Denial of Service (DoS) in Nokogiri on JRuby

Summary Nokogiri v1.13.4 updates the vendored org.cyberneko.html library to 1.9.22.noko2 which addresses CVE-2022-24839. That CVE is rated 7.5 High Severity. See GHSA-9849-p7jc-9rmv for more information. Please note that this advisory only applies to the JRuby implementation of Nokogiri = 1.13.4...

The vulnerability of Xen hypervisors, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of Xen hypervisors is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a attacker to cause service failures...

Pepperl+Fuchs WirelessHART-Gateway

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Pepperl+Fuchs Equipment: WirelessHART-Gateway Vulnerabilities: Use of Hard-coded Credentials, Uncontrolled Resource Consumption, Reliance on Reverse DNS Resolution for a Security-critical Action, Path...

CVE-2022-1121

A lack of appropriate timeouts in GitLab Pages included in GitLab CE/EE all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows an attacker to cause unlimited resource consumption...

CVE-2022-1121

A lack of appropriate timeouts in GitLab Pages included in GitLab CE/EE all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows an attacker to cause unlimited resource consumption...

Code injection

A lack of appropriate timeouts in GitLab Pages included in GitLab CE/EE all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows an attacker to cause unlimited resource consumption...

CVE-2022-1121

A lack of appropriate timeouts in GitLab Pages included in GitLab CE/EE all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows an attacker to cause unlimited resource consumption...

CVE-2022-1121

A lack of appropriate timeouts in GitLab Pages included in GitLab CE/EE all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows an attacker to cause unlimited resource consumption...

CVE-2022-1121

CVE-2022-1121 concerns GitLab Pages within GitLab CE/EE. The issue is a missing/insufficient timeout mechanism that can allow an attacker to trigger unlimited resource consumption, effectively a Denial of Service. Affected versions are GitLab Pages-enabled deployments of GitLab CE/EE: all version...

CVE-2022-1121

Removed by vendor...

Uncontrolled Resource Consumption in Matrix Synapse

Impact Synapse before 1.52.0 with URL preview functionality enabled will attempt to generate URL previews for media stream URLs without properly limiting connection time. Connections will only be terminated after maxspidersize default: 10M bytes have been downloaded, which can in some cases lead ...

CVE-2021-43662

totolink EX300v2, ver V4.0.3c.140B20210429 and A720R ,ver V4.1.5cu.470B20200911 have an issue which causes uncontrolled resource consumption...

CVE-2021-43662

totolink EX300v2, ver V4.0.3c.140B20210429 and A720R ,ver V4.1.5cu.470B20200911 have an issue which causes uncontrolled resource consumption...

CVE-2021-43662

totolink EX300v2, ver V4.0.3c.140B20210429 and A720R ,ver V4.1.5cu.470B20200911 have an issue which causes uncontrolled resource consumption...

Input validation

totolink EX300v2, ver V4.0.3c.140B20210429 and A720R ,ver V4.1.5cu.470B20200911 have an issue which causes uncontrolled resource consumption...

Uncontrolled Resource Consumption in Apache DolphinScheduler

Apache DolphinScheduler user registration is vulnerable to Regular express Denial of Service ReDoS attacks. Apache DolphinScheduler users should upgrade to version 2.0.5 or higher...

GHSA-QG5X-66HP-CW5P Uncontrolled Resource Consumption in Apache DolphinScheduler

Apache DolphinScheduler user registration is vulnerable to Regular express Denial of Service ReDoS attacks. Apache DolphinScheduler users should upgrade to version 2.0.5 or higher...

Hitachi Energy e-mesh EMS

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: e-mesh EMS Vulnerabilities: Improper Restriction of Operations Within the Bounds of a Memory Buffer, Use After Free, Uncontrolled Resource Consumption 2. RISK EVALUATION...

CVE-2021-43662

totolink EX300v2, ver V4.0.3c.140B20210429 and A720R ,ver V4.1.5cu.470B20200911 have an issue which causes uncontrolled resource consumption...

CVE-2021-43662

CVE-2021-43662 affects TotoLink EX300_v2 (V4.0.3c.140_B20210429) and A720R (V4.1.5cu.470_B20200911). Documents describe a resource management error that could be exploited to deplete storage space, causing a DoS condition. No explicit root cause details or remediation are provided in the connecte...