822 matches found
Chunghwa Telecom tbm-client 安全漏洞
Chunghwa Telecom tbm-client is an application from Chunghwa Telecom China. A security vulnerability exists in Chunghwa Telecom tbm-client versions 0.3.15 through 0.3.20, which is caused by an intentional file manipulation and lack of CSRF protection, as well as an absolute path traversal...
[SECURITY] Fedora 41 Update: uv-0.5.5-2.fc41
An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...
Allocation of Resources Without Limits or Throttling
Overview matrix-synapse is an ecosystem for open federated Instant Messaging and VoIP. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the media download process. An attacker can induce the server to download and cache large amounts of...
CVE-2024-37302 Synapse denial of service through media disk space consumption
Synapse is an open-source Matrix homeserver. Synapse versions before 1.106 are vulnerable to a disk fill attack, where an unauthenticated adversary can induce Synapse to download and cache large amounts of remote media. The default rate limit strategy is insufficient to mitigate this. This can le...
"Failed to publish malware detection metadata to the catalog"
Challenge A backup job's task is completed with the warning: Failed to publish guest file system index to the catalog The warning above appears at the task level when a machine is selected in the Statistics window. An additional message will appear in the Statistics window at the job summary leve...
emacs: LaTeX preview is enabled by default for e-mail attachments
A flaw was found in Emacs. When Emacs is used as an email client, a preview of a crafted LaTeX document attached to an email can exhaust the disk space or the inodes allocated for the partition where the /tmp directory is located. This issue possibly results in a denial of service...
[SECURITY] Fedora 39 Update: glibc-2.38-19.fc39
The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...
KB5046399: Windows Recovery Environment update for Windows Server 2022: October 8, 2024
None None...
CVE-2024-8405
An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists within the web-print.exe process, which can incorrectly create files that don’t exist when a maliciously formed payload is provided. This can be us...
PaperCut NG/MF 安全漏洞
PaperCut NG/MF is a print management system from PaperCut, Inc. A security vulnerability exists in PaperCut NG/MF that originates from incorrectly creating non-existing files, which can flood disk space and cause a denial of service...
Huawei EulerOS: Security Advisory for git (EulerOS-SA-2024-2390)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-21658
discourse-calendar is a discourse plugin which adds the ability to create a dynamic calendar in the first post of a topic. The limit on region value length is too generous. This allows a malicious actor to cause a Discourse instance to use excessive bandwidth and disk space. This issue has been...
CVE-2024-21658
CVE-2024-21658 affects the discourse-calendar plugin for Discourse. The issue is an overly loose restriction on the region value length, which can cause a Discourse instance to consume excessive bandwidth and disk space. The vulnerability is fixed in the main branch; there are no public workaroun...
CVE-2024-21658 Insufficient control of region value length in discourse-calendar
discourse-calendar is a discourse plugin which adds the ability to create a dynamic calendar in the first post of a topic. The limit on region value length is too generous. This allows a malicious actor to cause a Discourse instance to use excessive bandwidth and disk space. This issue has been...
CVE-2024-42231 btrfs: zoned: fix calc_available_free_space() for zoned mode
In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix calcavailablefreespace for zoned mode calcavailablefreespace returns the total size of metadata or system block groups, which can be allocated from unallocated disk space. The logic is wrong on zoned mode in two...
CVE-2024-42231
CVE-2024-42231 affects the Linux kernel, specifically the btrfs filesystem in zoned mode. The issue is in calc_available_free_space(): the code incorrectly loops zone handling, treating each zone as a single chunk and not permitting partial allocations. This can yield a non-zone-aligned avail val...
Memory Dump File Not Being Generated on Provisioned Target
While attempting to configure a Windows 2008 target server created by Citrix Provisioning Services to generate a complete memory dump, it was observed that the memory dump file was not being created properly. Following CTX123642 – How to Recover Windows Kernel Level Dump Files from Provisioned...
CBL Mariner 2.0 Security Update: git (CVE-2024-32020)
The version of git installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-32020 advisory. - Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4,...
Citrix CDFControl Service How to Save Logs On A UNC Network Share
Sometimes it may be necessary to save trace data to a shared network folder, for example, crash/hang issues with non-persistent VDAs or due to local disk space constraints...