CVE-2021-45767

GPAC 1.1.0 was discovered to contain an invalid memory address dereference via the function lsrreadid. This vulnerability can lead to a Denial of Service DoS...

JVN#49047921: Jimoty App for Android uses a hard-coded API key for an external service

Jimoty App for Android provided by Jimoty, Inc. uses a hard-coded API key for an external service CWE-798. Impact API key for an external service may be obtained by analyzing data in the app. Note that a user is not directly affected by this vulnerability. Solution Update the Application Update t...

CVE-2022-21911

.NET Framework Denial of Service Vulnerability...

CVE-2022-21865

Connected Devices Platform Service Elevation of Privilege Vulnerability...

CVE-2021-46042

A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the fseeko function, which causes a Denial of Service...

CVE-2021-45292

The gfisomhintrtpread function in GPAC 1.0.1 allows attackers to cause a denial of service Invalid memory address dereference via a crafted file in the MP4Box command...

Apache Log4j StrSubstitutor Uncontrolled Recursion Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Apache Log4j. Authentication is not required to exploit this vulnerability. The specific flaw exists within the StrSubstitutor class. The issue results from the lack of proper validatio...

Microsoft Windows Fax services 代码注入漏洞

Fax Service is a Telephone Application Programming Interface TAPI-compliant system service that allows users to send and receive faxes from their desktop applications using a local fax device or a shared network fax device.A remote code execution vulnerability exists in Microsoft Windows Fax...

PYSEC-2021-838

Invenio-Drafts-Resources is a submission/deposit module for Invenio, a software framework for research data management. Invenio-Drafts-Resources prior to versions 0.13.7 and 0.14.6 does not properly check permissions when a record is published. The vulnerability is exploitable in a default...

SUSE-SU-2021:14850-1 Security update for clamav

This update for clamav fixes the following issues: - CVE-2018-14679: Fixed off-by-one issue in embedded libmspack that could lead to denial of service bsc1103032. - Update to 0.103.4 bsc1192346. - Add documentation about max file size purpose and side effect in the 'clamscan' and 'clamdscan'...

CVE-2021-37035

There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the app to exit unexpectedly...

CVE-2021-37031

There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the app to exit unexpectedly...

The vulnerability of the Kerberos Key Distribution Center (KDC) service on Microsoft Windows operating systems allows a perpetrator to disclose protected information.

The vulnerability of the Kerberos Key Distribution Center KDC service on Microsoft Windows systems is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Information Disclosure

hadoop-hdds-container-service is vulnerable to information disclosure. an attacker can modify ratis replication configuration through the server-to-server RPC endpoint by downloading the raw data from the data node and ozone manager...

Clustered Data ONTAP Denial of Service Vulnerability

Clustered Data ONTAP is a proprietary operating system used by NetApp for storage disk arrays.A denial-of-service vulnerability exists in Clustered Data ONTAP. An attacker could exploit this vulnerability to cause the httpd server to crash...

ISC BIND Denial of Service Vulnerability (CNVD-2023-25100)

ISC BIND is an open source software implementation of the DNS protocol from ISC, Inc. A denial-of-service vulnerability exists in BIND, which stems from an error in the corresponding processing of the product's authorization server. An attacker could exploit the vulnerability to cause a performan...

Inefficient Regular Expression Complexity in cfinke/typo.js

Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in typo-js. It allows causing a denial of service when calling function removeAffixComments. Proof of Concept // PoC.js var Typo = require"typo-js" var emptydict = new Typo; forvar i = 1; i = 50000; i++...

MGASA-2021-0479 Updated python-mpmath packages fix security vulnerability

Fix CVE-2021-29063 regular expression denial of service...

GHSA-MCWM-2WMC-6HV4 ASP.NET Core Denial of Service Vulnerability

Withdrawn This advisory was initially published and mapped incorrectly to nuget Microsoft.NETCore.App.Ref. We later reanalyzed this advisory and found it does not have a direct mapping to a NuGet package. Thus we have withdrawn this advisory. The underlying ASP.NET Core Denial of Service...

CVE-2021-41118 ReDoS in DynamicPageList3

The DynamicPageList3 extension is a reporting tool for MediaWiki, listing category members and intersections with various formats and details. In affected versions unsanitised input of regular expression date within the parameters of the DPL parser function, allowed for the possibility of ReDoS...