1023 matches found
PT-2023-2610 · NetGear · Netgear Srx5308
Name of the Vulnerable Software and Affected Versions: Netgear SRX5308 versions up to 4.3.5-3 Description: A vulnerability has been found in the Web Management Interface of the Netgear SRX5308, allowing for cross-site scripting attacks. The issue arises from insufficient input validation, enablin...
Fastly VDP: Cache purge requests are not authenticated
Vulnerability description not provided...
CVE-2023-28644 Reference fetch can saturate the server bandwidth for 10 seconds in nextcloud server
Nextcloud server is an open source home cloud implementation. In releases of the 25.0.x branch before 25.0.3 an inefficient fetch operation may impact server performances and/or can lead to a denial of service. This issue has been addressed and it is recommended that the Nextcloud Server is...
CVE-2023-28644 Reference fetch can saturate the server bandwidth for 10 seconds in nextcloud server
Nextcloud server is an open source home cloud implementation. In releases of the 25.0.x branch before 25.0.3 an inefficient fetch operation may impact server performances and/or can lead to a denial of service. This issue has been addressed and it is recommended that the Nextcloud Server is...
Reference fetch can saturate the server bandwidth for 10 seconds
None...
K41515225: BIG-IP SSL connection security exposure
Security Advisory Description On a virtual server configured with both Client SSL and Server SSL profiles, when receiving a TCP FIN midstream in an SSL connection, the BIG-IP system immediately proxies the FIN to the remote host on the peer side. If the remote host on the peer side acknowledges t...
K25165813: BIG-IP SSL connection Alert Timeout security exposure
Security Advisory Description The mitigation for K41515225: BIG-IP SSL connection security exposure may not work in all conditions. If after applying the workaround in K41515225: BIG-IP SSL connection security exposure, setting the Alert Timeout to its minimum value of 1 second, you continue to...
K76328112: BIG-IP TMM vulnerability CVE-2019-6683
Security Advisory Description BIG-IP virtual servers with Loose Initiation enabled on a FastL4 profile may be subject to excessive flow usage under undisclosed conditions. CVE-2019-6683 Impact This vulnerability is present only on BIG-IP Virtual Edition VE systems with limited bandwidth licenses...
SUSE CVE-2005-3675
The Transmission Control Protocol TCP allows remote attackers to cause a denial of service bandwidth consumption by sending ACK messages for packets that have not yet been received optimistic ACKs, which can cause the sender to increase its transmission rate until it fills available bandwidth...
SUSE CVE-2015-2927
node 0.3.2 and URONode before 1.0.5r3 allows remote attackers to cause a denial of service bandwidth consumption...
SUSE CVE-2017-5207
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument...
SUSE CVE-2020-11047
In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bounds read in autodetectrecvbandwidthmeasureresults. A malicious server can extract up to 8 bytes of client memory with a manipulated message by providing a short input and reading the measurement result data. This has been patched in 2.0...
SUSE CVE-2021-32917
An issue was discovered in Prosody before 0.11.9. The proxy65 component allows open access by default, even if neither of the users has an XMPP account on the local server, allowing unrestricted use of the server's bandwidth...
Hijacking Your Bandwidth: How Proxyware Apps Open You Up to Risk
In this investigation, we analyzed several prominent "passive income" applications and found out that there may be security risks upon participating in these programs...
Stack overflow
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...
CVE-2022-40989: Buffer Copy without Checking Size of Input
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...
GSD-2023-1000804 wifi: ath11k: fix firmware assert during bandwidth change for peer sta
wifi: ath11k: fix firmware assert during bandwidth change for peer sta This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...
Nextcloud: Reference fetch can saturate the server bandwidth for 10 seconds
A vulnerability existed in Nextcloud Talk that allowed an attacker to saturate the server bandwidth for up to 10 seconds by posting messages containing links to high-bandwidth resources. This could result in temporary disk space filling and severe impact on server performance or denial of service...
