SUSE SLES15 / openSUSE 15 Security Update : python-Django (SUSE-SU-2024:2816-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2816-1 advisory. - CVE-2024-42005: Fixed SQL injection in QuerySet.values and valueslist bsc1228629 - CVE-2024-41989: Fixed Memory exhaustion in...

(0Day) (Pwn2Own) Pioneer DMH-WT7600NEX Media Service Improper Handling of Exceptional Conditions Denial-of-Service Vulnerability

This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Pioneer DMH-WT7600NEX devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Media service, which listens on TCP port 42000...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Node.js

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of Node.js Vulnerability Details CVEID:CVE-2024-33883 DESCRIPTION: Node.js ejs module is vulnerable to a denial of service, caused by a prototype pollution flaw. By adding or modifying properties of...

PT-2024-38194 · Avg · Avg Antivirus Free

Name of the Vulnerable Software and Affected Versions: AVG AntiVirus Free affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations of AVG AntiVirus Free. An attacker must first obtain the ability to execute low-privileged code...

PT-2024-38188 · Avast · Avast Free Antivirus

Name of the Vulnerable Software and Affected Versions: Avast Free Antivirus affected versions not specified Description: This issue allows local attackers to create a denial-of-service condition on affected installations of Avast Free Antivirus. An attacker must first obtain the ability to execut...

Denial of Service Vulnerability in Vastbase G100 Database of Beijing Massive Data Technology Co.

Vastbase G100 is an enterprise-class relational database management system based on openGauss kernel launched by Beijing Massive Data Technology Co. A denial of service vulnerability exists in the Vastbase G100 database of Beijing Massive Data Technology Co. that can be exploited by attackers to...

Oracle MySQL Server 8.x <= 8.0.36, 8.1.x <= 8.4.0 Security Update (cpujul2024) - Windows

Oracle MySQL Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Security Bulletin: IBM Sterling Partner Engagement Manager is impacted by WebSphere Application Server Liberty DoS Vulnerability

Summary IBM Sterling Partner Engagement Manager has addressed a WebSphere Application Server Liberty denial of service vulnerability, denial of service CVE-2023-38737 vulnerability. Vulnerability Details CVEID:CVE-2023-38737 DESCRIPTION: IBM WebSphere Application Server Liberty 22.0.0.13 through...

CVE-2024-30105 .NET and Visual Studio Denial of Service Vulnerability

...

CVE-2024-38072 Windows Remote Desktop Licensing Service Denial of Service Vulnerability

...

Ubuntu: Security Advisory (USN-6879-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ROS-20240704-06

Vulnerability of logback receiver component of logging library logback is related to recovery of inaccurate data in memory inaccurate data. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CBL Mariner 2.0 Security Update: ruby / rubygem-rexml (CVE-2024-35176)

The version of ruby / rubygem-rexml installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35176 advisory. - REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service...

CVE-2024-6038 ReDoS Vulnerability in gaizhenbiao/chuanhuchatgpt

A Regular Expression Denial of Service ReDoS vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability is located in the filterhistory function within the utils.py module. This function takes a user-provided keyword and attempts to match it against chat history...

PT-2024-4540 · Vmware · Vmware Vcenter Server +2

Name of the Vulnerable Software and Affected Versions: vCenter Server affected versions not specified VMware Cloud Foundation affected versions not specified Description: The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network access to vCenter Server may...

The vulnerability of the HTTP-based microprogramming software service of D-Link G416 allows a hacker to execute arbitrary code.

The vulnerability of the HTTP-based microprogramming software used in D-Link G416 routers exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary code throug...

The vulnerability of the Microsoft Message Queuing (MSMQ) queue service on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Message Queuing MSMQ queue service on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Wireshark Resource Management Error Vulnerability (CNVD-2024-39269)

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a resource management error vulnerability that stems from a confusion in...

Hewlett Packard Enterprise Cray Parallel Application Launch Service Security Vulnerability

Hewlett Packard Enterprise Cray Parallel Application Launch Service is a parallel application launch service from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise Cray Parallel Application Launch Service that originates from a susceptibility to...

IBM Jazz Reporting Service Security Vulnerability

IBM Jazz Reporting Service JRS is a suite of ready-to-use reporting components from International Business Machines IBM. The product includes features such as report generation, data collection, and lifecycle queries. A security vulnerability exists in IBM Jazz Reporting Service version 7.0.3 tha...