17807 matches found
CVE-2022-22556
Dell PowerStore contains an Uncontrolled Resource Consumption Vulnerability in PowerStore User Interface. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the Denial of Service...
CVE-2022-1982
Uncontrolled resource consumption in Mattermost version 6.6.0 and earlier allows an authenticated attacker to crash the server via a crafted SVG attachment on a post...
Code injection
Uncontrolled resource consumption in Mattermost version 6.6.0 and earlier allows an authenticated attacker to crash the server via a crafted SVG attachment on a post...
CVE-2022-1982 A crafted SVG attachment can crash a Mattermost server
Uncontrolled resource consumption in Mattermost version 6.6.0 and earlier allows an authenticated attacker to crash the server via a crafted SVG attachment on a post...
CVE-2022-1982 A crafted SVG attachment can crash a Mattermost server
Uncontrolled resource consumption in Mattermost version 6.6.0 and earlier allows an authenticated attacker to crash the server via a crafted SVG attachment on a post...
CVE-2022-1982
CVE-2022-1982 affects Mattermost up to version 6.6.0. The issue is an Uncontrolled resource consumption triggered by processing a crafted SVG attachment in a post, allowing an authenticated attacker to crash the server. The provided documents do not specify a patch version or remediation steps.
CVE-2022-1982 A crafted SVG attachment can crash a Mattermost server
Uncontrolled resource consumption in Mattermost version 6.6.0 and earlier allows an authenticated attacker to crash the server via a crafted SVG attachment on a post...
UpdateReward Modifier is brickable
Lines of code Vulnerability details Impact Detailed description of the impact of this finding. The private variable RewardTokens is an unbounded list of addresses that the modifier updateReward loops over and updates the state variable rewardTokenInfo. The gas consumption can become increasingly...
The vulnerability of the SCADA system “SKADA-NEV”, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.
The vulnerability of the SCADA system “SKADA-NEV” is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
PT-2022-7007 · Mariadb +5 · Mariadb +6
Name of the Vulnerable Software and Affected Versions: MariaDB affected versions not specified Description: A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service. The issue is related to uncontrolled resourc...
Citrix ADC and Citrix Gateway 12.1-64.16 DoS (CTX457048)
The remote Citrix ADC or Citrix Gateway device is version 12.1-64.16. It may, therefore, be affected by a denial of service DoS vulnerability. If the device is configured as a VPN Gateway or AAA virtual server, an unauthenticated remote attacker can cause uncontrolled resource consumption on the...
Citrix ADC and Citrix Gateway 12.1.x < 12.1-64.17 / 13.0.x < 13.0-85.19 / 13.1.x < 13.1-21.50 DoS (CTX457048)
The remote Citrix ADC or Citrix Gateway device is version 12.1.x prior to 12.1-64.17, 13.0.x prior to 13.0-85.19 or 13.1.x prior to 13.1.21.50. It may, therefore, be affected by a denial of service DoS vulnerability. If DTLS is enabled and either 'HDX Insight for EDT traffic' or 'SmartControl' ha...
CVE-2022-1797 Rockwell Automation Logix Controllers Uncontrolled Resource Consumption
A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownloa...
CVE-2022-1797 Rockwell Automation Logix Controllers Uncontrolled Resource Consumption
A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownloa...
SUSE-SU-2022:1889-1 Security update for gimp
This update for gimp fixes the following issues: - CVE-2022-30067: Fixed uncontrolled memory consumption via crafted XCF file bsc1199653...
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Xerces
Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of Apache Xerces. Vulnerability Details CVEID: CVE-2022-23437 DESCRIPTION: Apache Xerces2 Java XML Parser is vulnerable to a denial of service, caused by an infinite loop in the XML parser. By persuading a victi...
EulerOS 2.0 SP3 : binutils (EulerOS-SA-2022-1706)
According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An out-of-bounds flaw was found in binutils stabs functionality. The attack needs to be initiated locally where an attacker could convince a...
Denial of service in `tf.ragged.constant` due to lack of validation
Impact The implementation of tf.ragged.constant does not fully validate the input arguments. This results in a denial of service by consuming all available memory: python import tensorflow as tf tf.ragged.constantpylist=,raggedrank=8968073515812833920 Patches We have patched the issue in GitHub...
Apache Solr vulnerable to XML Bomb
Solr versions prior to 5.0.0 are vulnerable to an XML resource consumption attack a.k.a. Lol Bomb via it?s update handler.?By leveraging XML DOCTYPE and ENTITY type elements, the attacker can create a pattern that will expand when the server parses the XML causing OOMs...
GHSA-JQ2W-W7V2-69Q5 Apache Solr vulnerable to XML Bomb
Solr versions prior to 5.0.0 are vulnerable to an XML resource consumption attack a.k.a. Lol Bomb via it?s update handler.?By leveraging XML DOCTYPE and ENTITY type elements, the attacker can create a pattern that will expand when the server parses the XML causing OOMs...