6914 matches found
Uncontrolled Resource Consumption
c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erroneously interprets the 0 length as a graceful...
Siemens SCALANCE W1750D Uncontrolled Resource Consumption (CVE-2002-20001)
The Diffie-Hellman Key Agreement Protocol allows remote attackers from the client side to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular- exponentiation calculations, aka a DHEater attack. The client needs very little CPU resources and...
Uncontrolled Recursion in HTTP2ToRawGRPCServerCodec
Affected gRPC Swift servers are vulnerable to uncontrolled recursion and stack consumption when parsing certain payloads. This may lead to a denial of service...
CVE-2022-36326
An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the service being stopped and restarted was discovered in Western Digital My Cloud Home, My Cloud Home Duo, SanDisk ibi a...
Code injection
An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the service being stopped and restarted was discovered in Western Digital My Cloud Home, My Cloud Home Duo, SanDisk ibi a...
Google Android Denial of Service Vulnerability (CNVD-2023-41885)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability that originates from uncontrolled resource consumption in the pushDynamicShortcut function of the ShortcutPackage.java file, which can be exploited by an attacke...
(Pwn2Own) Lexmark MC3224i lbtraceapp Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Lexmark MC3224i printers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...
CVE-2023-23447
Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to influence the availability of the webserver by invocing several open file requests via the REST interface...
CVE-2023-23447
Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to influence the availability of the webserver by invocing several open file requests via the REST interface...
Code injection
Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an remote attacker to influence the availability of the webserver by invocing a Slowloris style attack via HTTP requests...
Open redirect
Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to influence the availability of the webserver by invocing several open file requests via the REST interface...
CVE-2023-31409
CVE-2023-31409 affects SICK FTMg AIR FLOW SENSOR (partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526). The vulnerability enables a remote attacker to exhaust resources and impact availability of the webserver by invoking a Slowloris-style attack over HTTP. Root cause detail...
Google Android 资源管理错误漏洞
Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android, which stems from uncontrolled resource consumption in several functions of the SnoozeHelper.java file, and can be exploited by an attacker to elevate...
CVE-2023-31197
Uncontrolled search path in the IntelR Trace Analyzer and Collector before version 2020 update 3 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-31197
Uncontrolled search path in the IntelR Trace Analyzer and Collector before version 2020 update 3 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-31197
Uncontrolled search path in the IntelR Trace Analyzer and Collector before version 2020 update 3 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-31197
The CVE-2023-31197 issue is an Uncontrolled search path vulnerability in Intel\u00ae Trace Analyzer and Collector prior to version 2020 update 3 that could allow an authenticated local user to escalate privileges. Affected product: Intel\u00ae Trace Analyzer and Collector before 2020 update 3. Ro...
Intel Trace Analyzer And Collector 代码问题漏洞
Intel Trace Analyzer And Collector is a trace analyzer and collector from Intel USA. It is used to analyze Mpi behavior in parallel applications. A security vulnerability exists in Intel Trace Analyzer And Collector prior to version 2020 that stems from the presence of an uncontrolled search path...
CVE-2023-27298
Uncontrolled search path in the WULT software maintained by IntelR before version 1.0.0 commit id 592300b may allow an unauthenticated user to potentially enable escalation of privilege via network access...