75 matches found
CVE-2025-4393 Medtronic MyCareLink Patient Monitor Deserialization Vulnerability
Medtronic MyCareLink Patient Monitor has an internal service that deserializes data, which allows a local attacker to interact with the service by crafting a binary payload to crash the service or elevate privileges. This issue affects MyCareLink Patient Monitor models 24950 and 24952: before Jun...
Siemens SCALANCE LPE9403 Null Pointer Dereference (CVE-2025-40576)
A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions. Affected devices do not properly validate incoming Profinet packets. An unauthenticated remote attacker can exploit this flaw by sending a specially crafted malicious packet, which leads to a crash of the dcp...
CVE-2024-56343
CVE-2024-56343 affects IBM Verify Identity Access Digital Credentials 24.06. An authenticated user can crash the service by sending a specially crafted POST request, causing a denial-of-service (A: HIGH/availability impact as per IBM/NVD). The issue is documented across multiple feeds (IBM bullet...
CVE-2020-10604
In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager service through specially crafted requests. This can result in blocking connections and queries to PI Data Archive...
Mercedes-Benz NTG 安全漏洞
Mercedes-Benz NTG is an automobile from Mercedes-Benz Germany. A security vulnerability exists in Mercedes Benz NTG 6 that stems from a type confusion in the User-Data Import/Export function. An attacker exploiting the vulnerability could cause the User-Data service to crash...
VulnCheck KEV: CVE-2024-21894
A heap overflow vulnerability in IPSec component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack. In certain conditions this may lead to execution...
Netgear R6700v3 Unauthenticated LAN Admin Password Reset
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Netgear R6700v3 Unauthenticated LAN Admin Password Reset', 'Description' = %q This module targets ZDI-20-704 aka CVE-2020-10924, a buffer overflo...
CVE-2024-37399
A NULL pointer dereference in WLAvalancheService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, resulting in a DoS...
A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this vulnerability is to the service availability.
...
A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump and dump privileged information.
...
CVE-2024-21894
A heap overflow vulnerability in IPSec component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack. In certain conditions this may lead to execution of...
MikroTik RouterOS Integer Underflow (CVE-2019-16160)
An integer underflow in the SMB server of MikroTik RouterOS before 6.45.5 allows remote unauthenticated attackers to crash the service. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
The vulnerability of the C-language streaming video game Moonlight-common-c library, related to buffer overflow in the stack, allows for a service failure or the execution of arbitrary code.
The vulnerability of the C-language streaming video game Moonlight-common-c library is related to buffer overflow in the stack. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code...
Ceph: Root Privilege Escalation
Background Ceph is a distributed network file system designed to provide excellent performance, reliability, and scalability. Description A vulnerability has been discovered in Ceph. Please review the CVE identifier referenced below for details. Impact The ceph-crash.service runs the ceph-crash...
CVE-2023-4882
DOS vulnerability that could allow an attacker to register a new VNF Virtual Network Function value. This action could trigger the argsassets function defined in the arg-log.php file, which would then execute the args-abort.c file, causing the service to crash...
The vulnerability of the Ceph-crash.service component of the Ceph storage system allows a attacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Ceph-crash.service component of the Ceph storage system is related to the assignment of users to inappropriate groups. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...
Ceph: ceph-crash.service allows local ceph user to root exploit
A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information. This issue can lead to loss of confidentiality, integrity, and availability...
Denial Of Service (DoS)
avahi is vulnerable to Denial of Service DoS attacks. A reachable assertion is present in avahishostnameresolverstart function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames...
AZL-39295 CVE-2022-3650 affecting package ceph for versions less than 16.2.10-3
A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information...