Lucene search
+L

6492 matches found

BDU FSTEC
BDU FSTEC
added 2023/10/06 12:00 a.m.18 views

The vulnerability of the networking component of Microprogramming Software for Cisco Access Points models 9124, 9130, 9136, 9164, and 9166 allows a hacker to cause service interruptions.

The vulnerability of the networking component of Microprogramming Software for Cisco Access Points models 9124, 9130, 9136, 9164, and 9166 is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS7.5AI score0.00653EPSS
SaveExploits0References3Affected Software5
Amazon
Amazon
added 2023/10/05 12:00 a.m.20 views

Medium: mdadm

Issue Overview: Buffer overflow in some IntelR SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2023-28736 Uncontrolled resource consumption in some IntelR SSD Tools software before version mdadm-4.2-rc...

6.7CVSS5.4AI score0.00221EPSS
SaveExploits0
OSV
OSV
added 2023/10/03 6:08 p.m.5 views

SUSE-SU-2023:3953-1 Security update for mdadm

This update for mdadm fixes the following issues: - CVE-2023-28736: Fixed a buffer overflow bsc1214244. - CVE-2023-28938: Fixed uncontrolled resource consumption bsc1214245...

6.7CVSS5.8AI score0.00221EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/10/03 12:00 a.m.12 views

The vulnerability of the Go programming language’s crypto/TLS package, which allows a hacker to trigger a service failure

The vulnerability of the Go programming language’s crypto/TLS package is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using a specially created RSA key certificate...

5.3CVSS6.6AI score0.01588EPSS
SaveExploits0References9Affected Software17
Veracode
Veracode
added 2023/10/02 8:08 p.m.41 views

Denial Of Service (DoS)

libcurl is vulnerable to Denial Of Service DoS. The vulnerability exists due to missing rate-limits which allows an attacker to consume resources via mismatched type of a headers API which results in an application crash...

7.5CVSS7.3AI score0.62246EPSS
SaveExploits1References20Affected Software2
OSV
OSV
added 2023/09/29 12:30 p.m.68 views

GHSA-33R7-WJFC-7W98 Mattermost Uncontrolled Resource Consumption vulnerability

Mattermost fails to enforce character limits in all possible notification props allowing an attacker to send a really long value for a notificationprop resulting in the server consuming an abnormal quantity of computing resources and possibly becoming temporarily unavailable for its users...

6.5CVSS6.4AI score0.00562EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2023/09/29 12:30 p.m.28 views

Mattermost Uncontrolled Resource Consumption vulnerability

Mattermost fails to enforce character limits in all possible notification props allowing an attacker to send a really long value for a notificationprop resulting in the server consuming an abnormal quantity of computing resources and possibly becoming temporarily unavailable for its users...

6.5CVSS6.8AI score0.00562EPSS
SaveExploits0References3Affected Software2
OpenVAS
OpenVAS
added 2023/09/29 12:00 a.m.41 views

SUSE: Security Advisory (SUSE-SU-2023:3867-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.2AI score0.04561EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2023/09/29 12:00 a.m.8 views

Mattermost Resource Management Error Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a resource management error vulnerability. An attacker could exploit this vulnerability to cause the server to consume an abnormal amount of computing resources...

6.5CVSS6.7AI score0.00562EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/09/29 12:00 a.m.25 views

Cisco Access Point Software Uncontrolled Resource Consumption (cisco-sa-ap-dos-capwap-DDMCZS4m)

According to its self-reported version, Cisco Access Point Software Uncontrolled Resource Consumption is affected by a vulnerability. - A vulnerability in the packet processing functionality of Cisco access point AP software could allow an unauthenticated, adjacent attacker to exhaust resources o...

4.7CVSS5.3AI score0.00236EPSS
SaveExploits0References3
OSV
OSV
added 2023/09/28 11:45 a.m.9 views

SUSE-SU-2023:3875-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-lusitaniae-apacheexporter: - Security issues fixed: CVE-2022-32149: Fix denial of service vulnerability bsc1204501 CVE-2022-41723: Fix uncontrolled resource consumption bsc1208270 CVE-2022-46146: Fix authentication bypass vulnarability...

8.8CVSS7.1AI score0.04561EPSS
SaveExploits1References10
OSV
OSV
added 2023/09/28 11:43 a.m.9 views

SUSE-SU-2023:3868-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-lusitaniae-apacheexporter: - Security issues fixed: CVE-2022-32149: Fix denial of service vulnerability bsc1204501 CVE-2022-41723: Fix uncontrolled resource consumption bsc1208270 CVE-2022-46146: Fix authentication bypass vulnarability...

8.8CVSS7.5AI score0.04561EPSS
SaveExploits1References12
OSV
OSV
added 2023/09/28 11:42 a.m.8 views

SUSE-SU-2023:3867-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-lusitaniae-apacheexporter: - Security issues fixed: CVE-2022-32149: Fix denial of service vulnerability bsc1204501 CVE-2022-41723: Fix uncontrolled resource consumption bsc1208270 CVE-2022-46146: Fix authentication bypass vulnarability...

8.8CVSS7.5AI score0.04561EPSS
SaveExploits1References12
Cisco
Cisco
added 2023/09/27 4:00 p.m.78 views

Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability

A vulnerability in the packet processing functionality of Cisco access point AP software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device. This vulnerability is due to insufficient management of resources when handling certain types of traffic. An...

4.7CVSS4.8AI score0.00236EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/09/27 12:00 a.m.31 views

Amazon Linux 2 : haproxy2 (ALASHAPROXY2-2023-004)

The version of haproxy2 installed on the remote host is prior to 2.2.17-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2HAPROXY2-2023-004 advisory. The HAProxy Github issue describes this vulnerability as follows: Crash SEGV in httpwaitforresponse in 2.2.19, 2.2.24, and...

6.5CVSS6.1AI score0.01834EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:00 a.m.18 views

The vulnerability of the Microsoft Visual Studio software, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Microsoft Visual Studio software development tool is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

7.8CVSS6.7AI score0.04868EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/09/22 12:00 a.m.11 views

The vulnerability of the Adobe XMP-Toolkit-SDK software, related to uncontrolled resource consumption, allows a perpetrator to cause service interruptions.

The vulnerability of the Adobe XMP-Toolkit-SDK lies in its uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause a service failure using a specially created file...

5.5CVSS5.9AI score0.00328EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/09/21 12:00 a.m.14 views

SUSE SLES12 Security Update : mdadm (SUSE-SU-2023:3691-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3691-1 advisory. - CVE-2023-28736: Fixed a buffer overflow bsc1214244. - CVE-2023-28938: Fixed uncontrolled resource consumption bsc1214245. Tenable...

6.7CVSS6.4AI score0.00221EPSS
SaveExploits0References8
OpenVAS
OpenVAS
added 2023/09/21 12:00 a.m.11 views

SUSE: Security Advisory (SUSE-SU-2023:3691-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.7CVSS4.7AI score0.00221EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2023/09/21 12:00 a.m.35 views

SUSE SLES15: ruby2.5-rubygem-rails-html-sanitizer / etc (SUSE-SU-2023:3714-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3714-1 advisory. - CVE-2022-23517: Fixed inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize...

7.5CVSS6.7AI score0.01454EPSS
SaveExploits3References13
Rows per page
Query Builder