The vulnerability of the Packet Forwarding Engine (PFE) in Juniper Networks’ Junos operating system, which allows a attacker to trigger a service failure.

The vulnerability of the packet forwarding engine PFE in Juniper Networks’ Junos operating system is related to improper validation of syntax correctness in input data. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

Hathway Router CM5100 Cross-Site Scripting Vulnerability

Hathway Router is a router from Hathway India. The Hathway Router CM5100 suffers from a cross-site scripting vulnerability that stems from multiple vulnerabilities in the router, which could allow a remote attacker to perform a stored cross-site scripting XSS attack, obtain sensitive information,...

Hathway Router CM5100 Cross-Site Scripting Vulnerability

Hathway Router is a router from Hathway India. The Hathway Router CM5100 suffers from a cross-site scripting vulnerability that stems from multiple vulnerabilities in the router, which could allow a remote attacker to perform a stored cross-site scripting XSS attack, obtain sensitive information,...

The software for deploying and executing AI models, NVIDIA Triton Inference Server (previously TensorRT Inference Server), has vulnerabilities that allow attackers to gain unauthorized access to protected information, enhance their privileges, execute arbitrary code, or cause service failures.

The vulnerability of the NVIDIA Triton Inference Server previously known as TensorRT Inference Server software for deploying and executing artificial intelligence models is related to errors in processing the relative path to the catalog during model loading. Exploiting this vulnerability can all...

The vulnerability of the BMC (Baseboard Management Controller) on the NVIDIA DGX A100 server allows a hacker to enhance their privileges, gain access to read, modify, or delete data, execute arbitrary code, or cause a service failure.

The vulnerability of the BMC Baseboard Management Controller in NVIDIA’s DGX A100 server lies in the absence of authentication procedures for critical functions. Exploiting this vulnerability allows an attacker to enhance their privileges, gain read, write, or delete access to data, execute...

The vulnerability of the Zippy plugin in the WordPress content management system, related to deficiencies in the deserialization mechanism, allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the Zippy plugin in the WordPress content management system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service interruptions...

Vulnerability of the blkcgdestroy_blkgs() function (block/blk-cgroup.c) in the Linux kernel, allowing a malicious actor to cause service failure

The vulnerability of the blkcgdestroyblkgs function block/blk-cgroup.c in the Linux kernel is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the client software’s interaction with the RabbitMQ Java client, a broker for messaging services, arises from uncontrolled resource consumption. This allows attackers to cause service failures.

The vulnerability of the client software for interacting with the RabbitMQ Java client for message brokers involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the microprogrammed software of Zyxel USG FLEX, USG FLEX 50(W), USG20(W)-VPN, and VPN devices allows a hacker to cause service interruptions.

The vulnerability of the microprogrammed software in Zyxel USG FLEX, USG FLEX 50W, USG20W-VPN, and VPN devices is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

PHPJabbers Car Park Booking System 3.0 Missing Rate Limiting

Exploit Title: PHPJabbers Car Park Booking System v3.0 - Missing Rate Limiting Date: 19/12/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/car-park-booking/sectionDemo Version: v3.0 Tested on:...

The vulnerability of the Jackson-databind library, related to writing beyond the buffer boundaries, allows a hacker to trigger a service failure.

The vulnerability of the Jackson-databind library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the jackson-databind library, related to unlimited resource distribution, allows attackers to cause service failures.

The vulnerability of the jackson-databind library is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of software for managing drivers in Multipath-tools systems allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of software for managing drivers in Multipath-tools-based access systems is related to incorrect definition of symbolic links before accessing files. Exploiting this vulnerability can allow attackers to gain access to confidential data, compromise its integrity, and cause servic...

The vulnerability of the stbi__jpeg_decode_block_prog_ac component in the C/C++ Libstb library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the stbijpegdecodeblockprogac component in the C/C++ Libstb library is related to incorrect calculations. Exploiting this vulnerability may allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability in the WritePCXImage function of the pcx.c component in the cross-platform library for working with GraphicsMagick allows a hacker to induce a service failure.

The vulnerability of the WritePCXImage function in the pcx.c component of the cross-platform library for working with graphics in GraphicsMagick is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure by using a specially...

The vulnerability of the LZWDecode function in the libtiff/tif_lzw.c component of the LibTIFF library, which allows a hacker to cause a service failure.

The vulnerability of the LZWDecode function in the libtiff/tiflzw.c component of the LibTIFF library is related to reading data beyond the allowable buffer limits. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created TIF file...

The vulnerability of the `cljmedia_size` function in the `devices/gdevclj.c` component of the Ghostscript document processing software allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the cljmediasize function in the devices/gdevclj.c component of the Ghostscript document processing software lies in the handling of buffer overflows. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause...

The vulnerability of the `av_timecode_make_string` function in the `libavutil/timecode.c` file of the FFmpeg multimedia library allows a hacker to cause a service failure.

The vulnerability of the avtimecodemakestring function in the libavutil/timecode.c file of the FFmpeg multimedia library is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created .mov file...

Vulnerabilities in web browsers Firefox and Firefox ESR, as well as the Thunderbird email client, involve memory usage after it is freed, allowing an attacker to trigger a service failure.

The vulnerabilities in web browsers Firefox and Firefox ESR, as well as the Thunderbird email client, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to cause service interruptions remotely...

The vulnerability of the libavcodec/rpzaenc.c component in the FFmpeg multimedia library allows a perpetrator to gain access to confidential data and also trigger a service failure.

The vulnerability of the libavcodec/rpzaenc.c component in the FFmpeg multimedia library relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data, as well as cause service...