Siemens PROFINET Devices

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: PROFINET Devices Vulnerability: Allocation of Resources Without Limits or Throttling 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled...

The vulnerability of the ReadTIFFImage function in the coders/tiff.c component of the console image editing tool ImageMagick, related to a lack of resource allocation mechanism, allows attackers to cause service failures.

The vulnerability of the ReadTIFFImage function in the coders/tiff.c component of the console-based image editing tool ImageMagick is related to an improper check of the image data size in the file. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

GHSA-H43V-26R7-7J4C Allocation of Resources Without Limits or Throttling in HashiCorp Nomad

HashiCorp Nomad and Nomad Enterprise before 0.10.3 allow unbounded resource usage. Specific Go Packages Affected github.com/hashicorp/nomad/command/agent...

Allocation of Resources Without Limits or Throttling in HashiCorp Nomad

HashiCorp Nomad and Nomad Enterprise before 0.10.3 allow unbounded resource usage. Specific Go Packages Affected github.com/hashicorp/nomad/command/agent...

JetBrains IntelliJ IDEA Denial of Service Vulnerability

JetBrains IntelliJ IDEA is a Czech company JetBrains set of integrated development environment for the Java language . A denial of service vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2021.1. The vulnerability stems from the program's unrestricted resource allocation and can ...

CVE-2021-30504

In JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation...

CVE-2021-30504

In JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation...

CVE-2021-30504

In JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation...

Design/Logic Flaw

In JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation...

CVE-2021-30504

CVE-2021-30504 affects JetBrains IntelliJ IDEA prior to 2021.1. The issue is a Denial of Service caused by unbounded resource allocation, as described in multiple sources (NVD entry and cnvd/redhat/CVE listings). The Red Hat security entry and the JetBrains Security Bulletin Q1 2021 corroborate t...

CVE-2021-30504

In JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation...

Jetbrains JetBrains IntelliJ IDEA 资源管理错误漏洞

JetBrains IntelliJ IDEA is a Czech company JetBrains set of integrated development environment for the Java language . A denial of service vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2021.1. The vulnerability stems from the program's unrestricted resource allocation and can ...

GHSA-G4CP-H53P-V3V8 Allocation of Resources Without Limits or Throttling in Undertow

A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw may potentially lead to a denial of service...

Cisco IOS XR Denial of Service Vulnerability (CNVD-2021-09296)

Cisco IOS XR software is a modular and fully distributed network operating system for service provider networks. A denial of service vulnerability exists in the ingress packet processing function of Cisco IOS XR. The vulnerability stems from improper resource allocation when an affected device...

Cisco IOS XR 资源管理错误漏洞

Cisco IOS XR software is a modular and fully distributed network operating system for service provider networks. A denial of service vulnerability exists in the ingress packet processing function of Cisco IOS XR. The vulnerability stems from improper resource allocation when an affected device...

CVE-2021-1057

NVIDIA Virtual GPU Manager NVIDIA vGPU manager contains a vulnerability in the vGPU plugin in which it allows guests to allocate some resources for which the guest is not authorized, which may lead to integrity and confidentiality loss, denial of service, or information disclosure. This affects...

CVE-2021-1057

NVIDIA Virtual GPU Manager NVIDIA vGPU manager contains a vulnerability in the vGPU plugin in which it allows guests to allocate some resources for which the guest is not authorized, which may lead to integrity and confidentiality loss, denial of service, or information disclosure. This affects...

Nvidia NVIDIA Virtual GPU Manager Information Disclosure Vulnerability

Nvidia NVIDIA Virtual GPU Manager is an NVIDIA virtual GPU management software from Nvidia. An information disclosure vulnerability exists in NVIDIA vGPU manager that could allow a guest to allocate some unauthorized resources, which could result in a loss of integrity and confidentiality, a deni...

NewStart CGSL CORE 5.05 / MAIN 5.05 : bind Multiple Vulnerabilities (NS-SA-2020-0095)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has bind packages installed that are affected by multiple vulnerabilities: - managed-keys is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in...

Design/Logic Flaw

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an attacker to influence the amount of resources consumed, eventually leading to the exhaustion of available resources...