PT-2023-15269 · Unknown · Log Service

Name of the Vulnerable Software and Affected Versions: log service affected versions not specified Description: The issue is related to a missing permission check in the log service, which could lead to a local denial of service. Recommendations: At the moment, there is no information about a new...

CVE-2023-24155

TOTOLINK T8 V4.1.5cu was discovered to contain a hard code password for the telnet service which is stored in the component /webcste/cgi-bin/product.ini...

Denial Of Service (DoS)

openmage/magento-lts is vulnerable to Denial Of Service DoS. The vulnerability exists in the filter function of MaliciousCode.php, allowing an attacker to cause an application crash through an infinite loop by providing malicious input...

CVE-2023-0618

A vulnerability was found in TRENDnet TEW-652BRP 3.04B01. It has been declared as critical. This vulnerability affects unknown code of the file cfgop.ccp of the component Web Service. The manipulation leads to memory corruption. The attack can be initiated remotely. The exploit has been disclosed...

Security Bulletin: Vulnerabilities in FasterXML affects IBM Common Licensing's Administration And Reporting Tool (ART) and its Agent (CVE-2022-42003, CVE-2022-42004)

Summary Security Vulnerablities have been addressed in IBM Common Licensing. Faster-XML Jackson is a JSON to Java object conversion API CVE-2022-42003, CVE-2022-42004. A fix is available to address the vulnerability. Vulnerability Details CVEID:CVE-2022-42004 DESCRIPTION: FasterXML jackson-databi...

Denial Of Service (DoS)

libcmark-gfm.so is vulnerable to Denial of Service DoS attacks. A malicious user is able to pass various commands with very large values through the handlepointybrace function causing the running time to increase quadratically due to polynomial time complexity issues, resulting in an application...

The vulnerability of Windows Event Tracing service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Windows Event Tracing in operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

CVE-2023-22486

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 contain a polynomial time complexity issue in handleclosebracket that may lead to unbounded resource exhaustion and subsequent denial of service. This vulnerability has...

Oracle MySQL Server <= 5.7.40 Security Update (cpujan2023) - Windows

Oracle MySQL Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2022-3514

An issue has been discovered in GitLab CE/EE affecting all versions starting from 6.6 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. An attacker may cause Denial of Service on a GitLab instance by exploiting a regex issue in the...

Oracle Linux 9 : .NET / 6.0 (ELSA-2023-0077)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-0077 advisory. 6.0.113-1.0.1 - Add missing Oracle Linux Runtime IDs 6.0.113-1 - Update to .NET SDK 6.0.113 and Runtime 6.0.13 - Resolves: RHBZ2154459 Tenable has extracted the...

TP-Link Archer C5 缓冲区错误漏洞

The TP-LINK Archer C5 is a wireless router from China P&L TP-LINK. The TP-Link Archer C5 suffers from a security vulnerability that stems from the latest available code it runs When receiving HTTP basic authentication, the httpd service can send a crafted packet that results in a heap overflow...

CVE-2023-21525

Remote Procedure Call Runtime Denial of Service Vulnerability...

PT-2023-2419 · Western Digital · Western Digital My Cloud

Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud OS versions prior to 5.26.119 Description: The issue is related to the FTP service, where an incorrect restriction of a directory path name with limited access allows an attacker to read and write arbitrary files. Thi...

PT-2023-18280 · Unknown +1 · Remote Procedure Call (Rpc) Runtime +1

Name of the Vulnerable Software and Affected Versions: Remote Procedure Call Runtime affected versions not specified Description: A denial-of-service issue allows attackers to affect the system. The estimated number of potentially affected devices worldwide is not available. There is no informati...

Realtek High-Definition Audio Driver Vulnerability - Lenovo Support US

No description provided...

Buffer overflow

There is an unauthorized buffer overflow vulnerability in Tenda AX12 v22.03.01.21 cn. This vulnerability can cause the web service not to restart or even execute arbitrary code. It is a different vulnerability from CVE-2022-2414...

OPENSUSE-SU-2023:0005-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2022-41323: Fixed potential denial-of-service vulnerability in internationalized URLs boo1203793 - CVE-2022-36359: Fixed a potential reflected file download vulnerability in FileResponse boo1201923 - Update from 2.2.12 to 2.2.28...

SUSE: Security Advisory (SUSE-SU-2023:0006-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:0005-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2022-3109: Fixed null pointer dereference in vp3decodeframe bsc1206442. - CVE-2020-22042: Fixed a denial of service vulnerability led by a memory leak in the linkfilterinouts function in libavfilter/graphparser.c. bsc1186761 - CVE-2021-3809...