The vulnerability of the TCP Pace Handler component, located in the tcp_internal_pacing function of the net/ipv4/tcp_output.c file in the Linux operating system’s kernel, allows a hacker to trigger a service failure.

The vulnerability of the TCP Pace Handler component, located in the tcpinternalpacing function of the net/ipv4/tcpoutput.c file in the Linux kernel, is related to memory-related errors after deallocation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the CAMS for HIS distributed control systems management component is related to violations of security design principles. This allows attackers to access protected information or cause service failures.

The vulnerability of the CAMS for HIS distributed control systems’ emergency message and event management components is related to violations of secure design principles. Exploiting this vulnerability could allow an attacker operating remotely to gain access to protected information or cause...

Denial of Service (DoS)

Overview rack is a minimal, modular and adaptable interface for developing web applications in Ruby. By wrapping HTTP requests and responses in the simplest way possible, it unifies and distills the API for web servers, web frameworks, and software in between the so-called middleware into a singl...

The vulnerability of the XFRM subsystem in the Linux operating system allows a hacker to gain access to confidential information or cause a service failure.

The vulnerability of the XFRM subsystem in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...

The vulnerability of the dnsproxy package of the Connman connection manager allows a hacker to cause a service failure or expose protected information.

The vulnerability of the dnsproxy package of the Connman connection controller involves reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures or expose sensitive information...

The vulnerability of the Cluster Shared Volumes file system in Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the Cluster Shared Volumes CSV file system for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Vulnerability of the njs_lvlhsh_bucket_find() function (njs_lvlhsh.c) in the njs interpreter of the nginx server, allowing a hacker to cause a service failure

The vulnerability of the njslvlhshbucketfind function njslvlhsh.c in the njs interpreter of the nginx server involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerabilities of the components buf.c and tree.c in the libxml2 library allow a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the buf.c and tree.c components of the libxml2 library is related to integer overflow when using the xmlBuf and xmlBuffer types. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code using specially created XML files...

The vulnerability of the get_user_pages_fast() function implementation in the KVM virtualization subsystem of Linux operating systems allows a attacker to cause a service failure or gain increased privileges.

The vulnerability of the getuserpagesfast function implementation in the KVM virtualization subsystem of Linux operating systems is related to writing data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or increase their privileges...

Silicon Labs Z-Wave 500 系列输入验证错误漏洞

Silicon Labs Z-Wave Chipsets are a type of chipset in the smart home ecosystem from Silicon Labs, USA. A security vulnerability exists in the Silicon Labs Z-Wave 500 series that stems from a denial of service DoS in the Z-Wave S0 NonceGet protocol specification, which can be exploited by an...

Vulnerability of Firefox web browsers, Firefox ESR, and Thunderbird email client: This vulnerability arises from allowing operations beyond the buffer in memory, enabling attackers to execute arbitrary code or cause service interruptions.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to the issue of operations going beyond the buffer in memory when processing HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failur...

The vulnerability of the AWS VPN Client service, related to synchronization errors when using a shared resource, allows a perpetrator to escalate their privileges or cause a service failure.

The vulnerability of the AWS VPN Client is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...

CVE-2022-1728

Allowing long password leads to denial of service in polonel/trudesk in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications...

GHSA-H7VH-6GMM-G7H9 Stored XSS in LavaLite 5.2.4

LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code...

Stored XSS in LavaLite 5.2.4

LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code...

The vulnerability of the fs/io_uring.c file in the io_uring subsystem of the Linux operating system allows a attacker to cause a service failure or gain increased privileges.

The vulnerability of the fs/iouring.c file in the iouring subsystem of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure or increase their privileges...

The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint conference call control device and the Cisco RoomOS operating system arises from the failure to remove encrypted URI schemes from web pages. This allows a perpetrator to trigger a service failure or expose protected information.

The vulnerability of the Microprogramming Software of the Cisco TelePresence Collaboration Endpoint CE device and the Cisco RoomOS operating system is related to the lack of measures taken to neutralize encrypted URI schemes on web pages. Exploiting this vulnerability can allow a malicious actor ...

CVE-2022-1698

Allowing long password leads to denial of service in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications...

Code injection

A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated network-based PAN-OS administrator to upload a specifically created configuration that disrupts system processes and potentially execute arbitrary code with root privileges when the configuration is committ...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions using MySQL network protocols...