PT-2022-6462 · Esr-20 · Esr-20

Name of the Vulnerable Software and Affected Versions: ESR-20 affected versions not specified Description: The issue is related to an uncontrolled resource consumption in the ESR-20 service router's firmware. Exploitation of this issue may allow an attacker to cause a denial of service...

PT-2022-6072 · Apache · Apache Kafka

Name of the Vulnerable Software and Affected Versions: Apache Kafka versions 2.8.0 through 3.2.2 Apache Kafka versions 2.8.0 through 3.1.1 Apache Kafka versions 2.8.0 through 3.0.1 Apache Kafka versions 2.8.0 through 2.8.1 Description: A security issue in Apache Kafka is related to uncontrolled...

CVE-2022-2333 Honeywell SoftMaster Uncontrolled Search Path Element

If an attacker manages to trick a valid user into loading a malicious DLL, the attacker may be able to achieve code execution in Honeywell SoftMaster version 4.51 application’s context and permissions...

CVE-2022-3222

Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV...

DEBIAN-CVE-2022-3222

Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV...

Information disclosure

Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV...

CVE-2022-3222

Removed by vendor...

CVE-2022-3222 Uncontrolled Recursion in gpac/gpac

Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV...

CVE-2022-3222

GPAC (gpac/gpac) vulnerability CVE-2022-3222 affects versions prior to 2.1.0-DEV due to an Uncontrolled Recursion issue. The CVSS data indicates high impact on availability (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). No exploitation details are provided in the sources. Remediation is to upgrade gpac p...

EulerOS 2.0 SP9 : vim (EulerOS-SA-2022-2336)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software,...

The vulnerability of Ruby programming language date parsing methods, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of Ruby programming language date parsing methods is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service failures...

EulerOS 2.0 SP9 : vim (EulerOS-SA-2022-2307)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software,...

Siemens SINEC INS

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Siemens Equipment: SINEC INS Vulnerabilities: Improper Input Validation, Integer Overflow or Wraparound, Uncontrolled Resource Consumption, Command Injection, Inadequate Encryption Strength, Missing...

Siemens RUGGEDCOM ROS

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

The vulnerability of the eepro100 i8255x hardware emulation software by QEMU allows a hacker to induce a service failure.

The vulnerability of the eepro100 i8255x hardware emulation software by QEMU is related to an uncontrolled recursion. Exploiting this vulnerability could allow a perpetrator to cause a system failure...

The vulnerability of NAS storage systems (Network Attached Storage) such as NAS326, NAS540, and NAS542 lies in the use of uncontrolled format strings, which allow attackers to execute arbitrary code.

The vulnerability of NAS storage systems Network Attached Storage such as NAS326, NAS540, and NAS542 is related to the use of uncontrolled format strings. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created UDP packet...

Amazon Linux 2022 : wireshark-cli, wireshark-devel (ALAS2022-2022-079)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-079 advisory. A NULL pointer exception flaw was found in Wireshark. A process failure on crafted or malformed input in the IPPUSB dissector can cause a denial of service via a packet injection or a crafted...

AVEVA Edge 2020 R2 SP1 and all prior versions

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: AVEVA Equipment: AVEVA Edge 2020 R2 SP1 and all prior versions Vulnerabilities: Insufficient UI Warning of Dangerous Operations, Uncontrolled Search Path Element, Deserialization of Untrusted Data, Improper Restriction of...

CVE-2022-22101

Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdragon Auto...

CVE-2022-22101

CVE-2022-22101 is a DoS in Snapdragon Auto's multimedia handling caused by uncontrolled resource consumption while parsing an incoming HAB message. The vulnerability affects the HAB message parser in Snapdragon Auto, leading to high availability impact (A: High) with local access required and low...