CVE-2023-38251

Adobe Commerce is affected by an Uncontrolled Resource Consumption vulnerability (CVE-2023-38251) that can cause a minor denial-of-service without user interaction. Affected: Adobe Commerce versions up to 2.4.7-beta1, 2.4.6-p2, 2.4.5-p4, and 2.4.4-p5 (and earlier). The root cause is Uncontrolled ...

CVE-2023-38251 Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by a Uncontrolled Resource Consumption vulnerability that could lead in minor application denial-of-service. Exploitation of this issue does not require user interacti...

Adobe Bridge Resource Management Error Vulnerability (CNVD-2023-76925)

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from a Resource Management Error vulnerability that stems from the presence of uncontrolled resource consumption by the application, which can be exploited by an attacker to bypass mitigations such as ASLR...

Adobe Commerce 资源管理错误漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A resource management error vulnerability exists in Adobe Commerce prior to version 2.4.7, which stems from being affected by an uncontrolled resource...

The vulnerability of the Poppler library for rendering PDF files, related to uncontrolled recursion, allows attackers to trigger service interruptions.

The vulnerability of the Poppler library for rendering PDF files is related to uncontrolled recursion. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service interruptions...

The vulnerability of the `FoFiType1C::convertToType1` function in the Poppler PDF rendering library allows a attacker to cause a service failure.

The vulnerability of the FoFiType1C::convertToType1 function in the Poppler PDF rendering library is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

SoftEther VPN vpnserver ConnectionAccept() denial-of-service vulnerability

Talos Vulnerability Report TALOS-2023-1743 SoftEther VPN vpnserver ConnectionAccept denial-of-service vulnerability October 12, 2023 CVE Number CVE-2023-25774 SUMMARY A denial-of-service vulnerability exists in the vpnserver ConnectionAccept functionality of SoftEther VPN 5.02. A set of specially...

Adobe Bridge 资源管理错误漏洞

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from a Resource Management Error vulnerability that stems from the presence of uncontrolled resource consumption by the application, which can be exploited by an attacker to bypass mitigations such as ASLR...

Siemens SIMATIC CP Device Uncontrolled Resource Consumption Vulnerability

The SIMATIC CP 1623, CP 1626 and CP 1628 are PCI express cards for connection to industrial Ethernet. the SIMATIC CP 1604 and CP 1616 are PCI/PCI-104 cards for the connection of field devices to PROFINET industrial Ethernet. The Siemens SIMATIC CP devices are vulnerable to an uncontrolled resourc...

The vulnerability of the distributed version of the Git version control system for Windows, doskey.exe, allows a hacker to execute arbitrary code.

The vulnerability of the distributed version of the Git version control system for Windows, called doskey.exe, is related to an uncontrolled element in the search path. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of backup and data recovery software on computers and servers is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

CVE-2023-5463

A vulnerability was found in XINJE XDPPro up to 3.7.17a. It has been rated as critical. Affected by this issue is some unknown functionality in the library cfgmgr32.dll. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The exploit has been disclosed to t...

CVE-2023-5463

A vulnerability was found in XINJE XDPPro up to 3.7.17a. It has been rated as critical. Affected by this issue is some unknown functionality in the library cfgmgr32.dll. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The exploit has been disclosed to t...

Design/Logic Flaw

A vulnerability was found in XINJE XDPPro up to 3.7.17a. It has been rated as critical. Affected by this issue is some unknown functionality in the library cfgmgr32.dll. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The exploit has been disclosed to t...

CVE-2023-5463

Summary: CVE-2023-5463 affects XINJE XDPPro up to 3.7.17a. Affected component: library cfgmgr32.dll, issue: uncontrolled search path due to a code/config issue. Impact appears local with potential for high confidentiality/integrity/availability impact as per CVSS data; exploitation has been discl...

CVE-2023-5463 XINJE XDPPro cfgmgr32.dll uncontrolled search path

A vulnerability was found in XINJE XDPPro up to 3.7.17a. It has been rated as critical. Affected by this issue is some unknown functionality in the library cfgmgr32.dll. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The exploit has been disclosed to t...

CVE-2023-5463 XINJE XDPPro cfgmgr32.dll uncontrolled search path

A vulnerability was found in XINJE XDPPro up to 3.7.17a. It has been rated as critical. Affected by this issue is some unknown functionality in the library cfgmgr32.dll. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The exploit has been disclosed to t...

PT-2023-5788 · Acronis · Acronis Cyber Protect 16 +2

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent Windows versions before build 36497 Acronis Cyber Protect 16 Windows versions before build 37391 Acronis Agent Windows versions before build 36497 Description: The issue is related to a local privilege...

XINJE XDPPro Code Issue Vulnerability

XINJE XDPPro is a USB port connection programming software using PLC from China XINJE. A code issue vulnerability exists in XINJE XDPPro version 3.7.17a and prior versions. An attacker could use this vulnerability to cause an uncontrolled search path...

SUSE SLES15: libpoppler-cpp0 / libpoppler-devel / libpoppler-glib-devel / etc (SUSE-SU-2023:3983-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3983-1 advisory. - CVE-2020-23804: Fixed uncontrolled recursion in pdfinfo and pdftops bsc1215422. - CVE-2020-36024: Fixed NULL Pointe...