js-yaml: js-yaml: Denial of Service via crafted YAML ordered-map document

A flaw was found in js-yaml, a JavaScript YAML YAML Ain't Markup Language parser. An attacker could exploit this by providing a specially crafted YAML ordered-map document. This could lead to excessive CPU consumption, resulting in a denial of service DoS for applications processing the malicious...

TencentOS Server 4: edk2 (TSSA-2025:0729)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0729 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

EUVD-2021-29259

Malicious code in bioql PyPI...

EUVD-2025-23029

Malicious code in bioql PyPI...

EUVD-2023-28850

Malicious code in bioql PyPI...

EUVD-2024-16224

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2017-7994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference an...

CVE-2025-24844 communication_dsoftbus has a missing release of memory vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory...

Security update 5.0.5 for Multi-Linux Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: Security issues fixed: CVE-2024-38822: Fixed Minion token validation bsc1244561 CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport bsc1244564 CVE-2024-38824: Fixed directory traversal...

IBM DB2 Denial of Service Vulnerability (CNVD-2023-64878)

IBM DB2 Denial of Service Vulnerability CNVD-2023-64879...

CVE-2023-21525

Remote Procedure Call Runtime Denial of Service Vulnerability...

CVE-2021-44694

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device...

CAJViewer suffers from a denial of service vulnerability (CNVD-2021-41719)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. A denial of service vulnerability exists in CAJViewer. An attacker can exploit this vulnerability to cause the program to crash...

CVE-2020-36066

GJSON 1.6.5 allows attackers to cause a denial of service remote via crafted JSON...

CVE-2017-18220

The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service magick/blob.c CloseBlob use-after-free or possibly have unspecified other impact via a crafted file, a related issue to CVE-2017-11403...

CVE-2019-11474

coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service floating-point exception and application crash by crafting an XWD image file, a different vulnerability than CVE-2019-11008 and CVE-2019-11009...

Cisco IOS and IOS XE ISDN Interface Denial of Service Vulnerability

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An input validation vulnerability exists in the ISDN functionality in Cisco IOS and IOS XE, which stems from the program's failure to properly handle values in the Q.931 message element. A remote...

CVE-2018-19389

FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service Break instruction exception and application crash via BMP data because of a ConvertToPDFx86!ConnectedPDF::ConnectedPDFSDK::FCPSendEmailNotification issue...

CVE-2018-16303

PDF-XChange Editor through 7.0.326.1 allows remote attackers to cause a denial of service resource consumption via a crafted x:xmpmeta structure, a related issue to CVE-2003-1564...

Digium Asterisk Open Source and Certified Asterisk Remote Denial of Service Vulnerabilities

Digium Asterisk Open Source and Certified Asterisk are both open source telephone exchange PBX system software from Digium, Inc. in the United States. The software supports voicemail, multi-party voice conferencing, and interactive voice response IVR. A remote denial of service vulnerability exis...