httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path

An out-of-bounds read in modproxyuwsgi of httpd allows a remote unauthenticated attacker to crash the service through a crafted request. The highest threat from this vulnerability is to system availability...

mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2022)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

mysql: Server: Stored Procedure unspecified vulnerability (CPU Jul 2022)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2022-37237

An attacker can send malicious RTMP requests to make the ZLMediaKit server crash remotely. Affected version is below commit 7d8b212a3c3368bc2f6507cb74664fc419eb9327...

CVE-2022-37237

An attacker can send malicious RTMP requests to make the ZLMediaKit server crash remotely. Affected version is below commit 7d8b212a3c3368bc2f6507cb74664fc419eb9327...

CVE-2022-37237

ZLMediaKit is affected by CVE-2022-37237. An attacker can send malicious RTMP requests to remotely crash the ZLMediaKit server. The vulnerability affects versions below commit 7d8b212a3c3368bc2f6507cb74664fc419eb9327. Root cause details are not explicitly provided in the documents beyond the cras...

ZLMediaKit 安全漏洞

ZLMediaKit is China ZLMediaKit open source an advanced operational-grade streaming media service framework based on C++ 11. ZLMediaKit has a security vulnerability. An attacker exploiting this vulnerability could send a malicious RTMP request to remotely crash the server...

PT-2022-23880 · Unknown · Zlmediakit

Name of the Vulnerable Software and Affected Versions: ZLMediaKit versions below commit 7d8b212a3c3368bc2f6507cb74664fc419eb9327 Description: An attacker can send malicious RTMP requests to make the ZLMediaKit server crash remotely. Recommendations: For versions below commit...

PT-2022-17980 · Siemens · Scalance Xf204 +20

Name of the Vulnerable Software and Affected Versions: SCALANCE X200-4P IRT versions prior to V5.5.2 SCALANCE X201-3P IRT versions prior to V5.5.2 SCALANCE X201-3P IRT PRO versions prior to V5.5.2 SCALANCE X202-2IRT versions prior to V5.5.2 SCALANCE X202-2P IRT versions prior to V5.5.2 SCALANCE...

squid: DoS when processing gopher server responses

A vulnerability was found in squid Web proxy cache server. This issue occurs due to improper buffer management while processing Gopher server responses. This flaw leads to a remote denial of service or a crash if it receives specially crafted network traffic, either by mistake or a malicious acto...

PT-2022-12468 · Unknown · Nhi'S Health Insurance Web Service

Name of the Vulnerable Software and Affected Versions: NHI's health insurance web service component affected versions not specified Description: The issue is related to insufficient validation for input string length in the health insurance web service component, which can lead to a heap-based...

CVE-2022-29863

OPC UA .NET Standard Stack 1.04.368 allows remote attacker to cause a crash via a crafted message that triggers excessive memory allocation...

Envoy code issue vulnerability

Envoy is an open source distributed proxy server. versions prior to Envoy 1.22.1 have a code issue vulnerability that could be exploited by an attacker to crash Envoy via null pointer dereference on an upstream server controlled by the vulnerability...

Heap overflow

Multiple Denial-of-Service vulnerabilities was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files cause memory corruption and heap buffer overflow which eventually can crash the scanning engine. The exploit can be triggered remotely by an...

Google Go 信任管理问题漏洞

Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google, Inc. Google Go for macOS 1.18.1 A security vulnerability exists in version 1.18.x prior to 1.18.1, which stems from a possible crash on macOS when certain incorrectly formatted...

UBUNTU-CVE-2022-21414

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.

...

kernel: remote stack overflow via kernel panic on systems using TIPC may lead to DoS

A stack overflow flaw was found in the Linux kernel’s TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges...

The vulnerability of the apply_sao_internal function in the h.265 Libde265 implementation allows a attacker to cause a service failure.

The vulnerability of the applysaointernal function in the h.265 Libde265 implementation is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially created file...

AZL-9239 CVE-2022-0435 affecting package kernel for versions less than 5.15.37.1-2

A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges...