3854 matches found
The vulnerability of the DNS server service in Windows operating systems allows a perpetrator to disclose protected information or cause service failures.
The vulnerability of the DNS server service in Windows operating systems is related to the lack of protection for service-related data. Exploiting this vulnerability can allow a attacker to disclose sensitive information or cause service failures...
The vulnerability of the cJSON_InsertItemInArray function in the JSON file processing library for the C JSON-C language allows a attacker to cause a service failure.
The vulnerability of the cJSONInsertItemInArray function in the JSON file processing library for the C JSON language is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause service failures remotely...
CVE-2021-47076
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Return CQE error if invalid lkey was supplied RXE is missing update of WQE status in LOCALWRITE failures. This caused the following kernel panic if someone sent an atomic operation with an explicitly wrong lkey. leonro@...
CentOS 9 : bind-9.16.23-9.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the bind-9.16.23-9.el9 build changelog. - Sending a flood of dynamic DNS updates may cause named to allocate large amounts of memory. This, in turn, may cause named to exit due to ...
The vulnerability of the site isolation function in Microsoft Edge and Google Chrome browsers allows a malicious actor to gain unauthorized access to protected information or cause service failures.
The vulnerability of site isolation functions in Microsoft Edge and Google Chrome browsers is related to improper security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...
WordPress JobSearch Plugin < 2.3.4 is vulnerable to Broken Authentication
Software JobSearch Type Plugin Vulnerable versions 2.3.4 Fixed in 2.3.4 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2023-6584 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID f4a18b4236e5 Credits Marc Montpas...
The vulnerability of the Manageability Engine (ME) in Intel Server Platform Services (SPS) software for Lenovo ThinkSystem servers allows a malicious actor to alter the firmware configuration and trigger a service failure.
The vulnerability of the Manageability Engine ME in Intel Server Platform Services SPS of Lenovo ThinkSystem servers stems from the synchronization failure between BIOS/UEFI and ME states due to the use of non-replicable configurations. Exploiting this vulnerability can allow an attacker to alter...
The vulnerability of the Django web application platform, related to uncontrolled resource consumption, allows attackers to trigger service failures.
The vulnerability of the Django web application framework is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of Intel Server Platform Services’ microprogramming software, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.
The vulnerability of Intel Server Platform Services’ microprogramming software is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of microprogrammed software in Rosemount GC370XA, GC700XA, and GC1500XA gas chromatographs is caused by deficiencies in the authentication process, which allows unauthorized access to confidential information or causes service failures.
The vulnerability of microprogrammed software in Rosemount GC370XA, GC700XA, and GC1500XA gas chromatographs is related to deficiencies in the authentication process. Exploiting this vulnerability can allow unauthorized individuals to access confidential information or cause service failures...
The vulnerability of the Intel Memory and Storage Tool’s software for monitoring and managing RAM and solid-state drives lies in improper resource initialization, which allows a hacker to trigger a service failure.
The vulnerability of the Intel Optane solid-state storage management tool for customers and data processing centers involves improper initialization of resources. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of the sshpk library on the Node.js software platform, which allows a hacker to cause a service failure.
The vulnerability of the sshpk library on the Node.js software platform is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of microprogrammed software in Emerson Rosemoun GC1500XA, GC700XA, and GC370XA flow gas analyzers is related to deficiencies in authentication procedures. This allows attackers to compromise data integrity and cause service failures.
The vulnerability of the microprogrammed software in Emerson Rosemoun GC1500XA, GC700XA, and GC370XA gas analyzers is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...
ISC BIND Security Vulnerability
ISC BIND is a suite of open source software that implements the DNS protocol from the US company ISC. A security vulnerability exists in ISC BIND that stems from the presence of bad interactions that could lead to assertion failures...
The vulnerability of the Suricata intrusion detection and prevention system, due to the unlimited distribution of resources, allows an intruder to trigger a service failure.
The vulnerability of the Suricata intrusion detection and prevention system is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of the TIFFOpen() function in the LibTIFF API library, related to uncontrolled resource consumption, allows attackers to cause service failures.
The vulnerability of the TIFFOpen function in the LibTIFF library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerabilities of the microprogramming software for thermal scanning systems—FeverWarn ESP32, FeverWarn RaspberryPi, and the FeverWarn DataHub RaspberryPi system for centralized data storage and management—allow a intruder to execute arbitrary commands or trigger failures.
The vulnerabilities of the microprogramming software for thermal scanning systems—FeverWarn ESP32, FeverWarn RaspberryPi, and the FeverWarn DataHub RaspberryPi system for centralized data storage and management—are related to insufficient validation of input data. Exploiting these vulnerabilities...
The vulnerability of the HTTP library for Rust Hyper, related to unlimited resource distribution, allows attackers to cause service failures.
The vulnerability of the HTTP library for Rust Hyper relates to the unlimited distribution of resources. Exploiting this vulnerability could allow a remote attacker to cause service failures...
The vulnerability of the Spring MVC design pattern used in the Spring Framework, a Java framework for securing industrial applications, and Spring Boot, a framework for creating web applications, allows attackers to induce service failures.
The vulnerability of the Spring MVC design pattern used in the Spring Framework, a Java framework for securing industrial applications, and Spring Boot, a framework for creating web applications, is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow an attack...
The vulnerability of the HotKey Services driver in the microprogramming software of Intel NUC P14E Laptop Element allows a hacker to trigger a service failure.
The vulnerability of the HotKey Services driver in Intel NUC P14E Laptop Element microprogramming software is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause service failures...