CVE-2022-30591

quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the...

CVE-2022-30591

quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the...

The vulnerability of the Windows iSCSI Discovery Service in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Windows iSCSI Discovery Service in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the target system...

CVE-2022-30140

Windows iSCSI Discovery Service Remote Code Execution Vulnerability...

CVE-2022-30140

Windows iSCSI Discovery Service Remote Code Execution Vulnerability...

CVE-2022-30140

Windows iSCSI Discovery Service Remote Code Execution Vulnerability...

Remote code execution

Windows iSCSI Discovery Service Remote Code Execution Vulnerability...

CVE-2022-30140 Windows iSCSI Discovery Service Remote Code Execution Vulnerability

...

CVE-2022-30140

Technical details for CVE-2022-30140 are not publicly available in the provided documents; no affected products, root cause, or fixes are specified here. Monitor for updates from official sources.

Windows iSCSI Discovery Service Remote Code Execution Vulnerability

...

envoy: Segfault in GrpcHealthCheckerImpl

A flaw was found in Envoy. This flaw allows an attacker who controls an upstream host and also controls service discovery of that host via DNS, the EDS API, etc. to crash Envoy by forcing the removal of the host from service discovery and then failing the gRPC health check request. This issue...

PT-2022-3133 · Microsoft · Windows Iscsi Discovery Service +1

Name of the Vulnerable Software and Affected Versions: Windows iSCSI Discovery Service affected versions not specified Description: The issue is related to insufficient input validation in the Windows iSCSI Discovery Service of the Windows operating system. This can be exploited by a remote...

Siemens OPC UA Protocol Stack Discovery Service (Update E)

1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC Vulnerabilities: Improper restriction of XML external entity reference 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled...

envoy: Stack exhaustion when a cluster is deleted via Cluster Discovery Service

A flaw was found in envoy. When a cluster is deleted via the Cluster Discovery Service, a stack exhaustion may occur...

envoy: Stack exhaustion when a cluster is deleted via Cluster Discovery Service

A flaw was found in envoy. When a cluster is deleted via the Cluster Discovery Service, a stack exhaustion may occur...

CVE-2022-23606

A flaw was found in envoy. When a cluster is deleted via the Cluster Discovery Service, a stack exhaustion may occur...

CVE-2022-23606 Crash when a cluster is deleted in Envoy

Envoy is an open source edge and service proxy, designed for cloud-native applications. When a cluster is deleted via Cluster Discovery Service CDS all idle connections established to endpoints in that cluster are disconnected. A recursion was introduced in the procedure of disconnecting idle...

PT-2022-16121 · Envoy · Envoy

Name of the Vulnerable Software and Affected Versions: Envoy affected versions not specified Description: Envoy is an open source edge and service proxy, designed for cloud-native applications. When a cluster is deleted via Cluster Discovery Service CDS, all idle connections established to...

Buffer Error Vulnerability in Multiple TP-Link Products

P&L TP-Link WDR7400 and so on are products of P&L China.TP-Link WDR7400 is a wireless router.TP-Link WDR7500 is a wireless router.TP-Link WDR7660 is a wireless router.TP-Link WDR7800 is a wireless router.TP-Link WDR8400 is a wireless router.TP-Link WDR8500 is a wireless router.TP-Link WDR8500 is ...

CVE-2020-1491

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker...