The vulnerability in the geniepppoe.cgi script of Netgear’s router software models R7000P and R6400 v2 allows a hacker to cause a service failure.

The vulnerability in the geniepppoe.cgi microprogramming software for Netgear XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of input data during the processing of the pppoelocalip parameter. Exploiting this vulnerability allows a malicious actor to cause...

The vulnerability in the ap_mode.cgi script of NETGEAR’s router microprogramming devices R8500, XR300, R7000P, and R6400 v2 allows a hacker to induce a service failure.

The vulnerability of the apmode.cgi script in NETGEAR’s router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 lies in a buffer overflow that occurs during the processing of the apmodedns1pri and apmodedns1sec parameters. Exploiting this vulnerability allows an attacker to...

The vulnerability of the Action Controller component of the Action Pack interpreter for Ruby allows a attacker to trigger a service failure.

The vulnerability of the Action Controller component of the Action Pack interpreter in Ruby is related to the use of a regular expression with high computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

The vulnerability of the Action Dispatch component in the Action Pack extension’s Ruby interpreter allows a attacker to trigger a service failure.

The vulnerability of the Action Dispatch component in the Action Pack extension’s Ruby interpreter involves unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the `plain_text_for_blockquote_node` function in the Action Text interpreter for Ruby allows a hacker to trigger a service failure.

The vulnerability of the plaintextforblockquotenode function in the Action Text interpreter for Ruby is related to the use of a regular expression with high computational complexity. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the External Agent Assignment Service (EAAS) function in the Cisco Enterprise Chat and Email (ECE) messaging tool allows a perpetrator to cause a service failure.

The vulnerability of the External Agent Assignment Service EAAS function in the Cisco Enterprise Chat and Email ECE messaging tool is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

CVE-2024-7516

A vulnerability in Brocade Fabric OS versions before 9.2.2 could allow man-in-the-middle attackers to conduct remote Service Session Hijacking that may arise from the attacker's ability to forge an SSH key while the Brocade Fabric OS Switch is performing various remote operations initiated by a...

CVE-2024-7516 Brocade Fabric OS before 9.2.2 does not enforce strict host key checking

A vulnerability in Brocade Fabric OS versions before 9.2.2 could allow man-in-the-middle attackers to conduct remote Service Session Hijacking that may arise from the attacker's ability to forge an SSH key while the Brocade Fabric OS Switch is performing various remote operations initiated by a...

CVE-2024-7516 Brocade Fabric OS before 9.2.2 does not enforce strict host key checking

A vulnerability in Brocade Fabric OS versions before 9.2.2 could allow man-in-the-middle attackers to conduct remote Service Session Hijacking that may arise from the attacker's ability to forge an SSH key while the Brocade Fabric OS Switch is performing various remote operations initiated by a...

The vulnerability of the Redis database management system, which arises due to insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of the Redis database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of microprogramming software in Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM) arises from improper elimination of special elements in output data, allowing attackers to trigger a service failure.

The vulnerability of Microprogramming Software under Intel Active Management Technology AMT and Intel Standard Manageability ISM is related to incorrect elimination of special elements in output data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Cisco IOS XE network devices in the Cisco Catalyst 9000 Series operating system, related to integer overflow, allows a attacker to cause service interruptions.

The vulnerability of the Cisco IOS XE network devices in the Cisco Catalyst 9000 series operating system is related to a potential overflow condition during the processing of frames with the VLAN tag. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the lustre_msg_string() function in the ptlrpc module of the Lustre file system, related to writing beyond buffer boundaries, allows a attacker to cause a service failure.

The vulnerability of the lustremsgstring function in the ptlrpc module of the Lustre file system is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the web server of the microprogramming software for communication modules of SIMATIC CP, TIM 1531 IRC, allows a perpetrator to cause service failures.

The vulnerability of the web server of the microprogramming software for communication modules of SIMATIC CP, TIM 1531 IRC, is related to errors in pointer assignment. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the config_input function in the af_acrossover.c component of the FFmpeg multimedia library, related to improper memory release before deleting the last reference, allows a hacker to trigger a service failure.

The vulnerability of the configinput function in the afacrossover.c component of the FFmpeg multimedia library is related to improper memory release before deleting the last reference. Exploiting this vulnerability may allow a remote attacker to cause a service failure...

The vulnerability of the mmsServerHandleDeleteNamedVariableListRequest() function in the C language library libIEC61850 allows a attacker to trigger a service failure.

The vulnerability of the mmsServerHandleDeleteNamedVariableListRequest function in the libIEC61850 library, written in the C language, is related to improper cleanup or release of resources. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

The vulnerability of the TLS function in microprogramming-based network interface controllers of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service failures.

The vulnerability of the TLS function in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD systems is related to improper validation of certain types of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Splunk Enterprise platform’s SplunkD module for operational analysis allows a perpetrator to trigger a service failure.

The vulnerability of the Splunk Enterprise platform’s Splunkd component relates to an uncontrolled resource consumption due to an improperly formatted parameter named INGESTEVAL. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of Ember ZNet’s microprogramming software library for monitoring and controlling Sentron Powercenter 1000 allows a intruder to cause a service failure.

The vulnerability of Ember ZNet’s microprogramming software for monitoring and controlling energy systems in Sentron Powercenter 1000 lies in the possibility of manipulating the NWK serial number. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the SSH server of Cisco Adaptive Security Appliance’s microprogrammed network interface devices allows a attacker to cause a service failure.

The vulnerability of the SSH server of the microprogrammed network interface devices in Cisco Adaptive Security Appliances ASA is related to an uncontrolled resource consumption. This vulnerability could allow a malicious actor to cause service interruptions remotely...