GIT suffers from a service parameter injection vulnerability

GIT is a revision control system. GIT suffers from a service parameter injection vulnerability that can be exploited by an attacker to execute arbitrary code from a distance...

SUSE-SU-2023:2296-1 Security update for openvswitch

This update for openvswitch fixes the following issues: - CVE-2023-1668: Fixed remote traffic denial of service via crafted packets with IP proto 0 bsc1210054...

CVE-2023-28413

Directory traversal vulnerability in Snow Monkey Forms versions v5.0.6 and earlier allows a remote unauthenticated attacker to obtain sensitive information, alter the website, or cause a denial-of-service DoS condition...

CVE-2023-31994

Certain Hanwha products are vulnerable to Denial of Service DoS. ck vector is: When an empty UDP packet is sent to the listening service, the service thread results in a non-functional service DoS via WS Discovery and Hanwha proprietary discovery services. This affects IP Camera ANE-L7012R 1.41.0...

CVE-2023-32350

Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system OS command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by instead providing a package with a...

Cisco Small Business Denial of Service Vulnerability (CNVD-2023-40906)

Cisco Small Business is a switch from the American company Cisco Cisco. A denial of service vulnerability exists in Cisco Small Business Series Switches, which arises from a device authentication error on requests sent to the web interface, and can be exploited by an unauthenticated, remote...

Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to a denial of service vulnerability in JXPath (CVE-2022-40161)

Summary IBM InfoSphere Information Server is affected but not classified as vulnerable to a denial of service vulnerability in JXPath. The CVE is addressed. Vulnerability Details CVEID:CVE-2022-40161 DESCRIPTION: JXPath is vulnerable to a denial of service, caused by a stack-based buffer overflow...

JerryScript parser_parse_function_arguments function denial of service vulnerability

JerryScript is a lightweight JavaScript engine Jerryscript project . A denial of service vulnerability exists in the JerryScript parserparsefunctionarguments function, which can be exploited by an attacker to cause a denial of service...

JerryScript ecma_big_uint_div_mod function denial of service vulnerability

JerryScript is a lightweight JavaScript engine Jerryscript project . A denial of service vulnerability exists in the JerryScript ecmabiguintdivmod function, which can be exploited by an attacker to cause a denial of service...

Teltonika RUT router 操作系统命令注入漏洞

Teltonika RUT9XX and Teltonika RUT950 are both LET router products from Teltonika Lithuania. An operating system command injection vulnerability exists in Teltonika RUT router versions 00.07.00 through 00.07.03, which stems from the inclusion of an operating system OS command injection...

Siemens SIMATIC Cloud Connect 7 Denial of Service Vulnerability

SIMATIC Cloud Connect 7 is an IoT gateway for connecting programmable logic controllers to cloud services and allows field devices with OPC UA server interfaces to be connected as OPC UA clients. A denial of service vulnerability exists in Siemens SIMATIC Cloud Connect 7, which can be exploited b...

CVE-2022-4008

In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service...

AZL-26729 CVE-2023-31490 affecting package frr for versions less than 8.5.1-2

An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgpattrpsidsub function...

CVE-2022-48232

In FM service , there is a possible missing params check. This could lead to local denial of service in FM service...

PT-2023-15627 · Unknown · Fm Service

Name of the Vulnerable Software and Affected Versions: FM service affected versions not specified Description: The issue is related to a possible missing parameters check in the FM service, which could lead to a local denial of service. Recommendations: At the moment, there is no information abou...

PT-2023-15629 · Unknown · Fm Service

Name of the Vulnerable Software and Affected Versions: FM service affected versions not specified Description: The issue is related to a possible missing parameters check in the FM service, which could lead to a local denial of service. Recommendations: At the moment, there is no information abou...

PT-2023-15750 · Tee · Tee

Name of the Vulnerable Software and Affected Versions: tee service affected versions not specified Description: The issue is related to a possible out of bounds write in the tee service due to a missing bounds check. This could lead to local denial of service and requires System execution...

PT-2023-15640 · Unknown · Audio Service

Name of the Vulnerable Software and Affected Versions: Audio service affected versions not specified Description: The issue is related to a possible missing permission check in the audio service. This could lead to local escalation of privilege with no additional execution privileges...

IBM DB2 Denial of Service Vulnerability (CNVD-2023-64881)

IBM DB2 is a relational database management system from International Business Machines IBM. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM DB2, which can be exploited by an attacker to caus...

PT-2023-16945 · Amazon +1 · Amazon Fire Tv Stick +1

Name of the Vulnerable Software and Affected Versions: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5 Insignia TV with FireOS versions prior to 7.6.3.3 Description: An issue with the exchangeDeviceServices function on the amzn.dmgr service allowed an attacker to register services that are...