GHSA-3MWQ-H3G6-FFHM Vapor's incorrect request error handling triggers server crash

Vapor incorrectly handles errors encountered during parsing of HTTP 1.x requests, triggering a precondition failure in swift-nio due to API misuse and causing immediate termination of the server process. Impact This is a denial of service vulnerability, impacting all users of affected versions of...

Design/Logic Flaw

Invalid pointer release vulnerability. Exploitation of this vulnerability could allow an attacker to interrupt the correct operation of the service by sending a specially crafted json string to the VNF Virtual Network Function, and triggering the ogssbimessagefree function, which could cause a...

The vulnerability of the SSH service in the Cisco Catalyst SD-WAN Manager centralized network management system allows a attacker to cause a service failure.

The vulnerability of the SSH service in the Cisco Catalyst SD-WAN Manager centralized network management system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Reports component in the Nozomi Guardian network activity detection and tracking tool, as well as the Nozomi Central Management Console (CMC), allows a malicious actor to trigger a service failure.

The vulnerability of the Reports component of the Nozomi Guardian network activity detection and tracking tool, as well as the Nozomi Central Management Console CMC, relates to the issue of saving reports with a null name due to insufficient validation of input data. Exploiting this vulnerability...

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to insufficient input data validation, allows a perpetrator to cause service failures.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to insufficient input data validation, allows a perpetrator to cause service failures.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to improper cleaning or release of resources, allows a perpetrator to cause service failures.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to insufficient input data validation, allows a perpetrator to cause service failures.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the __ip_set_put_netlink() function in the net/netfilter/ipset/ip_set_core.c module of the netfilter kernel of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the ipsetputnetlink function in the net/netfilter/ipset/ipsetcore.c module of the netfilter component of the Linux operating system is related to concurrent access to resources race condition. Exploiting this vulnerability could allow a attacker to cause service interruptions...

The vulnerability of the `sanitize_html` function in Ruby Redcloth software allows a hacker to cause a service failure.

The vulnerability of the sanitizehtml function in Ruby Redcloth text processing software is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the GetParentControlInfo() function in Tenda AC10 router software allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the GetParentControlInfo function in Tenda AC10 router software lies in the issue of the operation exceeding the buffer in memory when processing the mac parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

The vulnerability of the CMPappBP component in CODESYS software products allows a hacker to trigger a service failure.

The vulnerability of the CMPappBP component in CODESYS software products is related to writing data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Exiv2 metadata management library, related to reading beyond the buffer in memory, allows a attacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the webpimage.cpp component in the Exiv2 metadata management library allows a attacker to cause a service failure.

The vulnerability of the webpimage.cpp component in the Exiv2 media metadata management library is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the Security component of Oracle Java SE software and the Oracle GraalVM Enterprise Edition virtual machine allows a perpetrator to trigger a service failure.

The vulnerability of the Security component of Oracle Java SE and the Oracle GraalVM Enterprise Edition software platform is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the TACACS and RADIUS protocols implemented in Cisco NX-OS operating system routers MDS 9000, Nexus 1000, Nexus 1000V, Nexus 3000, Nexus 5500, Nexus 5600, Nexus 6000, Nexus 7000, Nexus 9000 allows a attacker to cause service interruptions.

The vulnerability of the TACACS and RADIUS protocols for operating systems of Cisco NX-OS routers such as MDS 9000, Nexus 1000, Nexus 1000V, Nexus 3000, Nexus 5500, Nexus 5600, Nexus 6000, Nexus 7000, and Nexus 9000 exists due to insufficient validation of input data. Exploiting this vulnerabilit...

The vulnerability of the Serialization component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows a perpetrator to trigger a service failure.

The vulnerability of the Serialization component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine is related to the restoration of unreliable data in memory. Exploiting this vulnerability can allow an attacker to cause service interruptions remotel...

The vulnerability of the CP2179 component, a traffic analyzer for computer networks in Wireshark, allows a hacker to cause a service failure.

The vulnerability of the CP2179 component, a traffic analyzer in Wireshark, is related to a division by zero error. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the AutoIt module in the ClamAV antivirus software package allows a malicious actor to trigger a service failure. This vulnerability exists in the Cisco Secure Endpoint Connector for Windows protection software.

The vulnerability of the AutoIt module in the ClamAV antivirus software package affects systems for protecting against malicious programs. This issue is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability in the `appendvfs.c` component of the SQLite database management system allows a hacker to cause a service failure.

The vulnerability of the appendvfs.c component in the SQLite database management system is related to reading data beyond the permissible buffer size. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...