1596 matches found
The vulnerability of the LDAP URL parser component in the Apache Directory LDAP API software allows a malicious actor to cause service failure.
The vulnerability of the LDAP URL parser component in Apache Directory LDAP API is related to the lack of control over the data entered by users. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the ip6_output() function in the Linux operating system’s IPv6 kernel implementation allows a attacker to cause a service failure.
The vulnerability of the ip6output function in the net/ipv6/ip6output.c module, which is part of the Linux kernel’s IPv6 implementation, involves the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
Precor Touchscreen Console Security Vulnerability
Precor touchscreen console P62 and Precor touchscreen console P82 are both a touchscreen console from Precor USA. A security vulnerability exists in the Precor Touchscreen Console that stems from the presence of hard-coded service code that could allow a remote attacker to bypass security...
Vulnerability of the Server: Group Replication Plugin component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the Server: Group Replication Plugin component of the Oracle MySQL Server database management system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
Vulnerability of the Server:Thread Pooling component of the Oracle MySQL Server database management system, which allows attackers to cause service interruptions.
The vulnerability of the Server:Thread Pooling component of the Oracle MySQL Server database management system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
The vulnerability of the ng-srcset component in the application design and development environment for Angular applications allows attackers to trigger a service failure.
The vulnerability of the ng-srcset component in the application design and development environment for Angular is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...
The vulnerability of the CurrDir component in the microprogramming software for programmable logic controllers AutomationDirect P3-550E allows a intruder to trigger a service failure.
The vulnerability of the CurrDir component in the AutomationDirect P3-550E programmable logic controllers is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
The vulnerability of the sta_info_alloc() function in the Linux kernel’s mac80211 stack allows a hacker to cause a service failure.
The vulnerability of the stainfoalloc function in the net/mac80211/stainfo.c module, which is part of the mac80211 stack implemented in Linux kernel, can lead to a potential memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
The vulnerability in the module drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c of the network board driver mvpp2 in the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/net/ethernet/marvell/mvpp2/mvpp2main.c file of the MVPP2 network driver on the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
The vulnerability of the Hotspot component in Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK, and the Oracle Java SE software platform allows a attacker to trigger a service failure.
The vulnerability of the Hotspot component in Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK, and the Oracle Java SE software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
CVE-2024-35223 Dapr API Token Exposure
Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. Dapr sends the app token of the invoker app instead of the app token of the invoked app. This causes of a leak of the application token of the invoker app to the invoked app when using Dapr as a...
CVE-2024-35223
CVE-2024-35223 affects Dapr where, when acting as a gRPC proxy for remote service invocation, the proxy may leak the invoker app’s token to the invoked app due to incorrect token handling. The root cause is that the proxy forwards the invoker’s app token (APP_API_TOKEN) instead of the invoked app...
GHSA-284C-X8M7-9W5H Dapr API Token Exposure
Summary A vulnerability has been found in Dapr that causes a leak of the application token of the invoker app to the invoked app when using Dapr as a gRPC proxy for remote service invocation. This issue arises because Dapr sends the app token of the invoker app instead of the app token of the...
Dapr API Token Exposure
Summary A vulnerability has been found in Dapr that causes a leak of the application token of the invoker app to the invoked app when using Dapr as a gRPC proxy for remote service invocation. This issue arises because Dapr sends the app token of the invoker app instead of the app token of the...
PT-2024-26387 · Dapr · Dapr
Name of the Vulnerable Software and Affected Versions: Dapr versions prior to 1.13.3 Description: Dapr sends the app token of the invoker app instead of the app token of the invoked app when using Dapr as a gRPC proxy for remote service invocation, causing a leak of the application token of the...
The vulnerability of the PowerScale OneFS operating system, related to the improper handling of unexpected data types, allows a attacker to trigger a service failure.
The vulnerability of the PowerScale OneFS operating system is related to the improper handling of unexpected data types. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the /goform/setMacFilterCfg component in the Tenda i6 Wi-Fi router software allows a hacker to trigger a service failure.
The vulnerability of the /goform/setMacFilterCfg component in the Tenda i6 Wi-Fi router software lies in the writing of data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
The vulnerability of Juniper Networks Junos OS, an open-source infrastructure demon, allows a attacker to cause a service failure.
The vulnerability of open-source Juniper Networks Junos OS infrastructure related to open-source keys pkid is associated with insufficient checks for exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
