CVE-2024-0003

A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to create an account on the array allowing privileged access...

Vulnerability of Firefox and Firefox ESR web browsers, as well as the Thunderbird email client, related to writing beyond the buffer limit, allowing attackers to trigger a service failure.

The vulnerabilities in web browsers Firefox and Firefox ESR, as well as the Thunderbird email client, are related to buffer overflow attacks. Exploiting these vulnerabilities can allow an attacker to cause service interruptions remotely...

The vulnerability of the parse_list() function in the tcpprep editor for processing PCAP files, as well as in the Tcpreplay tool for editing and replaying PCAP files, allows a hacker to cause a service failure.

The vulnerability of the parselist function in the tcpprep editing and playback PCAP file utility lies in pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the cidr2cidr() function, a processor for PCAP files, in the tcpprep editing and playback utility for PCAP files, allows a malicious actor to cause a service failure.

The vulnerability of the cidr2cidr function, a processor for PCAP files, in the tcpprep editing and playback utility for PCAP files, Tcpreplay, is related to an uncontrolled, exploitable flaw. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service interruption...

The vulnerability of the parse_endpoints() function in the tcprewrite editing tool and the Tcpreplay tool for editing and replaying PCAP files allows a hacker to cause a service failure.

The vulnerability of the parseendpoints function in the tcprewrite editing tool for PCAP files, as well as in the Tcpreplay tool for editing and replaying PCAP files, is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability in the module/loaders/loader_ico.c component of the Imlib2 image processing library allows a attacker to cause a service failure.

The vulnerability in the modules/loaders/loaderico.c component of the Imlib2 image processing library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the gst_jpeg_dec_negotiate function in the Gstreamer multimedia framework allows a attacker to cause a service failure.

The vulnerability of the gstjpegdecnegotiate function in the Gstreamer multimedia framework is related to errors in pointer dereferencing of NULL pointers. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the modular application server of IBM WebSphere Liberty Profile, a software for managing transaction applications of the IBM TXSeries for Multiplatforms, allows a hacker to trigger a service failure.

The vulnerability of the modular application server of IBM WebSphere Liberty Profile, a software for managing transaction applications of the IBM TXSeries for Multiplatforms, is related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause...

The vulnerability of the upnphost.dll library in the Windows operating system, which allows a hacker to trigger a service failure

The vulnerability of the upnphost.dll library in the Windows operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of Windows operating systems’ message queues allows attackers to induce service failures.

The vulnerability of Message Queuing in Windows operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Microsoft Message Queuing (MSMQ) service on Microsoft Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft Message Queuing MSMQ service on Microsoft Windows operating systems is related to pointer swapping errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the MapUrlToZone method in the IInternetSecurityManager interface on Microsoft Windows operating systems allows a attacker to cause a service failure.

The vulnerability of the MapUrlToZone method in the IInternetSecurityManager interface of Microsoft Windows operating systems is related to security flaws resulting from a full overflow condition. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the Microsoft Message Queuing (MSMQ) service on Microsoft Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft Message Queuing MSMQ service on Microsoft Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of NetworkManager’s software for managing network connections, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the NetworkManager software for managing network connections is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability in the full-screen mode of browsers like Mozilla Firefox, Firefox ESR, and the email client Thunderbird on Mac OS allows a hacker to trigger a service failure.

The vulnerability in the full-screen mode of browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird on Mac OS operating systems is related to improper handling of exceptional states. Exploiting this vulnerability can allow an attacker to cause service interruptions remote...

The vulnerability of the Apache Tomcat application server, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the Apache Tomcat application server is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the /bin/alphapd file in D-Link DCS-932L microprogrammable software-based cameras allows a intruder to trigger a service failure.

The vulnerability of the /bin/alphapd binary in D-Link DCS-932L microprogrammed software cameras lies in the fact that the operation data is written outside of the buffer in memory when processing the AUTHORIZATION field in the HTTP request header. Exploitation of this vulnerability allows a remo...

The vulnerability of the vpn.cgi web interface script of the DrayTek Vigor router software allows a hacker to trigger a service failure.

The vulnerability of the vpn.cgi web interface of the DrayTek Vigor router operating system is related to buffer overflow during the processing of the sPeerId parameter. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the parse_ds64 function in the Gstreamer multimedia framework allows a hacker to cause a service failure.

The vulnerability of the parseds64 function in the Gstreamer multimedia framework is related to reading data beyond the allowable range of memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the qtdemux_parse_sbgp function in the Gstreamer multimedia framework, which allows a hacker to cause a service failure.

The vulnerability of the qtdemuxparsesbgp function in the Gstreamer multimedia framework is related to the use of the NULL pointer. Exploiting this vulnerability could allow a remote attacker to cause a service failure...