The vulnerability of the PLS FTP-server command in the PCMan FTP Server allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the PLS FTP-server’s command line interface is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

How to Upgrade the NATS Server Used by Veeam Backup for Microsoft 365

Purpose This article provides information about upgrading the NATS Server used by Veeam Backup for Microsoft 365. NATS Server Version Impact It is recommended that customers use the latest supported version of NATS Server with Veeam Backup for Microsoft 365 to avoid any potential performance...

libtpms 缓冲区错误漏洞

libtpms is a software emulation of a Trusted Platform Module by the individual developer Stefan Berger. A buffer error vulnerability exists in libtpms that stems from an out-of-bounds read in the CryptHmacSign function, which could lead to a service interruption...

The vulnerability of IBM DB2 database management systems and IBM DB2 Connect Server lies in buffer overflows in the stack, which allows attackers to cause service interruptions.

The vulnerability of IBM DB2 database management systems, including IBM DB2 Connect Server, is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially crafted requests...

The vulnerability of IBM DB2 database management systems and IBM DB2 Connect Servers lies in their uncontrolled memory distribution, which allows attackers to cause service interruptions.

The vulnerability of IBM DB2 database management systems, including IBM DB2 Connect Server, is related to uncontrolled memory allocation. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted requests...

The vulnerability of the mptcp_pm_nl_append_new_local_addr() function in the net/mptcp/pm_netlink.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the mptcppmnlAppendNewLocalAddr function in the net/mptcp/pmnetlink.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the ThinServer.exe executable file of the ThinServer component of Rockwell Automation’s ThinManager application management platform allows a attacker to cause a service failure.

The vulnerability of the ThinServer.exe executable file of the ThinServer component of Rockwell Automation’s ThinManager application for centralized application management involves reading data beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause...

Vulnerabilities in the l2tp_xmit_core(), l2tp_tunnel_create(), and l2tp_tunnel_register() functions of the Linux operating system’s kernel, allowing attackers to cause service interruptions.

The vulnerabilities of the l2tpxmitcore, l2tptunnelcreate, and l2tptunnelregister functions in the Linux kernel are related to improper resource locking. Exploiting these vulnerabilities can allow an attacker to cause service failures...

The vulnerability of Poppler’s PDF file rendering library, related to integer overflow, allows attackers to cause service interruptions.

The vulnerability of the Poppler library for displaying PDF files is related to a numerical overflow in the PSStack::roll function. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the distribution of resources without any restrictions or regulations, allows a violator to cause service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

CVE-2024-33001

SAP NetWeaver and ABAP platform allows an attacker to impede performance for legitimate users by crashing or flooding the service. An impact of this Denial of Service vulnerability might be long response delays and service interruptions, thus degrading the service quality experienced by legitimat...

CVE-2024-33513

Unauthenticated Denial-of-Service DoS vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected service...

The vulnerability of the Adobe Animate software for creating multimedia and computer animations, related to the manipulation of NULL pointers, allows attackers to cause service interruptions.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to the handling of NULL pointers. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the setUrlFilterRules function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router microprogramming system allows a intruder to cause a service failure.

The vulnerability of the setUrlFilterRules function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router microprogramming system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending a speciall...

The vulnerability of the /cgi-bin/ExportIbmsConfig.sh file, a component of the IBMS Configuration File Handler microprogramming system for TOTOLINK A3000RU routers, allows a hacker to trigger a service failure.

The vulnerability of the /cgi-bin/ExportIbmsConfig.sh file, a component of the IBMS Configuration File Handler microprogramming system for TOTOLINK A3000RU routers, is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause service interruptions...

CVE-2020-9213

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module,...

CVE-2020-26248

In the PrestaShop module "productcomments" before version 4.2.1, an attacker can use a Blind SQL injection to retrieve data or stop the MySQL service. The problem is fixed in 4.2.1 of the module...

CVE-2019-6631

On BIG-IP 11.5.1-11.6.4, iRules performing HTTP header manipulation may cause an interruption to service when processing traffic handled by a Virtual Server with an associated HTTP profile, in specific circumstances, when the requests do not strictly conform to RFCs...

CVE-2017-9139

There is a stack-based buffer overflow on some Tenda routers FH1202/F1202/F1200: versions before 1.2.0.20. Crafted POST requests to an unspecified URL result in DoS, interrupting the HTTP service used to login to the web UI of a router for 1 to 2 seconds...

The vulnerability of the web proxy function in the operating system PAN-OS, which allows a hacker to trigger a service failure

The vulnerability of the web proxy function in the operating system PAN-OS is related to insufficient checks for exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending numerous specially crafted packets...