6492 matches found
CVE-2025-8449
CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service when an authenticated user sends a specially crafted request to a specific endpoint from within the BMS network...
CVE-2025-8449
CVE-2025-8449 describes an CWE-400 Uncontrolled Resource Consumption vulnerability affecting Schneider Electric EcoStruxure Building Operation Enterprise Server/Enterprise Central/Workstation (BMS family). An authenticated user can send a specially crafted request to a specific endpoint within th...
CVE-2025-8449
CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service when an authenticated user sends a specially crafted request to a specific endpoint from within the BMS network...
Security Bulletin: IBM Integration Bus for z/OS is vulnerable to multiple vulnerabilities due to Apache Tomcat( CVE-2025-53506, CVE-2025-52434 and CVE-2025-52520 )
Summary IBM Integration Bus for z/OS is vulnerable to multiple vulnerabilities due to Apache Tomcat. Vulnerability Details CVEID:CVE-2025-53506 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in Apache Tomcat if an HTTP/2 client did not acknowledge the initial settings frame that...
Intel 700 Series Ethernet Denial of Service Vulnerability
Intel 700 Series Ethernet is a family of high-performance Ethernet controllers from Intel Corporation. A denial of service vulnerability exists in Intel 700 Series Ethernet, which arises from uncontrolled resource consumption and can be exploited by an attacker to cause a denial of service...
Intel 700 Series Ethernet Denial of Service Vulnerability (CNVD-2025-19268)
Intel 700 Series Ethernet is a family of high-performance Ethernet controllers from Intel Corporation. A denial of service vulnerability exists in Intel 700 Series Ethernet, which arises from uncontrolled resource consumption and can be exploited by an attacker to cause a denial of service...
Schneider Electric多款产品 资源管理错误漏洞
Schneider Electric EcoStruxure Building Operation Enterprise Server and Schneider Electric EcoStruxure Enterprise Server are both products of Schneider Electric, a French company. Schneider Electric EcoStruxure Building Operation Enterprise Server is an enterprise-class building control system. T...
Intel Tiber Edge Platform Edge Orchestrator Denial of Service Vulnerability (CNVD-2025-19837)
Intel Tiber Edge Platform Edge Orchestrator is an edge computing platform from Intel designed to simplify the edge application development and deployment process by supporting modular tools to build and run edge applications. Intel Tiber Edge Platform Edge Orchestrator suffers from a denial of...
Eclipse Jetty 安全漏洞
Eclipse Jetty is an open source, Java-based web server and Java Servlet container from the Eclipse Foundation. A security vulnerability exists in Eclipse Jetty versions 9.4.57 and earlier, 10.0.25 and earlier, 11.0.25 and earlier, 12.0.21 and earlier, and 12.1.0.alpha2 and earlier, which originat...
IBM Concert Software Denial of Service Vulnerability
IBM Concert Software is IBM's generative AI-driven automated application management and monitoring tool based on the WatsonX platform, focused on optimizing the operational efficiency and reliability of applications. A denial of service vulnerability exists in IBM Concert Software, which stems fr...
CVE-2025-33090
IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to cause a denial of service using a specially crafted regular expression that would cause excessive resource consumption...
CVE-2025-9092
Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips API modules allows Excessive Allocation. This vulnerability is associated with program files org.Bouncycastle.Crypto.Fips.NativeLoader. This issue affects Bouncy Castl...
IBM Concert Software 安全漏洞
IBM Concert Software is IBM's generative AI-driven automated application management and monitoring tool based on the WatsonX platform, focused on optimizing the operational efficiency and reliability of applications. A denial of service vulnerability exists in IBM Concert Software, which stems fr...
Bouncy Castle for Java Uncontrolled Resource Consumption Vulnerability
Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips API modules allows Excessive Allocation. This vulnerability is associated with program files org.Bouncycastle.Crypto.Fips.NativeLoader. This issue affects Bouncy Castl...
GHSA-V6CF-MV9H-C8MC Bouncy Castle for Java Uncontrolled Resource Consumption Vulnerability
Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips API modules allows Excessive Allocation. This vulnerability is associated with program files org.Bouncycastle.Crypto.Fips.NativeLoader. This issue affects Bouncy Castl...
CVE-2025-9092
CVE-2025-9092 is an Uncontrolled Resource Consumption issue affecting Bouncy Castle for Java – BC-FJA 2.1.0 bc-fips (API modules), with the vulnerable component identified as org.Bouncycastle.Crypto.Fips.NativeLoader. Public sources (NVD/IBM bulletin) confirm the affected delivery from BC-FJA 2.1...
PT-2025-33545 · Unknown · Bouncy Castle For Java - Bc-Fja
Name of the Vulnerable Software and Affected Versions: Bouncy Castle for Java - BC-FJA versions 2.1.0 through 2.1.0 Description: An uncontrolled resource consumption issue exists in Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips API modules that allows excessive allocation. The issue is associated...
CVE-2025-26472
Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for IntelR TiberTM Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access...
Security Bulletin: Due to use of IBM WebSphere Application Server Liberty, IBM Tivoli Application Dependency Discovery Manager is vulnerable to disclosure of information.
Summary IBM WebSphere Application Server Liberty is vulnerable to a denial of service due to Netty CVE-2024-47535CVE-2025-25193 Vulnerability Details CVEID:CVE-2024-47535 DESCRIPTION: Netty is an asynchronous event-driven network application framework for rapid development of maintainable high...