Rocket.Chat 资源管理错误漏洞

Rocket.Chat is an open source team chat software. A security vulnerability exists in Rocket.Chat, which stems from the fact that a maliciously crafted message in a specific character chain may cause the chat to enter a hot loop in one of the processes, consuming CPU and making the service...

CVE-2023-0856

Buffer overflow in IPP sides attribute process of Office / Small Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. :Satera LBP660C Series/LBP620C Series/MF740C...

多款Canon产品缓冲区错误漏洞

Canon imageCLASS MF644Cdw is a smart and efficient 3-in-1 color multifunctional printer from Canon Japan. A security vulnerability exists in Canon Laser Printer, Inkjet Printer, and Small Office Multifunctional Printers, which stems from the presence of a buffer overflow that allows an attacker t...

CVE-2023-28356

A vulnerability has been identified where a maliciously crafted message containing a specific chain of characters can cause the chat to enter a hot loop on one of the processes, consuming 120% CPU and rendering the service unresponsive...

PT-2023-7446 · Canon · Canon I-Sensys Lbp620C Series +15

Name of the Vulnerable Software and Affected Versions: Canon imageCLASS series versions prior to firmware Ver.11.04 Canon imageCLASS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series versions prior to firmware Ver.11.04 Canon i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C...

CVE-2023-28882

Trustwave ModSecurity 3.0.5 through 3.0.8 before 3.0.9 allows a denial of service worker crash and unresponsiveness because some inputs cause a segfault in the Transaction class for some configurations...

CVE-2023-28882

Trustwave ModSecurity 3.0.5 through 3.0.8 before 3.0.9 allows a denial of service worker crash and unresponsiveness because some inputs cause a segfault in the Transaction class for some configurations...

CVE-2023-28882

Trustwave ModSecurity 3.0.5 through 3.0.8 before 3.0.9 allows a denial of service worker crash and unresponsiveness because some inputs cause a segfault in the Transaction class for some configurations...

CVE-2023-28882

CVE-2023-28882 affects Trustwave ModSecurity 3.0.5–3.0.8; before 3.0.9, certain inputs can trigger a segfault in the Transaction class, causing worker crashes and server unresponsiveness (DoS) in affected configurations. The issue is mitigated by upgrading to ModSecurity 3.0.9 or applying the ven...

IoT garage door exploit allows for remote opening attack

A popular and reasonably cheap garage door controller is making waves in the news, and not in a good way. Ars Technica reports that the $80 devices created by Nexx are suffering from a number of security issues which could compromise the safety of your home. A Medium post by researcher Sam Sabeta...

CVE-2022-3684 SDM600 endpoint vulnerability

A vulnerability exists in a SDM600 endpoint. An attacker could exploit this vulnerability by running multiple parallel requests, the SDM600 web services become busy rendering the application unresponsive. This issue affects: All SDM600 versions prior to version 1.2 FP3 HF4 Build Nr. 1.2.23000.291...

CVE-2022-3684

The SDM600 endpoint vulnerability CVE-2022-3684 affects Hitachi Energy’s SDM600 data manager. Affected versions are all SDM600 releases prior to v1.2 FP3 HF4 (Build Nr. 1.2.23000.291). The issue arises from the SDM600 endpoint handling parallel requests, which can exhaust web services and render ...

K15840535: BIND vulnerability CVE-2019-6477

Security Advisory Description With pipelining enabled each incoming query on a TCP connection requires a similar resource allocation to a query received via UDP or via TCP without pipelining enabled. A client using a TCP-pipelined connection to a server could consume more resources than the serve...

CVE-2020-15853

CVE-2020-15853 concerns the supybot-fedora plugin for Limnoria, where the refresh command refreshes every user cache from FAS. The available connected sources describe the vulnerability as a performance/availability issue: executing the refresh “takes quite a while” and causes zodbot to stop resp...

CVE-2020-15853

supybot-fedora implements the command 'refresh', that refreshes the cache of all users from FAS. This takes quite a while to run, and zodbot stops responding to requests during this time...

supybot-fedora 安全漏洞

supybot-fedora is an open source Limnoria supybot plugin for general Fedora community operations from Fedora Infrastructure. A security vulnerability exists in supybot-fedora that stems from the implementation of a command refresh that refreshes all users' caches from FAS, which takes a long time...

Security Bulletin: IBM HTTP Server CPU utilization (CVE-2014-0963)

Summary IBM HTTP Server is affected by a problem related to the SSL implementation which, under very specific conditions, can cause CPU utilization to rapidly increase. Vulnerability Details CVE ID: CVE-2014-0963 DESCRIPTION: IBM HTTP Server is affected by a problem with the handling of certain S...

CVE-2022-2043 MOXA NPort 5110 Out-of-bounds Write

MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that can cause the device to become unresponsive...

Moxa NPort 5110 Out-of-Bounds Write Vulnerability

The Moxa NPort 5110 is a general purpose device server from MOXA. The Moxa NPort 5110 suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to cause the device to be unresponsive...

Code injection

IBM Sterling Partner Engagement Manager 6.1, 6.2, and Cloud 22.2 do not limit the length of a connection which could cause the server to become unresponsive. IBM X-Force ID: 230932...