UEFI EDK2 Buffer Overflow DoS

The vulnerability in the open-source development environment for UEFI EDK2 relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

MariaDB sql/item_cmpfunc.cc DoS

The vulnerability in the sql/itemcmpfunc.cc component of the MariaDB database is related to the insufficient use of the assert function. Exploiting this vulnerability allows an attacker to cause service failures...

MariaDB DoS

The vulnerability in the /row/row0mysql.cc component of the MariaDB database is related to the insufficient use of the assert function. Exploiting this vulnerability allows an attacker to cause service failures...

MariaDB sql/item_func.cc DoS

The vulnerability of the sql/itemfunc.cc component of the MariaDB database is related to the insufficient use of the assert function. Exploiting this vulnerability allows an attacker to cause service failures...

NSD Unbound DNS Symbolic Link DoS

The vulnerability of NSD and Unbound DNS servers is related to the incorrect handling of symbolic links before accessing a file. Exploiting this vulnerability allows an attacker to cause service failures...

Qt Resource Management Confidential Data Compromise

The vulnerability of the cross-platform software development framework Qt is related to resource management errors. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created web page...

Unbound regionalloc Buffer Overflow DoS

The vulnerability of the regionalloc function in the util/regional.c component of the DNS server Unbound is related to integer overflow. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

my_decimal::operator DoS

The vulnerability of the mydecimal::operator component of the MariaDB database lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to trigger service failures through a specially crafted SQL query...

Linux flush_to_ldisc Buffer Overflow DoS

The vulnerability of the flushtoldisc function in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service failure...

Cisco Meeting Server DoS

The vulnerability of the Cisco Meeting Server’s API interface relates to insufficient validation of input data during request processing. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted requests...

Siemens Input Validation DoS

The vulnerability of Siemens’ microprogrammed routing devices, access points, and routers exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Moxa EDR-G903 EDR-G902 EDR-810 Memory Leak DoS

The vulnerability of Moxa EDR-G903, EDR-G902, and EDR-810 microprogrammed router software lies in the lack of memory release when processing a large number of packets. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Windows Event Logging DoS

The vulnerability of Windows Event Logging service is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Decoder.Skip Component Uncontrolled Recursion DoS

The vulnerability of the Decoder.Skip component in the Go programming language is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

JavaScript template function XSS

The vulnerability of the JavaScript library’s template function for working with arrays like Underscore is related to incorrect code generation practices. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

MySQL Server InnoDB DoS

The vulnerability of the InnoDB component in the MySQL Database Management System exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

Java Protocol Buffers protobuf-java DoS

The vulnerability of the Java Protocol Buffers protobuf-java environment library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

VMware Cloud Foundation Resource Leak DoS

The vulnerability of the VMware Cloud Foundation virtualization platform and the VMware ESXi hypervisor is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Unbound DNS DoS

The vulnerability of the Unbound DNS server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Huawei CV81-WDM FW DoS

The vulnerability of the microprogramming software in Huawei CV81-WDM FW multifunctional devices is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially created malware package...