The vulnerability of the QuickSec IPSec microprogramming software for network devices from Zyxel, including models such as ATP, USG FLEX, USG FLEX50(W), and USG20(W)-VPN, as well as VPN, allows a hacker to cause service interruptions.

The vulnerability of the QuickSec IPSec microprogramming software for network devices from Zyxel, such as ATP, USG FLEX, USG FLEX50W, and USG20W-VPN, related to the possibility of integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sendi...

Denial Of Service (DoS)

rabbitmq-server is vulnerable to Denial of Service DoS. The vulnerability occurs due to a lack of HTTP request body size limit in its API allowing a malicious attacker to exploit it by sending large messages, causing the target node to exhaust its memory and be terminated resulting in service...

The vulnerability of the TLS implementation in Cisco Firepower Threat Defense’s micro-programming network interface devices allows attackers to induce a service failure.

The vulnerability of the TLS protocol implementation in Cisco Firepower Threat Defense’s microprogramming network interfaces is related to improper memory allocation. Exploiting this vulnerability could allow a malicious actor to cause a service failure by triggering a reboot of the Snort intrusi...

The vulnerability of Wheel Python Packaging Authority’s installation tools, related to uncontrolled resource consumption, allows a perpetrator to cause service failures.

The vulnerability of the Wheel Python Packaging Authority installation tools is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Java library for converting objects from XML to JSON format, Jettison, is related to an uncontrolled recursion. This allows a hacker to trigger a service failure.

The vulnerability of the Java library for converting objects from XML to JSON format by Jettison is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Squid proxy server is related to improper conversion between numerical types and uncontrolled resource consumption, allowing attackers to cause service failures.

The vulnerability of the Squid proxy server is related to the issue of sending FTP URL addresses in HTTP requests, or creating FTP URL addresses from input data of the FTP Native. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Cisco Anyconnect Secure Mobility Client Security Vulnerability

Cisco Anyconnect Secure Mobility Client is a VPN client software for secure connections from Cisco. A security vulnerability exists in the Cisco Anyconnect Secure Mobility Client, which can be exploited by an attacker by logging on to an affected device at the same time that another user is...

The vulnerability in the drm_mode_setcrtc() function of the drivers/gpu/drm/drm_crtc.c driver module of the Linux operating system’s DRM kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the drmmodesetcrtc function in the drivers/gpu/drm/drmcrtc.c file of the Linux operating system’s DRM driver module is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data, compromise i...

The vulnerability lies in the set of additional tools and libraries for the Go language, designed for integration with OpenTelemetry-Go Contrib. This vulnerability is related to the unlimited distribution of resources, allowing attackers to cause service failures.

The vulnerability of the set of additional tools and libraries for the Go language, designed for integration with OpenTelemetry, relates to the unlimited distribution of resources. Exploiting this vulnerability allows a remote attacker to cause service failures...

CVE-2022-48560

A use-after-free vulnerability was found in Python via the heappushpop function in the heapq module. This flaw allows an attacker to submit a specially crafted request, causing a service disruption that leads to a denial of service attack. Mitigation Mitigation for this issue is either not...

The vulnerability of the `dump_relocs_in_section` function in the `objdump.c` component of the GNU Binutils development environment allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the dumprelocsinsection function in the objdump.c component of the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the _bfd_dwarf2_slurpdebug_info function in the bfd/dwarf2.c component of the GNU Binutils development environment allows a hacker to cause a service failure.

The vulnerability of the bfddwarf2slurpdebuginfo function in the bfd/dwarf2.c component of the GNU Binutils development environment is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause service interruptions...

The vulnerability in the `extensions/libxt_tcp.c` component of the Iptables network interface control system allows a attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the extensions/libxttcp.c component of the Iptables network interface control system is related to insufficient input data validation. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the elf32-i386.c and elf64-x86-64.c components of the GNU Binutils development environment allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the elf32-i386.c and elf64-x86-64.c components of the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a...

The vulnerability of the internal/dcraw_common.cpp component in the LibRaw image processing library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the internal/dcrawcommon.cpp component in the LibRaw image processing library is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability in the str2host.c component of the DNS library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the str2host.c component in the DNS library involves a repeated memory release mechanism. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the `bfd_make_section_with_flags` function in the `section.c` component of the GNU Binutils development environment allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the bfdmakesectionwithflags function in the section.c component of the GNU Binutils development environment is related to pointer manipulation errors. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability in web browsers Firefox and Firefox ESR, related to writing beyond the buffer limit, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in Firefox and Firefox ESR web browsers is related to writing beyond the buffer limit. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability in the `print_gnu_property_note` function of the `readelf.c` component of the GNU Binutils development environment allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the printgnupropertynote function in the readelf.c component of the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Intel Unison Security Vulnerability

Intel Unison is an application from Intel Corporation USA used to synchronize various data before PCs and smartphones. A security vulnerability exists in Intel Unison software. An attacker exploiting this vulnerability could cause elevation of privilege, information disclosure, or denial of servi...