The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.

The vulnerability of Xenstore information storage in Xen hypervisors stems from memory release errors that can occur due to the creation of an arbitrary number of nodes through transactions. Exploiting this vulnerability can allow a attacker to cause service failures...

The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.

The vulnerability of Xenstore information storage system in Xen hypervisors is related to the unlimited distribution of resources. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.

The vulnerability of Xenstore information storage system in Xen hypervisors is related to the unlimited distribution of resources. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.

The vulnerability of Xenstore information storage in Xen hypervisors is related to the incomplete cleanup of temporary or auxiliary resources during node creation. Exploiting this vulnerability can allow attackers to cause service failures...

Launch failures after upgrading to CWA 2403

Users on Citrix Workspace App for Windows 2403 and have Real-Time Media Engine RTME installed on endpoint devices older than 2.9.700 may encounter session launch failures...

GO-2024-2818 Consensus failures in github.com/btcsuite/btcd

Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds...

The vulnerability of the NSCCD server caching daemon in the GNU C Library allows a attacker to cause a service failure.

The vulnerability of the NSCCD daemon, a caching service for system names in the GNU C Library, relates to the assignment of zero pointers. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

WordPress Dynamics 365 Integration Plugin <= 1.3.17 is vulnerable to Sensitive Data Exposure

Software Dynamics 365 Integration Type Plugin Vulnerable versions = 1.3.17 Fixed in 1.3.18 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-34550 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 2397ac5f5483 Credi...

CVE-2024-34478

btcd before 0.24.0 does not correctly implement the consensus rules outlined in BIP 68 and BIP 112, making it susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of...

CVE-2024-34478

CVE-2024-34478 affects btcd before 0.24.0, where the software does not correctly implement BIP 68/BIP 112 consensus rules. The core issue is treating the transaction version as a signed integer instead of unsigned, which can cause consensus failures, potentially leading to a chain split and loss ...

CVE-2024-34478

btcd before 0.24.0 does not correctly implement the consensus rules outlined in BIP 68 and BIP 112, making it susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of...

SUSE CVE-2024-26919

In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: Fix debugfs directory leak The ULPI per-device debugfs root is named after the ulpi device's parent, but ulpiunregisterinterface tries to remove a debugfs directory named after the ulpi device itself. This results in t...

The vulnerability of the Connector/Python driver component of MySQL Connectors in the Oracle MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Connector/Python driver for MySQL Connectors in the Oracle MySQL database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the RDP client FreeRDP, related to unlimited resource distribution, allows attackers to trigger a service failure.

The vulnerability of the RDP client FreeRDP is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

libssh: Missing checks for return values for digests

A flaw was found in the libssh implements abstract layer for message digest MD operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the...

kernel: ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove

A resource leak was found in the WCD MBHC v2 audio codec driver in the Linux kernel. MBHC resources are not properly released on component probe failure or removal, causing interrupt request failures and preventing successful reprobing of the codec component. This leads to sound card initializati...

SUSE-SU-2024:1451-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: - CVE-2024-21011: Fixed denial of service due to long Exception message logging JDK-8319851,bsc1222979 - CVE-2024-21068: Fixed integer overflow in C1 compiler address generation JDK-8322122,bsc1222983 - CVE-2024-21085: Fixed Pack200...

SUSE-SU-2024:1450-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: - CVE-2024-21011: Fixed denial of service due to long Exception message logging JDK-8319851,bsc1222979 - CVE-2024-21068: Fixed integer overflow in C1 compiler address generation JDK-8322122,bsc1222983 - CVE-2024-21085: Fixed Pack200...

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers allows attackers to access confidential information or cause service failures.

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information or cause service failures...

The vulnerability of the udevConnectListAllInterfaces() function in the virtualization management library Libvirt allows a attacker to trigger a service failure.

The vulnerability of the udevConnectListAllInterfaces function in the virtualization management library Libvirt is related to the use of a null pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause service failures remotely...