1660 matches found
CVE-2022-44608
Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.0.0 to 4.0.3 allows a remote authenticated attacker to consume huge storage space, which may result in a denial-of-service DoS condition...
CVE-2022-44608
The CVE-2022-44608 entry applies to Cybozu Remote Service, affecting versions 4.0.0–4.0.3. The root cause is uncontrolled resource consumption, enabling a remote authenticated attacker to exhaust storage space and cause a DoS condition. The impact is explicitly DoS due to storage exhaustion. Affe...
The vulnerability of the Windows Secure Channel service in the Windows operating system allows a perpetrator to trigger a service failure.
The vulnerability of the Windows Secure Channel service in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Cybozu Remote Service vulnerable to Uncontrolled Resource Consumption
Overview Cybozu Remote Service provided by Cybozu, Inc. is vulnerable to uncontrolled resource consumption CWE-400. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of the solution through JVN. Impact A logged-in user may consume huge storage space, resulting to a...
JVN#87895771: Cybozu Remote Service vulnerable to Uncontrolled Resource Consumption
Cybozu Remote Service provided by Cybozu, Inc. is vulnerable to uncontrolled resource consumption CWE-400. Impact A logged-in user may consume huge storage space, resulting to a denial-of-service DoS condition. Solution Update the Software Update to the latest version according to the information...
The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPPT) for Windows operating systems allows a perpetrator to cause a service failure.
The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Cybozu Remote Service 资源管理错误漏洞
Cybozu Remote Service is a remote service management software from Cybozu Japan. It is used to access the Cybozu internal system. A security vulnerability exists in Cybozu Remote Service versions 4.0.0 through 4.0.3, which is caused by uncontrolled resource consumption...
The vulnerability of the PAC parameters (Privileged Attribute Certificate) in the krb5_parse_pac function of Heimdal and MIT Kerberos, a network interaction program for Samba, allows a perpetrator to trigger a service failure.
The vulnerability of the PAC Privileged Attribute Certificate parameters in the krb5parsepac function of Heimdal and MIT Kerberos, as well as in Samba’s network interaction programs, is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service...
The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPPT) for Windows operating systems allows a perpetrator to cause a service failure.
The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Kerberos protocol for Microsoft Windows operating systems allows a perpetrator to induce a service failure.
The vulnerability of the Kerberos protocol for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Point-to-Point Tunneling Protocol network protocol implementation in the Windows operating system allows a hacker to induce a service failure.
The vulnerability of the Point-to-Point Tunneling Protocol network protocol implementation in the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to remotely cause service failures...
The vulnerability of the Local Session Manager component of the Windows operating system allows a hacker to trigger a service failure.
The vulnerability of the Windows Local Session Manager component exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the object-cleaning function in the XML analysis library libxml2 allows a attacker to cause a service failure.
The vulnerability of the object-cleaning function in the XML library for analyzing XML documents, libxml2, is related to double memory deallocation when processing dict objects, where the first byte of the structure equals zero. Exploiting this vulnerability can allow an attacker to cause service...
The vulnerability of the miniz data compression library, related to integer overflow, allows attackers to cause service failures.
The vulnerability of the miniz data compression library is related to integer overflows during the processing of file headers. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
The vulnerability of the Windows Secure Channel component of the Windows operating system, which allows a hacker to trigger a service failure
The vulnerability of the Windows Secure Channel component of the Windows operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The platform’s vulnerability related to ensuring security standards for XML Apache Santuario XML Security for Java allows attackers to trigger a service failure.
The vulnerability of the jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java component of the Apache Santuario XML Security for Java platform is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of Siemens’ microprogrammed software for routers, access points, and routers arises from insufficient validation of input data. This allows attackers to trigger service failures.
The vulnerability of Siemens’ microprogrammed routing devices, access points, and routers exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the njs_promise_reaction_job function in the njs interpreter of the nginx server allows a attacker to cause a service failure.
The vulnerability of the njspromisereactionjob function in the njs interpreter of the nginx server is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of Moxa EDR-G903, EDR-G902, and EDR-810 microprogrammed router software lies in the lack of memory release, which allows attackers to trigger a service failure.
The vulnerability of Moxa EDR-G903, EDR-G902, and EDR-810 microprogrammed router software lies in the lack of memory release when processing a large number of packets. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability of the Cisco Discovery Protocol implementation in the microsoftware of Cisco Analog Telephone Adapter (ATA) series 190 devices allows a perpetrator to cause a service failure.
The vulnerability of the Cisco Discovery Protocol implementation in microprogrammable devices of the Cisco Analog Telephone Adapter ATA series 190 exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...