Uncontrolled Resource Consumption

Liferay Portal is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to reliance on a request parameter to limit file size, enabling remote authenticated users to upload excessively large files to the system's temp folder by altering the 'maxFileSize' parameter...

RHEL 8 : squid:4 (RHSA-2024:1375)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1375 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: deni...

The vulnerability of the HttpStateData() function in the Chunked decoder of the Squid proxy server allows a hacker to induce a service failure.

The vulnerability of the HttpStateData function in the Chunked decoder of the Squid proxy server is related to buffer overflows in the stack due to uncontrolled recursion during HTTP message processing. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2024-24975

Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block that will be processed by the syntax highlighter, allowing an attacker to send a very large code block and crash the mobile app...

CVE-2024-24975 Denial of Service for mobile app users due to automatic code highlighting

Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block that will be processed by the syntax highlighter, allowing an attacker to send a very large code block and crash the mobile app...

CVE-2024-24975

Mattermost Mobile: CVE-2024-24975 affects Mattermost Mobile before 2.13.0. The issue is uncontrolled resource consumption caused by the syntax highlighter not limiting the size of code blocks, which can crash the mobile app. Affected component is the syntax highlighter in Mattermost Mobile; root ...

CVE-2024-24975 Denial of Service for mobile app users due to automatic code highlighting

Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block that will be processed by the syntax highlighter, allowing an attacker to send a very large code block and crash the mobile app...

Mattermost Mobile Uncontrolled Resource Consumption Vulnerability

Mattermost Mobile is a team collaboration and communication tool that supports cross-platform use. Mattermost Mobile suffers from an uncontrolled resource consumption vulnerability that can be exploited by an attacker to crash the mobile application by sending very large chunks of code...

The vulnerability of the SanDisk PrivateAccess data storage and protection software for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the SanDisk PrivateAccess data storage and protection software for Windows operating systems is related to an uncontrolled search path during the loading of DLL libraries. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...

Mattermost 安全漏洞

Mattermost Mobile is a team collaboration and communication tool that supports cross-platform use. Mattermost Mobile suffers from an uncontrolled resource consumption vulnerability that can be exploited by an attacker to crash the mobile application by sending very large chunks of code...

The vulnerability of the software for centralized device management in Fortinet’s FortiManager, the security event monitoring and analysis tools FortiAnalyzer, FortiAnalyzer-BigData, and the security analytics and management tool FortiPortal, arises due to the use of an uncontrolled format string. This allows a malicious individual to execute arbitrary codes or commands.

The vulnerability of the software for centralized device management in Fortinet’s FortiManager, the security event monitoring and analysis tool FortiAnalyzer, FortiAnalyzer-BigData, and the security analytics and management tool FortiPortal is related to the use of an uncontrolled format string...

PT-2024-10077 · Intel · Intel Mpi Library

Name of the Vulnerable Software and Affected Versions: Intel MPI Library versions prior to 2021.12 Description: The issue is related to an uncontrolled search path element in the Intel MPI Library, which may allow an authenticated user to potentially enable escalation of privilege via local acces...

CVE-2023-35191

Uncontrolled resource consumption for some IntelR SPS firmware versions may allow a privileged user to potentially enable denial of service via network access...

CVE-2023-35191

Uncontrolled resource consumption for some IntelR SPS firmware versions may allow a privileged user to potentially enable denial of service via network access...

CVE-2023-35191

The CVE-2023-35191 entry concerns Intel SPS firmware where a resource-management error can allow a privileged user to cause a denial of service over the network. Affected components are Intel SPS firmware (versions subject to the advisory). The underlying issue is uncontrolled resource consumptio...

The vulnerability of Microsoft Exchange Server’s mail server, related to an uncontrolled search path element, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Exchange Server is related to an uncontrolled element in the loading process for DLL libraries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Arm DS for Intel® SoC FPGA Software Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00930.html...

EulerOS 2.0 SP8 : squid (EulerOS-SA-2024-1301)

According to the versions of the squid package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6....

The vulnerability of the ISE Posture (System Scan) module of the Cisco Secure Client (formerly Cisco AnyConnect Secure Mobility Client) security solution allows attackers to enhance their privileges.

The vulnerability of the ISE Posture System Scan module of the Cisco Secure Client formerly Cisco AnyConnect Secure Mobility Client security solution is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Mattermost instant messaging application, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Mattermost instant messaging application is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by installing a custom status with an emoji that represents a very long string of text...