The vulnerability of the formSetSysToolDDNS/formGetSysToolDDNS function in the Tenda AC23 router software allows a hacker to cause a service failure.

The vulnerability of the formSetSysToolDDNS/formGetSysToolDDNS function in the Tenda AC23 router software lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause service interruptions...

Design/Logic Flaw

Cube is a semantic layer for building data applications. Prior to version 0.34.34, it is possible to make the entire Cube API unavailable by submitting a specially crafted request to a Cube API endpoint. The issue has been patched in v0.34.34 and it's recommended that all users exposing Cube APIs...

CVE-2023-50709 Denial of service attack on the cube-api endpoint

Cube is a semantic layer for building data applications. Prior to version 0.34.34, it is possible to make the entire Cube API unavailable by submitting a specially crafted request to a Cube API endpoint. The issue has been patched in v0.34.34 and it's recommended that all users exposing Cube APIs...

CVE-2023-50709 Denial of service attack on the cube-api endpoint

Cube is a semantic layer for building data applications. Prior to version 0.34.34, it is possible to make the entire Cube API unavailable by submitting a specially crafted request to a Cube API endpoint. The issue has been patched in v0.34.34 and it's recommended that all users exposing Cube APIs...

Denial Of Service (DoS)

nuxt-api-party is vulnerable to Denial of Service DoS. The vulnerability could be exploited via crafting a malicious URL and setting high retry attempts, which allows an attacker to trigger a recursive error handling loop, crashing the server and potentially disrupting service for legitimate user...

The vulnerability of the web page rendering modules in WebKitGTK+ and WPE WebKit, caused by buffer overflows, allows attackers to trigger a service failure.

The vulnerability of the Web page rendering modules in WebKitGTK+ and WPE WebKit is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

The vulnerability of the get_parentControl_list_Info() function in the Tenda AC10 router’s microprogramming software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the getparentControllistInfo function in the Tenda AC10 router’s microprogramming software is related to the execution of operations outside the buffer in memory when processing the urls parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary co...

The vulnerability of the compare_parentcontrol_time() function in Tenda AC10 router software allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the compareparentcontroltime function in Tenda AC10 router microprogramming software lies in the fact that the operation’s output goes beyond the buffer in memory when processing the time parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the FRRouting software implementation for networking routing on Unix-like systems lies in its uncontrolled resource consumption, which allows a hacker to cause service interruptions.

The vulnerability of the FRRouting software implementation for Unix-like systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially created file...

The vulnerability of the SetFirewallCfg() function in the Tenda AC10 router’s microprogramming software allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the SetFirewallCfg function in the Tenda AC10 router microprogramming system is related to the issue where the operation’s output goes beyond the buffer boundaries in memory when processing the firewallEn parameter. Exploiting this vulnerability allows a remote attacker to...

The vulnerability of the smb2_dump_detail() function in Linux operating systems allows a hacker to disclose sensitive information or cause service interruptions.

The vulnerability of the smb2dumpdetail function in Linux operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

The vulnerability of the struts.multipart.saveDir configuration on the Apache Struts software platform allows attackers to cause service failures.

The vulnerability of the struts.multipart.saveDir configuration on the Apache Struts software platform is related to insufficient control over resources with dynamic management, as a result of processing query fields whose values exceed the maxStringLength limit. Exploiting this vulnerability...

The vulnerability of the ACEManager component in the ALEOS operating system of Sierra Wireless’ wireless routers—MP70, RV50x, RV55, LX40, LX60 ES450, GX450—allows a hacker to cause service interruptions.

The vulnerability of the ACEManager component in the ALEOS operating system for wireless routers from Sierra Wireless—such as the MP70, RV50x, RV55, LX40, LX60 ES450, and GX450 models—is related to pre-installed credentials due to the use of the assert function or similar operators. Exploiting th...

The vulnerabilities of the OPC-server software programs such as KEPServerEX, ThingWorx Kepware Server, ThingWorx Industrial Connectivity, OPC-Aggregator, ThingWorx Kepware Edge, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server, and Software Toolbox TOP Server are related to the possibility of buffer overflows in dynamic memory. This allows attackers to access protected information or cause service failures.

The vulnerabilities of the OPC-server software products such as KEPServerEX, ThingWorx Kepware Server, ThingWorx Industrial Connectivity, OPC-Aggregator, ThingWorx Kepware Edge, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server, and Software Toolbox TOP Server are...

The vulnerability of 5G MediaTek wireless communication modules, related to improper error handling, allows attackers to trigger service interruptions.

The vulnerability of 5G wireless communication modules from MediaTek is related to improper error handling. Exploiting this vulnerability can allow attackers to cause service failures when receiving improperly formatted RRC messages...

The vulnerability of the Traffic Analyzer – Statistical function in the microprogramming software for Wi-Fi routers from ASUS’ RT-AC86U allows a hacker to execute arbitrary commands or cause service failures.

The vulnerability of the Traffic Analyzer – Statistical function in ASUS’ Wi-Fi router software, the RT-AC86U, exists due to the lack of measures taken to neutralize certain components. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands or cause service...

The vulnerability of the HTTP/2 network protocol implementation in BIG-IP’s access control and remote authentication mechanisms allows a attacker to cause service interruptions.

The vulnerability of the HTTP/2 network protocol implementation for BIG-IP access control and remote authentication mechanisms is related to an uncontrolled resource consumption during request processing. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the remote control function of the PowerStation load balancing system allows a hacker to execute arbitrary commands or cause service failures.

The vulnerability of the remote control function of the PowerStation network load balancing system is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands ...

The vulnerability of the wanStat_detail function in the microprogramming software for ASUS RT-AC86U routers allows a hacker to execute arbitrary commands or cause service failures.

The vulnerability of the wanStatdetail function in the Wi-Fi router software of ASUS RT-AC86U exists due to the lack of measures to neutralize specific components. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands or cause service failures...

The vulnerability of the.fasterxml.jackson.dataformat:jackson-dataformat-cbor package from the jackson-dataformats-binary library allows a attacker to trigger a service failure.

The vulnerability of the com.fasterxml.jackson.dataformat:jackson-dataformat-cbor package in the jackson-dataformats-binary library is related to the allocation of unlimited memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...