CVE-2019-13010

The CVE-2019-13010 entry concerns GitLab Enterprise Edition (EE) versions 8.3 through 12.0.2 where the color codes decoder is vulnerable to a resource depletion attack when specific formats are used, allowing Uncontrolled Resource Consumption. Affected component: GitLab EE color codes decoder. Ro...

CVE-2019-13010

Removed by vendor...

CVE-2019-13007

GitLab Community/Enterprise Edition 11.11–12.0.2 contains an Uncontrolled Resource Consumption vulnerability: when an admin enables a service template, an action is triggered that leads to resource depletion and potential availability impact. Remediation: upgrade to GitLab 12.0.3 or later (securi...

CVE-2019-13007

Removed by vendor...

CVE-2019-13003

An issue was discovered in GitLab Community and Enterprise Edition before 12.0.3. One of the parsers used by Gilab CI was vulnerable to a resource exhaustion attack. It allows Uncontrolled Resource Consumption...

CVE-2019-13003

An issue was discovered in GitLab Community and Enterprise Edition before 12.0.3. One of the parsers used by Gilab CI was vulnerable to a resource exhaustion attack. It allows Uncontrolled Resource Consumption...

Siemens SIMATIC S7-300 CPUs and SINUMERIK Controller over Profinet (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC S7-300 CPUs and SINUMERIK Controller over Profinet Vulnerability: Uncontrolled Resource Consumption 2. UPDATE INFORMATION This updated advisory is a follow-up to the...

Cisco Email Security Appliance Uncontrolled Resource Exhaustion Vulnerability

A vulnerability in the malware detection functionality in Cisco Advanced Malware Protection AMP in Cisco AsyncOS Software for Cisco Email Security Appliances ESAs could allow an unauthenticated remote attacker to exhaust resources on an affected device. The vulnerability is due to insufficient...

Omron PLC CJ Series

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Omron Equipment: PLC CJ Series Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could cause a denial-of-service condition. 3...

The vulnerability of the TIFFSetDirectory function in the LibTIFF library, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the TIFFSetDirectory function in the LibTIFF library is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures through the use of a specially created tiff file...

The vulnerability of the Server:Optimizer component of the Oracle MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server:Optimizer component of the Oracle MySQL database management system is related to an uncontrolled consumption of system resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Adobe Experience Manager 6.4 and 6.5 DoS (APSB20-08)

The version of Adobe Experience Manager installed on the remote host is 6.4 or 6.5 without hotfixes cq-6.4.0-hotfix-31868 or cq-6.5.0-hotfix-31870. It is, therefore, affected by an uncontrolled resource consumption vulnerability which, if successfully exploited, leads to a denial-of-service DoS...

CVE-2020-3741

Adobe Experience Manager versions 6.5, and 6.4 have an uncontrolled resource consumption vulnerability. Successful exploitation could lead to denial-of-service...

Denial of service

Adobe Experience Manager versions 6.5, and 6.4 have an uncontrolled resource consumption vulnerability. Successful exploitation could lead to denial-of-service...

CVE-2020-3741

Adobe Experience Manager versions 6.5, and 6.4 have an uncontrolled resource consumption vulnerability. Successful exploitation could lead to denial-of-service...

CVE-2020-3741

Adobe Experience Manager (AEM) versions 6.4 and 6.5 are affected by an uncontrolled resource consumption vulnerability that could lead to denial-of-service. AEM 6.4.0 hotfix 31868 or 6.5.0 hotfix 31870 address the issue (APSB20-08).

Siemens SIMATIC S7 (Update B)

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens PROFINET-IO Stack (Update H)

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

Protect

An Uncontrolled Resource Consumption vulnerability in multiple products may allow an attacker to cause web service portal denial of service DoS via handling special crafted HTTP requests/responses in pieces slowly. Slow HTTP attacks are denial-of-service DoS attacks in which the attacker sends HT...

The vulnerability of the __feat_register_sp() function in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the featregistersp function in Linux operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause a service failure...