Mixed Reality Developer Tools DoS

The vulnerability of Mixed Reality Developer Tools for Windows operating systems is related to improper resource cleanup. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Windows Deployment Services DoS

The vulnerability of Windows operating system deployment services is related to improper resource cleaning. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Windows Message Queue DoS

The vulnerability of Windows operating systems’ message queues is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

SAP PowerDesigner Import DoS

The vulnerability of the BPMN-file import function in the Business Process Modeling module of the SAP PowerDesigner software relates to the lack of authenticity verification for XML documents. Exploiting this vulnerability could allow an attacker to cause service failures...

Qualcomm Embedded Software Use-After-Free

The vulnerability of embedded software developed for Qualcomm chips lies in the lack of utilization of the assert function. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Microsoft .NET DoS

The vulnerability of the Microsoft .NET software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

HTTP/2 Request Stream DoS

The vulnerability of the HTTP/2 protocol lies in the ability to create request streams within an already established network connection, without the need to establish new network connections or confirm the receipt of packets. Exploiting this vulnerability allows a malicious actor to cause service...

Cisco Unified Communications Manager DoS

The vulnerabilities of the Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P are related to insufficient checking of incoming requests duri...

Weincloud Industrial Device Management Cloud Platform DoS

The vulnerability of the Weincloud industrial device management cloud platform is related to incorrect handling of its components. Exploiting this vulnerability could allow a malicious actor to cause service failures...

libvpx Heap Buffer Overflow DoS

The vulnerability of the multimedia library libvpx is related to incorrect processing of exception states during the processing of certain special format video data. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially created HTML page...

Spring Framework DoS

The vulnerability of the Spring Framework software platform is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Go crypto/TLS DoS

The vulnerability of the Go programming language’s crypto/TLS package is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using a specially created RSA key certificate...

Johnson Controls VideoEdge Insufficient Verification

The vulnerability of the Johnson Controls VideoEdge network video recorder software is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an intruder to modify configuration files and cause service failures...

PHOENIX CONTACT TC ROUTER XML External Object DoS

The vulnerability of the microprogramming software for routers PHOENIX CONTACT TC ROUTER, TC CLOUD CLIENT, and CLOUD CLIENT is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failur...

PDF Viewer Input Validation DoS

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to trigge...

TP-Link Archer C50/C20/C2 Buffer Overflow

The vulnerability of the microprogrammed software of TP-Link Archer C50, Archer C20, and Archer C2 Wi-Fi routers lies in the fact that the operation data is written outside the buffer in memory when processing request parameters. Exploiting this vulnerability can allow a remote attacker to cause...

Zoom Desktop software DoS

The vulnerability of the Zoom Desktop video conferencing software for Linux users stems from insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Rockwell Automation Pavilion8 JMX Console Unauthorized Access

The vulnerability of the JMX console on the Rockwell Automation Pavilion8 simulation, control, and optimization platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information or cause...

QMS.Mobile Module Disclosure Arbitrary Functions Service Failures

The vulnerability of the QMS.Mobile module of the quality management software for automobile manufacturers, QMS Automotive, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information, perform arbitrary functions, or...

GNU Binutils compare_symbols() Buffer Overflow DoS

The vulnerability of the comparesymbols function in the GNU Binutils development toolset is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures or other adverse effects...