is due to a race condition in a global variable within the file metricsk8srequest.go, allows an attacker with permission to execute workflows to trigger a crash in the Argo Workflows controller...

SUSE CVE-2024-47827

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Due to a race condition in a global variable in 3.6.0-rc1, the argo workflows controller can be made to crash on-command by any user with access to execute a workflow. This vulnerabili...

Argo Workflows Controller: Denial of Service via malicious daemon Workflows

Summary Due to a race condition in a global variable, the argo workflows controller can be made to crash on-command by any user with access to execute a workflow. This was resolved by https://github.com/argoproj/argo-workflows/pull/13641 Details These two lines introduce a data race in the...

PT-2024-32838

Name of the Vulnerable Software and Affected Versions Argo Workflows version 3.6.0-rc1 Description Due to a race condition in a global variable, the Argo Workflows controller can be made to crash on-command by any user with access to execute a workflow. This issue can be exploited by creating and...

CVE-2021-22882

UniFi Protect before v1.17.1 allows an attacker to use spoofed cameras to perform a denial-of-service attack that may cause the UniFi Protect controller to crash...

CVE-2021-22882

UniFi Protect before v1.17.1 allows an attacker to use spoofed cameras to perform a denial-of-service attack that may cause the UniFi Protect controller to crash...

UniFi Protect Resource Management Error Vulnerability

Ubiquiti Networks UniFi Protect is a network video recorder from Ubiquiti Networks USA. A security vulnerability exists in UniFi Protect before v1.17.1, which can be exploited by an attacker to perform a denial-of-service attack using a spoofed webcam, which could cause the UniFi Protect controll...

PT-2021-15253 · Ubiquiti · Unifi Protect

Name of the Vulnerable Software and Affected Versions: UniFi Protect versions prior to 1.17.1 Description: The issue allows an attacker to use spoofed cameras to perform a denial-of-service attack that may cause the UniFi Protect controller to crash. Recommendations: For versions prior to 1.17.1,...