Lucene search
+L

3437 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.28 views

(0Day) Voltronic Power ViewPower USBCommEx shutdown Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. User interaction is required to exploit this vulnerability in that an administrator must trigger a shutdown operation. The specific flaw exists within the shutdown...

8.8CVSS7.4AI score0.01396EPSS
SaveExploits0
ICS
ICS
added 2023/12/12 12:00 p.m.38 views

Schneider Electric Easy UPS Online Monitoring Software

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Vendor: Schneider Electric Equipment: Easy UPS Online Monitoring Software Vulnerability: Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow elevation of privileges which could result in arbitrary file...

7.2AI score0.00236EPSS
SaveExploits0References34
CNNVD
CNNVD
added 2023/12/05 12:00 a.m.13 views

Huawei HarmonyOS Security Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a privilege management vulnerability in the wireless sound transmission shutdown module...

5.3CVSS5.7AI score0.00418EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/11/28 4:09 p.m.10 views

kernel: mm/slab_common: slab_caches list corruption after kmem_cache_destroy()

In the Linux kernel, the following vulnerability has been resolved: mm/slabcommon: fix slabcaches list corruption after kmemcachedestroy After the commit in Fixes:, if a module that created a slab cache does not release all of its allocated objects before destroying the cache at rmmod time, we...

5.5CVSS6.7AI score0.00222EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2023/11/28 3:40 p.m.8 views

kernel: i40e: Fix kernel crash during reboot when adapter is in recovery mode

A flaw was found in the i40e module in the Linux kernel. When the firmware is in recovery mode during the probe phase, some probe functions are skipped, causing a NULL pointer dereference when the system shuts down or is rebooted. This issue results in a denial of service...

5.5CVSS6.6AI score0.00194EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/11/20 12:00 a.m.9 views

PT-2023-8174 · Voltronic Power · Voltronic Power Viewpower

Name of the Vulnerable Software and Affected Versions: Voltronic Power ViewPower affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. The flaw exists within the shutdown method due to the lack of proper validation of ...

10CVSS7.5AI score0.01396EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2023/11/17 10:44 a.m.56 views

CVE-2023-5676

Eclipse OpenJ9 is vulnerable to a denial of service, caused by a flaw when a shutdown signal SIGTERM, SIGINT or SIGHUP is received before the JVM has finished initializing. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause an infinite...

4.1CVSS6.8AI score0.0041EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/11/17 2:02 a.m.9 views

SUSE CVE-2023-5676

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal SIGTERM, SIGINT or SIGHUP is received before the JVM has finished initializing...

6.5CVSS8AI score0.0041EPSS
SaveExploits0References9
Amazon
Amazon
added 2023/11/16 12:00 a.m.10 views

Medium: containerd

Issue Overview: In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error. CVE-2022-27664 Affected Packages: containerd Note: This advisory is applicable to...

7.5CVSS6.9AI score0.03269EPSS
SaveExploits0
NVD
NVD
added 2023/11/15 2:15 p.m.19 views

CVE-2023-5676

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal SIGTERM, SIGINT or SIGHUP is received before the JVM has finished initializing...

5.9CVSS0.0041EPSS
SaveExploits0References3
Prion
Prion
added 2023/11/15 2:15 p.m.22 views

Design/Logic Flaw

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal SIGTERM, SIGINT or SIGHUP is received before the JVM has finished initializing...

2.6CVSS6.9AI score0.0041EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/11/15 2:02 p.m.29 views

CVE-2023-5676 Eclipse OpenJ9 possible infinite busy hang

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal SIGTERM, SIGINT or SIGHUP is received before the JVM has finished initializing...

4.1CVSS6.1AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2023/11/15 2:02 p.m.25 views

CVE-2023-5676 Eclipse OpenJ9 possible infinite busy hang

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal SIGTERM, SIGINT or SIGHUP is received before the JVM has finished initializing...

4.1CVSS6.8AI score0.0041EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/11/15 12:00 a.m.11 views

PT-2023-32256 · Eclipse +4 · Eclipse Openj9 +4

Name of the Vulnerable Software and Affected Versions: Eclipse OpenJ9 versions prior to 0.41.0 Description: The issue is related to a denial of service caused by a flaw when a shutdown signal SIGTERM, SIGINT or SIGHUP is received before the JVM has finished initializing. This can lead to an...

9.1CVSS6AI score0.81039EPSS
SaveExploits3References210
CNNVD
CNNVD
added 2023/11/15 12:00 a.m.5 views

Eclipse OpenJ9 Competition Condition Issue Vulnerability

Eclipse OpenJ9 is a Java application engine from the Eclipse Foundation. It is primarily used to run Java applications. A security vulnerability exists in Eclipse OpenJ9 versions prior to 0.41.0, which stems from the fact that if a shutdown signal is received before the JVM completes...

5.9CVSS9.1AI score0.0041EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2023/11/14 3:46 p.m.8 views

kernel: drm/radeon: free iio for atombios when driver shutdown

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: free iio for atombios when driver shutdown Fix below kmemleak when unload radeon driver: unreferenced object 0xffff9f8608ede200 size 512: comm "systemd-udevd", pid 326, jiffies 4294682822 age 716.338s hex dump first 3...

5.5CVSS6.7AI score0.00156EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2023/11/14 3:46 p.m.12 views

kernel: dmaengine: ptdma: check for null desc before calling pt_cmd_callback

AMD PTDMA Pass-Through DMA engine crashes the kernel when ptissuepending encounters empty descriptor queues. The function blindly invokes ptcmdcallback without verifying that a valid descriptor exists, triggering a NULL pointer dereference. This commonly surfaces during system shutdown on AMD...

7.3AI score0.00184EPSS
SaveExploits0References5
Wired Threat Level
Wired Threat Level
added 2023/11/11 2:00 p.m.33 views

Signal Is Finally Testing Usernames

Plus: A DDoS attack shuts down ChatGPT, Lockbit shuts down a bank, and a communications breakdown between politicians and Big Tech...

7.3AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
added 2023/11/09 9:55 p.m.24 views

Omegle Was Forced to Shut Down by a Lawsuit From a Sexual Abuse Survivor

Omegle connected strangers to one another and had a long-standing problem of pairing minors with sexual predators. A legal settlement took it down...

7.2AI score
SaveExploits0
OSV
OSV
added 2023/11/08 4:15 p.m.10 views

CVE-2023-35767

In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service DoS via the shutdown function was identified. Reported by Jason Geffner...

7.5CVSS5.8AI score0.00947EPSS
SaveExploits0References1
Rows per page
Query Builder