MariaDB InnoDB Data Compromise

The vulnerability of the InnoDB component in the MariaDB database relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

vmwgfx Driver Privilege Escalation

The vulnerability of the vmwgfx driver drivers/gpu/vmxgfx/vmxgfxexecbuf.c in the Linux operating system is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service failures...

Kubernetes Cluster Synchronization Resource Cleanup DoS

The vulnerability of the Kubernetes cluster synchronization software, which relies on configuration sources like Flux and the Kubernetes package manager Helm, is related to improper resource cleanup or release. Exploiting this vulnerability allows a malicious actor to cause service failures...

Azure Site Recovery DoS

The vulnerability of the disaster recovery tool for Azure virtual machines exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Prosody WebSocket DoS

The vulnerability of the WebSocket server implementation for Jabber/XMPP Prosody is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Microsoft Visual Studio .NET Framework Resource Leak DoS

The vulnerability of the Microsoft Visual Studio software development tool and the Microsoft.NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Eclipse Jetty Uncontrolled Resource Consumption DoS

The vulnerability of Eclipse Jetty servlet containers is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Go compress/gzip DoS

The vulnerability of the Go programming language’s compress/gzip package is related to unmanaged recursion. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

Core Component Oracle Coherence DoS

The vulnerability of the Core component of the Oracle Coherence data processing software exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using the specially crafted T3 network protocol...

Microsoft Visual Studio .NET Framework Resource Leak DoS

The vulnerability of the Microsoft Visual Studio software development tool and the Microsoft.NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Microsoft Visual Studio .NET Framework Resource Leak DoS

The vulnerability of the Microsoft Visual Studio software development tool and the Microsoft.NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

client_golang DoS

The vulnerability of the clientgolang library in the monitoring and event-notification application for Prometheus is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

GitLab DoS

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

ASUS RT-AC86U Command Injection

The vulnerability of the microprogrammed Wi-Fi router software from ASUS, the RT-AC86U, exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands or cause...

Extensions API Disclosure DoS

The vulnerability of the Extensions API for Google Chrome and Microsoft Edge lies in the improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures through a specially created...

CRI environment DoS

The vulnerability of the CRI environment for Containerd implementations is related to uncontrolled resource consumption. Exploiting this vulnerability can allow attackers to cause service failures...

mlx5 driver DPDK DoS

The vulnerability of the mlx5 driver for libraries and drivers used in fast packet processing in DPDK is related to unlimited resource allocation. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

blkfront driver Xen DoS

The vulnerability of the blkfront driver in the PV command of the Xen hypervisor is caused by synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux eBPF DoS

The vulnerability of the eBPF subsystem in the Linux operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures, unexpected termination of applications, or execute arbitrary code...

SBIOS Component Code Execution

The vulnerability of the SBIOS component in the NVIDIA DGX A100 IpSecDxe server is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to execute arbitrary code, cause service failures, or compromise the integrity of the protected information...