Lucene search
+L

1596 matches found

Vulnrichment
Vulnrichment
added 2022/12/07 12:0 a.m.6 views

CVE-2022-44608

Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.0.0 to 4.0.3 allows a remote authenticated attacker to consume huge storage space, which may result in a denial-of-service DoS condition...

7.3AI score0.00854EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/12/07 12:0 a.m.38 views

CVE-2022-44608

Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.0.0 to 4.0.3 allows a remote authenticated attacker to consume huge storage space, which may result in a denial-of-service DoS condition...

7.5AI score0.00854EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/12/07 12:0 a.m.16 views

PT-2022-27263 · Cybozu · Cybozu Remote Service

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service versions 4.0.0 through 4.0.3 Description: The issue allows a remote authenticated attacker to consume huge storage space, potentially resulting in a denial-of-service DoS condition due to uncontrolled resource consumptio...

7.5CVSS6.8AI score0.00854EPSS
SaveExploits0References5
CVE
CVE
added 2022/12/07 12:0 a.m.79 views

CVE-2022-44608

The CVE-2022-44608 entry applies to Cybozu Remote Service, affecting versions 4.0.0–4.0.3. The root cause is uncontrolled resource consumption, enabling a remote authenticated attacker to exhaust storage space and cause a DoS condition. The impact is explicitly DoS due to storage exhaustion. Affe...

7.5CVSS7.2AI score0.00854EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/12/07 12:0 a.m.13 views

The vulnerability of the Windows Secure Channel service in the Windows operating system allows a perpetrator to trigger a service failure.

The vulnerability of the Windows Secure Channel service in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.3AI score0.02585EPSS
SaveExploits0References3
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2022/11/25 5:15 a.m.8 views

Cybozu Remote Service vulnerable to Uncontrolled Resource Consumption

Overview Cybozu Remote Service provided by Cybozu, Inc. is vulnerable to uncontrolled resource consumption CWE-400. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of the solution through JVN. Impact A logged-in user may consume huge storage space, resulting to a...

7.5CVSS6.6AI score0.00854EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2022/11/25 12:0 a.m.46 views

JVN#87895771: Cybozu Remote Service vulnerable to Uncontrolled Resource Consumption

Cybozu Remote Service provided by Cybozu, Inc. is vulnerable to uncontrolled resource consumption CWE-400. Impact A logged-in user may consume huge storage space, resulting to a denial-of-service DoS condition. Solution Update the Software Update to the latest version according to the information...

7.5CVSS7.5AI score0.00854EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/11/25 12:0 a.m.9 views

The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPPT) for Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

5.9CVSS6.8AI score0.01441EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/11/25 12:0 a.m.9 views

Cybozu Remote Service 资源管理错误漏洞

Cybozu Remote Service is a remote service management software from Cybozu Japan. It is used to access the Cybozu internal system. A security vulnerability exists in Cybozu Remote Service versions 4.0.0 through 4.0.3, which is caused by uncontrolled resource consumption...

7.5CVSS6.2AI score0.00854EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/11/23 12:0 a.m.9 views

The vulnerability of the PAC parameters (Privileged Attribute Certificate) in the krb5_parse_pac function of Heimdal and MIT Kerberos, a network interaction program for Samba, allows a perpetrator to trigger a service failure.

The vulnerability of the PAC Privileged Attribute Certificate parameters in the krb5parsepac function of Heimdal and MIT Kerberos, as well as in Samba’s network interaction programs, is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service...

6.4CVSS6.8AI score0.06419EPSS
SaveExploits1References21Affected Software12
BDU FSTEC
BDU FSTEC
added 2022/11/17 12:0 a.m.14 views

The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPPT) for Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

5.9CVSS6.8AI score0.00967EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/11/15 12:0 a.m.6 views

The vulnerability of the Kerberos protocol for Microsoft Windows operating systems allows a perpetrator to induce a service failure.

The vulnerability of the Kerberos protocol for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.3AI score0.01914EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/11/15 12:0 a.m.9 views

The vulnerability of the Point-to-Point Tunneling Protocol network protocol implementation in the Windows operating system allows a hacker to induce a service failure.

The vulnerability of the Point-to-Point Tunneling Protocol network protocol implementation in the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to remotely cause service failures...

5.9CVSS6.8AI score0.00967EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/11/14 12:0 a.m.8 views

The vulnerability of the Local Session Manager component of the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Windows Local Session Manager component exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.7CVSS7.2AI score0.0283EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/11/11 12:0 a.m.8 views

The vulnerability of the object-cleaning function in the XML analysis library libxml2 allows a attacker to cause a service failure.

The vulnerability of the object-cleaning function in the XML library for analyzing XML documents, libxml2, is related to double memory deallocation when processing dict objects, where the first byte of the structure equals zero. Exploiting this vulnerability can allow an attacker to cause service...

8.5CVSS6.5AI score0.06782EPSS
SaveExploits0References18Affected Software13
BDU FSTEC
BDU FSTEC
added 2022/11/10 12:0 a.m.12 views

The vulnerability of the miniz data compression library, related to integer overflow, allows attackers to cause service failures.

The vulnerability of the miniz data compression library is related to integer overflows during the processing of file headers. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

5.9CVSS5.5AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/09 12:0 a.m.11 views

The vulnerability of the Windows Secure Channel component of the Windows operating system, which allows a hacker to trigger a service failure

The vulnerability of the Windows Secure Channel component of the Windows operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.6AI score0.02007EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/11/07 12:0 a.m.9 views

The vulnerability of Siemens’ microprogrammed software for routers, access points, and routers arises from insufficient validation of input data. This allows attackers to trigger service failures.

The vulnerability of Siemens’ microprogrammed routing devices, access points, and routers exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

8.6CVSS7.5AI score0.01074EPSS
SaveExploits0References2Affected Software17
BDU FSTEC
BDU FSTEC
added 2022/11/07 12:0 a.m.9 views

The platform’s vulnerability related to ensuring security standards for XML Apache Santuario XML Security for Java allows attackers to trigger a service failure.

The vulnerability of the jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java component of the Apache Santuario XML Security for Java platform is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

7.5CVSS7.2AI score0.08863EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/11/03 12:0 a.m.10 views

The vulnerability of the njs_promise_reaction_job function in the njs interpreter of the nginx server allows a attacker to cause a service failure.

The vulnerability of the njspromisereactionjob function in the njs interpreter of the nginx server is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

7.8CVSS7.6AI score0.0074EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder