OpenImageIO Buffer Overflow DoS

The vulnerability of the OpenImageIO image processing library lies in the escape of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures through t...

Firefox Confidential Data Access DoS

The vulnerability in the Firefox web browser is related to insufficient elimination of certain elements in the request. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Gstreamer Integer Overflow DoS

The vulnerability of the Gstreamer multimedia framework is related to a potential overflow condition. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures through a specially created file...

OpenImageIO Output Component Confidential Data Compromise

The vulnerability of the OpenImageIO image processing library’s output component is related to the output data being stored outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service...

Intel oneVPL GPU DoS

The vulnerability of the software for developing and optimizing multimedia applications using Intel oneVPL GPUs is related to improper cleaning or release of resources. Exploiting this vulnerability can allow attackers to cause service failures...

Windows Message Queuing DoS

The vulnerability of Windows’ Message Queuing system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CMPapp Component Codesys DoS Execution Code

The vulnerability of the CMPapp component in the Codesys industrial automation software suite relates to the ability to write data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause system failures or execute arbitrary code...

Microsoft Message Queuing Service DoS

The vulnerability of the Microsoft Message Queuing MSMQ service on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Microsoft Message Queuing Service DoS

The vulnerability of the Microsoft Message Queuing MSMQ service on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

sips DoS

The vulnerability of the sips component in macOS operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause system failures...

Microsoft Visual Studio .NET Framework Uncontrolled Resource Consumption DoS

The vulnerability of Microsoft Visual Studio, a software development tool, and the Microsoft.NET Framework, a software platform, is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the skcipherrecvmsg function in the Linux operating system’s kernel code is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

libxpc DoS

The vulnerability of the libxpc library in iOS, iPadOS, macOS Big Sur, macOS Monterey, watchOS, and macOS Ventura systems is related to errors in processing input data. Exploiting this vulnerability allows an attacker to cause service failures...

ML lifecycle management Platform Command Injection

The vulnerability of the MLflow model lifecycle management platform exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability can allow an attacker to execute arbitrary commands or cause service failures...

Google Chrome Sandbox Unauthorized Access

The vulnerability of Google Chrome’s Sandbox component is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information, compromise its integrity, or cause service failures...

phpMyFAQ Confidential Data Access

The vulnerability of the phpMyFAQ web application is related to the absence of element neutralization mechanisms. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures using a specially crafted CSV file...

Airflow Regular Expression DoS

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service...

SAP SQL Anywhere Permission DoS

The vulnerability of SAP SQL Anywhere relational database management systems is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to cause service failures or other adverse effects...

CODESYS DoS

The vulnerability of CODESYS software products is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

IOT Orchestrator Security E1 DoS

The vulnerability of component E1 in the JD Edwards EnterpriseOne Orchestrator Security application relates to errors in processing input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...