The vulnerability of the POST request processing mechanism on Siemens SCALANCE industrial switches allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the POST request processing mechanism on Siemens SCALANCE industrial switches lies in the overflow of the stack-based buffer. Exploiting this vulnerability allows an attacker to cause service failures or execute arbitrary code...

CVE-2022-48479

The facial recognition TA of some products has the out-of-bounds memory read vulnerability. Successful exploitation of this vulnerability may cause exceptions of the facial recognition service...

PT-2023-15812 · Unknown · Facial Recognition Ta

Name of the Vulnerable Software and Affected Versions: Facial recognition TA affected versions not specified Description: The issue is related to an out-of-bounds memory read. Successful exploitation may cause exceptions in the facial recognition service. Recommendations: At the moment, there is ...

The vulnerability of the authfile.c file in the memcached data caching software allows a hacker to induce a service failure.

The vulnerability of the authfile.c file in the memcached data caching software is related to buffer overflows in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure by using a specially created authentication file...

The vulnerability of the ReadSVGImage() function in the ImageMagick component coders/svg.c, which allows a hacker to cause a service failure.

The vulnerability of the ReadSVGImage function in the ImageMagick console graphics editor’s coders/svg.c component is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause a service failure...

kernel: NFSD: Protect against send buffer overflow in NFSv3 READDIR

A buffer management flaw was found in the Linux kernel's NFS server implementation in the NFSv3 READDIR operation handling. A remote client can trigger this issue by crafting an RPC call with an oversized RPC record header, which forces the server to shrink its response buffer allocation. This...

Exploit for Uncontrolled Resource Consumption in Cbm Control_De_Ciber

CVE-2022-48474 & CVE-2022-48475 PoC & exploits for CVE-2022-48...

The vulnerability of the Redis database management system, related to a full overflow of the memory buffer, allows an attacker to cause a service failure.

The vulnerability of the Redis database management system is related to a full overflow of the memory buffer. Exploiting this vulnerability can allow an attacker to cause a service failure using commands such as SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD...

The vulnerability of the jpgimage.cpp component in the Exiv2 media metadata management library allows a attacker to cause a service failure.

The vulnerability of the jpgimage.cpp component in the Exiv2 media metadata management library is related to reading data beyond the permissible buffer size. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a specially created JPEG image...

CVE-2023-0056

CVE-2023-0056 affects HAProxy and is described in connected advisories as an uncontrolled resource consumption DoS that can crash the service, including a scenario where an authenticated remote attacker could trigger a crafted server in an OpenShift cluster. The issue is associated with HAProxy’s...

CVE-2023-0056

An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability...

CVE-2023-0056

An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability...

CVE-2022-38734

StorageGRID formerly StorageGRID Webscale versions prior to 11.6.0.8 are susceptible to a Denial of Service DoS vulnerability. A successful exploit could lead to to a crash of the Local Distribution Router LDR service...

SUSE CVE-2006-4095

BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service crash via certain SIG queries, which cause an assertion failure when multiple RRsets are returned...

SUSE CVE-2009-0582

The ntlmchallenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server aka evolution-data-server 2.24.5 and earlier, and 2.25.92 and earlier 2.25.x versions, does not validate whether a certain length value is consistent with the amount o...

SUSE CVE-2013-2168

The dbusprintfstringupperbound function in dbus/dbus-sysdeps-unix.c in D-Bus aka DBus 1.4.x before 1.4.26, 1.6.x before 1.6.12, and 1.7.x before 1.7.4 allows local users to cause a denial of service service crash via a crafted message...

SUSE CVE-2014-3580

The moddavsvn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service NULL pointer dereference and server crash via a REPORT request for a resource that does not exist...

SUSE CVE-2014-3673

The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service system crash via a malformed ASCONF chunk, related to net/sctp/smmakechunk.c and net/sctp/smstatefuns.c...

SUSE CVE-2017-3456

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple...

SUSE CVE-2017-5924

libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted rule that is mishandled in the yrcompilerdestroy function...