D-Link DI-8400 tgfile_htm Buffer Overflow Vulnerability

The D-Link DI-8400 is a wireless router from China-based AUO D-Link. The D-Link DI-8400 tgfilehtm suffers from a buffer overflow vulnerability that can be exploited by a remote attacker to submit a special request that can crash the service program or execute arbitrary code in the application...

The vulnerability of the ufshcd_mcq_abort() function in the ufs component of Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the ufshcdmcqabort function in the ufs component of Linux operating systems is related to a pointer dereferencing error due to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of components of Linux operating system’s kernel/mlx5, allowing a hacker to cause a service failure

The vulnerability of the net/mlx5 components of the Linux operating system’s kernel is related to incorrect initialization of a resource in the addrulefg function. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability in the wireless.cgi script of Netgear XR300 router software allows a hacker to induce a service failure.

The vulnerability in the wireless.cgi script of Netgear XR300 router software lies in the copying of buffers without checking the size of the input data during the processing of the passphrase parameter. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a...

The vulnerability in the bsw_pppoe.cgi script of Netgear’s router software models XR300, R7000P, and R6400 v2 allows a hacker to cause a service failure.

The vulnerability in the bswpppoe.cgi script of Netgear XR300, R7000P, and R6400 v2 routers stems from the copying of buffer data without checking the size of the input data during the processing of the pppoelocalip parameter. Exploiting this vulnerability allows a malicious actor to cause servic...

The vulnerability of the final point of the Splunk Enterprise data model/web REST platform for operational analysis allows a malicious actor to trigger a service failure.

The vulnerability of the final point of the Splunk Enterprise data model/web REST platform for operational analysis is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially creat...

CVE-2024-2551

A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop a core system service on the firewall by sending a crafted packet through the data plane that causes a denial of service DoS condition. Repeated attempts to trigger this...

The vulnerability of the Cisco Unified Threat Defense Snort Intrusion Prevention System Engine’s operating system, Cisco IOS XE, related to the operation of data out of the buffer in memory. This allows attackers to bypass existing security restrictions and trigger a service failure.

The vulnerability of the Cisco Unified Threat Defense Snort Intrusion Prevention System Engine’s operating system, Cisco IOS XE, lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and...

CVE-2024-21994

StorageGRID formerly StorageGRID Webscale versions prior to 11.9 are susceptible to a Denial of Service DoS vulnerability. Successful exploit by an authenticated attacker could lead to a service crash...

CVE-2024-21994 CVE-2024-21994 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)

StorageGRID formerly StorageGRID Webscale versions prior to 11.9 are susceptible to a Denial of Service DoS vulnerability. Successful exploit by an authenticated attacker could lead to a service crash...

The vulnerability of the ocfs2_xattr_find_entry() function in the ocfs2 file system of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ocfs2xattrfindentry function in the fs/ocfs2/xattr.c file of the Linux operating system’s file system ocfs2 involves reading memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Windows Standards-Based Storage Management service in Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the Windows Standards-Based Storage Management service in Windows operating systems is related to insufficient memory allocation for operations. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the VLC Media Player, related to buffer overflow in the heap, allows a attacker to cause a service failure or execute arbitrary code in the context of the root.

The vulnerability of VLC Media Player is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code with root privileges...

CVE-2024-7824 Type-confusion vulnerability that can cause the WRSA.exe service to crash and generate a crash dump

Access of Resource Using Incompatible Type 'Type Confusion' vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit wrUrl.Dll modules allows Functionality Misuse.This issue affects SecureAnywhere - Web Shield: before 2.1.2.3...

The vulnerability of the /runtime/vararg_functions.cpp component of the PyTorch machine learning framework, which allows a hacker to cause a service failure.

The vulnerability of the /runtime/varargfunctions.cpp component of the PyTorch machine learning framework is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the get_huffman_diff() function in the src\x3f\x3futils_patched.cpp component of the LibRaw image processing library allows a attacker to cause a service failure.

The vulnerability of the gethuffmandiff function in the src\x3f\x3futilspatched.cpp component of the LibRaw image processing library is related to reading data beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the lib/xarray.c library in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the lib/xarray.c library in the Linux operating system’s kernel is related to a memory leak caused by the incorrect use of a function for releasing resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of the H5O__layout_decode() function in the H5Olayout.c file of the HDF5 library, which allows a hacker to cause a service failure.

The vulnerability of the H5Olayoutdecode function in the H5Olayout.c file, belonging to the HDF5 library, involves reading data beyond the memory bounds. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the “drivers/media/test-drivers/vidtv/vidtv_psi.c” component of the Linux operating system, related to pointer assignment errors, allows an attacker to cause a service failure.

The vulnerability of the “drivers/media/test-drivers/vidtv/vidtvpsi.c” component in the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the Decoder.Decode function in the Go programming language allows a hacker to trigger a service failure.

The vulnerability of the Decoder.Decode function in the Go programming language is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...