The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to trigger service interruptions by using a specially created proble...

The vulnerability of the ipaddress library in the Python programming language lies in insufficient input validation. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ipaddress library in the Python programming language is related to the incorrect processing of initial zero characters in octal IP address strings. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the strlen function in the fs/nfsd/trace.h component of the Linux operating system, which involves reading data beyond the allowed buffer limits, allows a hacker to cause a service failure.

The vulnerability of the strlen function in the fs/nfsd/trace.h component of the Linux operating system is related to reading data from buffer beyond its allowable limits. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the CiviCRM web-based contact tracking and interaction management system lies in the lack of restrictions on file downloads. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the CiviCRM contact tracking and interaction management web system is related to the ability to upload and execute PHAR archives. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failure...

The vulnerability of the Nodemailer email sending library, related to insufficient elimination of specific elements in requests, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Nodemailer email-sending library relates to insufficient elimination of new line characters and the return key in requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the smbserver.py component in the Python3 Impacket networking module, related to name mangling for path restrictions, allows a hacker to gain access to sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the smbserver.py component in the Python3 Impacket networking module is related to incorrect processing of the "../" path. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the p_lx_elf.cpp component in the UPX executable file packaging mechanism, which involves reading data beyond the allowed buffer size, allows attackers to access confidential information and cause system failures.

The vulnerability of the plxelf.cpp component in the UPX executable file packaging tool is related to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to gain access to confidential data, as well as cause service interruptions...

The vulnerability of the input/output file descriptor structure in XNIO, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the XNIO input/output file descriptor structure relates to the increasing amount of data between garbage collection cycles. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Slicer plugin for the Apache Traffic Server, related to improper resource release, allows a hacker to cause a service failure.

The vulnerability of the Slicer plugin for the Apache Traffic Server is related to the improper release of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the “pleaseedit” system administration tool is related to an incorrect definition of the link before accessing the file. This allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the “pleaseedit” system administration tool is related to the use of predictable file names. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and even cause service interruptions...

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from insufficiently checking incoming requests. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient verification of incoming requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential data, compromise its...

PT-2021-8093 · Samba +8 · Samba +8

Name of the Vulnerable Software and Affected Versions: Samba affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource due to incorrect metadata handling. This allows an authenticated attacker with permissions to read or modify sha...

The vulnerability of the WAF engine for Apache ModSecurity, related to deficiencies in handling exceptional states, allows a attacker to trigger a service failure.

The vulnerability of the WAF engine for Apache ModSecurity is related to incorrect data processing in the form of key-value pairs. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

The vulnerability of the Open vSwitch network service provided by Neutron, related to insufficient data authentication checks, allows attackers to access confidential data and cause service failures.

The vulnerability of the Open vSwitch network service provided by Neutron relates to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service failures through specially crafted packets...

The vulnerability in the imap/util.c component of the Mutt and NeoMutt email clients arises from reading data beyond the allowed buffer size. This allows an attacker to access confidential data and also cause service interruptions.

The vulnerability in the imap/util.c component of the Mutt and NeoMutt email clients is related to incorrect handling of the IMAP sequence set, which ends with a semicolon. Exploiting this vulnerability can allow an attacker to gain access to confidential data, as well as cause service failures...

The vulnerability of the LibRaw::identify_process_dng_fields function in the identify.cpp component of the LibRaw image processing library, related to writing beyond buffer boundaries, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the LibRaw::identifyprocessdngfields function in the identify.cpp component of the LibRaw image processing library is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its...

The vulnerability of the GdkPixbuf image loading library, related to writing beyond the buffer’s boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the GdkPixbuf image loading library is related to writing beyond the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through the use of a specially create...

The vulnerability of the sshd-core Java library component, which supports the SSH protocol of Apache SSHD, allows a attacker to cause a service failure.

The vulnerability of the sshd-core Java library component, which supports SSH protocol with Apache SSHD, is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...

The vulnerability of Juniper Networks Junos OS routers of the QFX5000 and EX4600 series, related to unlimited resource distribution, allows a hacker to cause service interruptions.

The vulnerability of Juniper Networks Junos OS routers of the QFX5000 and EX4600 series lies in their unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of TCP/IP NicheLite and InterNiche, related to improper handling of exceptional states, allows attackers to trigger a service failure.

The vulnerability of TCP/IP NicheLite and InterNiche relates to improper handling of exceptional states during HTTP requests processing. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...