CVE-2024-23482

The ZScaler service is susceptible to a local privilege escalation vulnerability found in the ZScalerService process. Fixed Version: Mac ZApp 4.2.0.241 and later...

CVE-2023-6175 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark

NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file...

Cache Poisoning Vulnerability

Summary An attacker controlling the second variable of the translate function is able to perform a cache poisoning attack. They can change the outcome of translation requests made by subsequent users. Details The opt.id parameter allows the overwriting of the cache key. If an attacker sets the id...

January 9, 2024-KB5034276 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 11, version 21H2

None None...

SUSE-SU-2024:0961-1 Security update for zziplib

This update for zziplib fixes the following issues: - CVE-2020-18770: Fixed denial-of-service in function zzipdiskentrytofileheader in mmapped.c bsc1214577...

Mz Automation Libiec61850 安全漏洞

Mz Automation Libiec61850 is an open source library for the IEC 61850 protocol from Mz Automation. A security vulnerability exists in Mz Automation Libiec61850 v1.4.0 and earlier versions, which originates from the mmsServerhandleFileCloseRequest.c function in src/mms/isomms/server/mmsfileservice...

SUSE-SU-2024:0946-1 Security update for rubygem-rack-1_4

This update for rubygem-rack-14 fixes the following issues: - CVE-2024-25126: Fixed a Denial of Service Vulnerability in Rack Content-Type Parsing bsc1220239 - CVE-2024-26141: Fixed a Denial of Service Vulnerability in Range request header parsing bsc1220242 - CVE-2024-26146: Fixed a Denial of...

Intel Local Manageability Service Log Information Disclosure Vulnerability

Intel Local Manageability Service is a management engine from Intel Corporation USA designed to help IT administrators manage computers and devices in an organization over a local network or remote connection. Intel Local Manageability Service versions prior to 2316.5.1.2 are vulnerable to a log...

RHEL 9 : .NET 8.0 (RHSA-2024:1310)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1310 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. N...

CVE-2024-23249

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.4. Processing a file may lead to a denial-of-service or potentially disclose memory contents...

CVE-2024-25111 SQUID-2024:1 Denial of Service in HTTP Chunked Decoding

Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP Chunked decoder due to an uncontrolled recursion bug. This problem allows a remote attacker to cause Denial of Service when sending a crafted, chunke...

BIT-MOODLE-2021-40695

It was possible for a student to view their quiz grade before it had been released, using a quiz web service...

BIT-OPENLDAP-2020-36222

A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service...

CVE-2024-1220

A stack-based buffer overflow in the built-in web server in Moxa NPort W2150A/W2250A Series firmware version 2.3 and prior allows a remote attacker to exploit the vulnerability by sending crafted payload to the web service. Successful exploitation of the vulnerability could result in denial of...

MOXA NPort W2150A/W2250A 缓冲区错误漏洞

MOXA NPort W2150A/W2250A is a series of wireless device networking servers from China MOXA. A buffer overflow vulnerability exists in MOXA NPort W2150A/W2250A Series 2.3 and earlier versions, which can be exploited by remote attackers to cause a denial of service by sending a specially crafted...

libming parseSWF_FILLSTYLEARRAY function memory leak vulnerability

libming is a Flash SWF output library written in C. It can be used as a library to export Flash SWF files to other languages. A memory leak vulnerability exists in the libming parseSWFFILLSTYLEARRAY function, which can be exploited by an attacker to cause a denial of service...

openSUSE: Security Advisory for nautilus (SUSE-SU-2023:0006-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 38 : moodle (2024-d2f180202f)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-d2f180202f advisory. Fix for multiple CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

CVE-2024-25126 Rack ReDos in content type parsing (2nd degree polynomial)

Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack’s media type parser to take much longer than expected, leading to a possible denial of service vulnerability ReDos 2nd degree polynomial. This vulnerability is patched in 3.0.9.1 and 2.2.8.1...

The vulnerability of the web-based service for microprogramming software controlling switches of the EDS-4000/G4000 series allows a hacker to send requests to a vulnerable device and act on its behalf for other network devices.

The vulnerability of the web-based service for microprogrammed software-controlled switches of the EDS-4000/G4000 series lies in the ability to bypass access control mechanisms. Exploiting this vulnerability allows a malicious actor to send requests to the vulnerable device and act on its behalf...