AZL-53405 CVE-2023-6476 affecting package cri-o for versions less than 1.22.3-10

A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined. This may allow a pod to specify and get any amount of memory/cpu, circumventing the kubernetes scheduler and potentially resulting in a denial of service in the node...

The vulnerability of the microprogrammed protection system for the SEL-451 phase switching relay, related to unlimited resource distribution or throttling, allows a intruder to cause a service failure.

The vulnerability of the microprogrammed protection system of the SEL-451 phase-switching relay exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor, operating remotely, to create attacks based on cross-site scenarios...

go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents

A flaw was found in go-yaml. This issue causes the consumption of excessive amounts of CPU or memory when attempting to parse a large or maliciously crafted YAML document...

go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents

A flaw was found in go-yaml. This issue causes the consumption of excessive amounts of CPU or memory when attempting to parse a large or maliciously crafted YAML document...

CVE-2023-42031

IBM TXSeries for Multiplatforms, 8.1, 8.2, and 9.1, CICS TX Standard CICS TX Advanced 10.1 and 11.1 could allow a privileged user to cause a denial of service due to uncontrolled resource consumption. IBM X-Force ID: 266016...

PT-2023-4011 · Unisoc · Unisoc Bluetooth Service

Name of the Vulnerable Software and Affected Versions: Unisoc bluetooth service affected versions not specified Description: The issue is related to a possible missing parameters check in the bluetooth service, which could lead to a local denial of service. System execution privileges are needed ...

CVE-2023-23689

Dell PowerScale nodes A200, A2000, H400, H500, H600, H5600, F800, F810 integrated hardware management software contains an uncontrolled resource consumption vulnerability. This may allow an unauthenticated network host to impair built-in hardware management functionality and trigger OneFS data...

Gitlab -- Multiple Vulnerabilities

Gitlab reports: Race condition on gitlab.com enables verified email forgery and third-party account hijacking DOS and high resource consumption of Prometheus server through abuse of Grafana integration proxy endpoint Maintainer can leak sentry token by changing the configured URL Maintainer can...

The vulnerability of the software development environment of TIA Portal, the system for automating technological processes, and SINETPLAN, a system for planning automation processes; as well as the web-based systems for managing technological processes, SIMATIC PCS neo, is related to uncontrolled resource consumption, allowing attackers to trigger service failures.

The vulnerabilities of the TIA Portal, the SINETPLAN system planning tool, and the SIMATIC PCS neo web-based technology process management system are related to uncontrolled resource consumption. Exploiting these vulnerabilities can allow attackers to cause service failures by sending specially...

The vulnerability of the Intel SGX driver for Linux operating system kernels allows unauthorized users to cause service failures due to uncontrolled resource consumption.

The vulnerability of the Intel SGX driver for Linux operating system kernels is related to an uncontrolled consumption of resources when switching from the EPC segment Enclave Page Cache to regular RAM. Exploiting this vulnerability can allow a hacker to cause a service failure...

Vulnerability of the nvidia.ko module of the NVIDIA Virtual GPU Manager driver, which allows a hacker to cause a service failure.

The vulnerability of the nvidia.ko module of the NVIDIA Virtual GPU Manager driver is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a hacker to cause service failures...

CVE-2022-22145

CAMS for HIS Log Server contained in the following Yokogawa Electric products is vulnerable to uncontrolled resource consumption. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, from R6.01.00 to R6.08.00, Exaopc versions...

The vulnerability of the Windows Hyper-V hardware virtualization system allows a attacker to trigger a service failure.

The vulnerability of the Windows Hyper-V hardware virtualization system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a perpetrator to cause service interruptions...

Updated firefox packages fix security vulnerability

If a user installed an extension of a particular type, the extension could have auto-updated itself and while doing so, bypass the prompt which grants the new version the new requested permissions CVE-2022-22754. If a user was convinced to drag and drop an image to their desktop or other folder,...

Jenkins 代码问题漏洞

Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project. A security vulnerability exists in Jenkins 2.333 and earlier versions that stems from LTS 2.319.2 and earlier versions...

The vulnerability of the Pygments syntax highlighting program lies in its uncontrolled resource consumption, which allows a hacker to trigger a service failure.

The vulnerability of the Pygments syntax highlighter program is related to the use of regular expressions. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

AZL-7194 CVE-2020-28200 affecting package dovecot for versions less than 2.3.20-1

The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular expression for the regex extension...

CVE-2020-8299

Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix SD-WAN WANOP Edition before 11.4.0, 11.3.2, 11.3.1a, 11.2.3a, 11.1.2c, 10.2.9a suffers from uncontrolled resource consumption by way of a network-based...

CVE-2020-24504

Uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access...

The vulnerability of the Red Hat Process Automation Manager system, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure in the target system.

The vulnerability of the Red Hat Process Automation Manager system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures in the target system by sending specially crafted HTTP packets remotely...