The vulnerability of the vlapic_error function in Xen hypervisors allows a perpetrator to trigger a service failure.

The vulnerability of the vlapicerror function in supervisors is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Sequence Manager software in industrial environments lies in its insufficient validation of input data, allowing a malicious actor to trigger service failures.

The vulnerability of the Sequence Manager software in industrial environments is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger service failures remotely...

Session Launch Failure Issue when Anti Keylogging is enabled [Windows 11 24H2 Update]

On Windows endpoints with the most recent Windows 11 24H2 update, session launches may encounter failures when the anti-keylogging feature App Protection is enabled. This issue is attributed to the changes in Windows system APIs leveraged by App Protection features...

K000141270: PHP vulnerabilities CVE-2016-7411, CVE-2016-9138, CVE-2016-9137, CVE-2016-4541, and CVE-2016-4540

Security Advisory Description CVE-2016-7411 ext/standard/varunserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via an unserialize call that referenc...

The vulnerability of Intel Data Center GPU Max relates to insufficient testing of unusual or exceptional states, allowing a perpetrator to trigger a service failure.

The vulnerability of the Intel Data Center GPU Max graphic processor is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability can allow a perpetrator to cause service failures...

The vulnerability in the CODESYS web server environment allows a attacker to cause a service failure.

The vulnerability in the CODESYS web server’s execution environment related to CODESYS Control is due to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures by sending a specially crafte...

UBUNTU-CVE-2024-46861

In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: do not stop RX on failing RX callback RX callbacks can fail for multiple reasons: Payload too short Payload formatted incorrecly e.g. bad NCM framing Lack of memory None of these should cause the driver to seize u...

SolarWinds Serv-U 15.2.0 < 15.2.4

The version of SolarWinds Serv-U installed on the remote host is prior to 15.2.4. It is, therefore, affected by a vulnerability as referenced in the serv-u1524 advisory. - The Serv-U File Server allows for events such as user login failures to be audited by executing a command. This command can b...

The vulnerability of the Java Protocol Buffers protobuf-java environment library, related to insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of the Java Protocol Buffers protobuf-java environment library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

WordPress JupiterX Core Plugin <= 4.7.5 is vulnerable to Broken Authentication

Software JupiterX Core Type Plugin Vulnerable versions = 4.7.5 Fixed in 4.7.8 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-7781 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 4950f50fad7a Credits Geo Void...

WordPress Uncanny Groups for LearnDash Plugin <= 6.1.0.1 is vulnerable to Privilege Escalation

Software Uncanny Groups for LearnDash Type Plugin Vulnerable versions = 6.1.0.1 Fixed in 6.1.1 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-8349 Patch priority Medium CVSS severity Medium 7.2 Developer Claim ownership PSID 0a9f41b67f...

The vulnerability of the array_index_nospec function in the DMA-BUF driver of the Linux operating system allows a hacker to gain unauthorized access to protected information or cause service failures.

The vulnerability of the arrayindexnospec function in the Linux kernel’s DMA-buf driver is related to a memory leak. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

The vulnerability of the XML tools for Ruby REXML, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the XML tools for Ruby REXML is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the reweight_entity() function in the sched component of the Linux operating system’s kernel allows for a failure to occur due to synchronization errors when using shared resources, potentially leading to service failures.

The vulnerability of the reweightentity function in the sched component of the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Go programming language’s network component, which allows a hacker to trigger a service failure

The vulnerability of the Go programming language component is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the XML tools for Ruby REXML stems from improper restrictions on recursive references to entities in DTDs. This allows attackers to trigger a service failure.

The vulnerability of the XML tools for Ruby REXML is related to improper restrictions on recursive references to entities in DTDs. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit, related to the use of memory after it is released, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to data type conversion errors, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to data type conversion errors. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the pspdf_prepare_outpages() function in the ps-pdf.cxx component of the HTMLDOC conversion tool allows a attacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the pspdfprepareoutpages function in the ps-pdf.cxx component of the HTMLDOC conversion tool is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...