NetworkManager match.path DoS

The vulnerability of the match.path property in the NetworkManager network connection management software is related to improper handling of the installation of the match.path property and the activation of the profile. Exploiting this vulnerability can allow an attacker to cause service failures...

Prism syntax extraction tool Resource Leak DoS

The vulnerability of the Prism syntax extraction tool is related to errors in resource release. Exploiting this vulnerability can allow a remote attacker to cause service failures...

NicheLite TCP DoS

The vulnerability of the TCP protocol implementation in NicheLite and InterNiche TCP/IP protocols is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted IP packets...

Addressable Library Resource Consumption DoS

The vulnerability of the Addressable library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

ROS-2-472

2.472 Multiple vulnerabilities in ISC BIND CVE-2021-25216, CVE-2021-25215, CVE-2021-25214 1. Vulnerability Description: CVE-2021-25216 A vulnerability exists due to a boundary error in the GSS-TSIG extension. A remote attacker can send specially crafted requests to the server, trigger a buffer...

ROS-2-582

2.582 Multiple vulnerabilities in ISC BIND CVE-2021-25216, CVE-2021-25215, CVE-2021-25214 1. Vulnerability Description: CVE-2021-25216 A vulnerability exists due to a boundary error in the GSS-TSIG extension. A remote attacker can send specially crafted requests to the server, trigger a buffer...

ROS-2-1247

2.1247 Multiple vulnerabilities in ISC BIND CVE-2021-25216, CVE-2021-25215, CVE-2021-25214 1. Vulnerability Description: CVE-2021-25216 A vulnerability exists due to a boundary error in the GSS-TSIG extension. A remote attacker can send specially crafted requests to the server, trigger a buffer...

ROS-2-983

2.983 Multiple vulnerabilities in ISC BIND CVE-2021-25216, CVE-2021-25215, CVE-2021-25214 1. Vulnerability Description: CVE-2021-25216 A vulnerability exists due to a boundary error in the GSS-TSIG extension. A remote attacker can send specially crafted requests to the server, trigger a buffer...

Apache Struts getMultipartRequestHandler DoS

The vulnerability of the getMultipartRequestHandler method in the Apache Struts software framework is related to resource release errors. Exploiting this vulnerability could allow an attacker to cause service failures...

ColdFusion DoS

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Azure Sphere DoS

The vulnerability of the Azure Sphere operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

CVE-2021-35223

The Serv-U File Server allows for events such as user login failures to be audited by executing a command. This command can be supplied with parameters that can take the form of user string variables, allowing remote code execution...

CVE-2021-35223

The Serv-U File Server allows for events such as user login failures to be audited by executing a command. This command can be supplied with parameters that can take the form of user string variables, allowing remote code execution...

CVE-2021-35223

The CVE-2021-35223 vulnerability affects SolarWinds Serv-U File Server, specifically the Execute Command function that allows examining events (e.g., login failures) and passing parameters as user string variables, enabling remote code execution. The issue is tied to a remote, network-exposed vec...

Vijeo Designer DoS

The vulnerability of the Vijeo Designer software is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

CVE-2021-35223: Improper Input Validation

The Serv-U File Server allows for events such as user login failures to be audited by executing a command. This command can be supplied with parameters that can take the form of user string variables, allowing remote code execution...

Graphic Editor Adobe Creative Cloud Desktop Application DoS

The vulnerability of the graphic editor application for the Adobe Creative Cloud Desktop Application exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Bash Pointer Arithmetic DoS

The vulnerability of the Bash command shell is related to errors due to incorrect command sequencing. Exploiting this vulnerability allows a remote attacker to compromise data integrity and cause service failures...

xauth Process Input Validation

The vulnerability in the process.c file of the xauth user authentication software is related to insufficient validation of input data when using strncpy in the doadd function. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

Systemd Heap Buffer Overflow DoS

The vulnerability of the alloca and strdup functions in the Systemd initialization and service management subsystem is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a attacker to cause service failures...