6912 matches found
PT-2023-9229 · Unknown · Vipre Advanced Security
Name of the Vulnerable Software and Affected Versions: VIPRE Advanced Security affected versions not specified Description: The issue is related to the Patch Management Agent component of VIPRE Advanced Security, which is affected by an uncontrolled search path element vulnerability. This...
CVE-2023-22400
CVE-2023-22400 affects Juniper Networks Junos OS Evolved (evo-pfemand) and can cause an FPC crash/DoS due to a GUID leak triggered by specific SNMP GETs or CLI commands. Affected families include all versions before 20.4R3-S3-EVO; 21.1-EVO (21.1R1-EVO and later); all versions before 21.2R3-S4-EVO...
CVE-2023-22400 Junos OS Evolved: A specific SNMP GET operation and a specific CLI commands cause resources to leak and eventually the evo-pfemand process will crash
An Uncontrolled Resource Consumption vulnerability in the PFE management daemon evo-pfemand of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause an FPC crash leading to a Denial of Service DoS. When a specific SNMP GET operation or a specific CLI command...
PT-2023-16110 · Bits And Blooms · Bloom
Name of the Vulnerable Software and Affected Versions: bits-and-blooms/bloom versions prior to 3.3.1 Description: The issue is related to an Uncontrolled Search Path Element in the GitHub repository bits-and-blooms/bloom. Recommendations: For versions prior to 3.3.1, update to version 3.3.1 or...
CVE-2023-0247 Uncontrolled Search Path Element in bits-and-blooms/bloom
Uncontrolled Search Path Element in GitHub repository bits-and-blooms/bloom prior to 3.3.1...
CVE-2023-22396
CVE-2023-22396 describes an Uncontrolled Resource Consumption vulnerability in the TCP processing on the Routing Engine of Juniper Networks Junos OS. An unauthenticated network-based attacker can send crafted TCP packets destined to a device interface (IPv4/IPv6), causing an MBUF leak and ultimat...
CVE-2023-0247
CVE-2023-0247 affects the Go library bits-and-blooms/bloom, with versions prior to 3.3.1 vulnerable to an Uncontrolled Search Path Element. The issue originates from how the application resolves search paths, enabling potential path hijacking. Affected product/version: bits-and-blooms/bloom befor...
CVE-2023-0247 Uncontrolled Search Path Element in bits-and-blooms/bloom
Uncontrolled Search Path Element in GitHub repository bits-and-blooms/bloom prior to 3.3.1...
Uncontrolled Resource Consumption
github.com/flynn/noise is vulnerable to uncontrolled resource consumption. The weakened cryptographic security after encrypting 2^64 messages causes multiple messages to be encrypted with the same key and nonce resulting in denial of service conditions. Additionally the Decrypt function increment...
Intel(R) oneAPI DPC++/C++ Compiler 代码问题漏洞
IntelR oneAPI DPC++/ c++ Compiler is a compiler from Intel Corporation USA. A code issue vulnerability exists in IntelR oneAPI DPC++/ c++ Compiler versions prior to 2022.2.1, which stems from an uncontrolled search path that allows authenticated users to elevate privileges via local access...
PT-2023-1062 · Juniper Networks · Junos Evolved
Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 20.4R3-S3-EVO Juniper Networks Junos OS Evolved version 21.1R1-EVO and later versions Juniper Networks Junos OS Evolved versions prior to 21.2R3-S4-EVO Juniper Networks Junos OS Evolved...
Siemens SIPROTEC 5 Devices Uncontrolled Resource Consumption (CVE-2022-45044)
Affected devices do not properly restrict secure client-initiated renegotiations within the SSL and TLS protocols. This could allow an attacker to create a denial of service condition on the ports 443/tcp and 4443/tcp for the duration of the attack. This plugin only works with Tenable.ot. Please...
Trellix Agent < 5.7.8 Privilege Escalation (SB10391)
The version of Trellix Agent, formerly McAfee Agent or McAfee Policy Orchestrator ePO Agent, installed on the remote host is prior to 5.7.8. It is, therefore, affected by an privilege escalation vulnerability due to an uncontrolled search path. An attacker with admin access to the affected host c...
CVE-2020-36562 Uncontrolled Resource Consumption in github.com/shiyanhui/dht
Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of service vector...
CVE-2019-25072 Uncontrolled resource consumption in github.com/tendermint/tendermint
Due to support of Gzip compression in request bodies, as well as a lack of limiting response body sizes, a malicious server can cause a client to consume a significant amount of system resources, which may be used as a denial of service vector...
EulerOS Virtualization 2.10.1 : vim (EulerOS-SA-2022-2897)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing...
EulerOS Virtualization 2.10.0 : vim (EulerOS-SA-2022-2879)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing...
CVE-2022-37311
OX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large location request parameter to the redirect servlet...