7851 matches found
Improper Input Validation
Overview Affected versions of this package are vulnerable to Improper Input Validation through the parsing of X.509 certificates. An attacker can cause excessive CPU consumption and disrupt service by submitting a specially crafted malicious certificate. Remediation Upgrade...
Improper Input Validation
Overview Affected versions of this package are vulnerable to Improper Input Validation through the parsing of X.509 certificates. An attacker can cause excessive CPU consumption and disrupt service by submitting a specially crafted malicious certificate. Remediation Upgrade...
Improper Input Validation
Overview Affected versions of this package are vulnerable to Improper Input Validation through the parsing of X.509 certificates. An attacker can cause excessive CPU consumption and disrupt service by submitting a specially crafted malicious certificate. Remediation Upgrade...
CVE-2024-39869
A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. Affected products allow to upload certificates. An authenticated attacker could upload a crafted certificates leading to a permanent denial-of-service situation. In order to recover from such an attack, the...
PT-2024-37416 · Citrix · Citrix Provisioning
Name of the Vulnerable Software and Affected Versions: Citrix Provisioning affected versions not specified Description: A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning. Recommendations: At the moment, there is no information about a newer version...
Microsoft Remote Desktop Client 安全漏洞
Microsoft Windows Remote Desktop Licensing Service is a remote desktop licensing service that allows users to connect to remote computers interactively. A denial of service vulnerability exists in Microsoft Windows Remote Desktop Licensing Service, which can be exploited by an attacker to cause a...
The vulnerability of SAP NetWeaver AS ABAP and SAP NetWeaver ABAP integration platforms, related to uncontrolled resource consumption, allows attackers to trigger service failures.
The vulnerability of SAP NetWeaver AS ABAP and SAP NetWeaver ABAP integration platforms is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
PT-2024-24125 · Unknown · Freemodbus
Name of the Vulnerable Software and Affected Versions: freemodbus version 2018-09-12 Description: A Buffer Overflow issue allows a remote attacker to cause a denial of service via the LINUXTCP server component. Recommendations: For version 2018-09-12, as a temporary workaround, consider disabling...
The vulnerability of the TIA Administrator software-related to creating temporary download files in a directory with insecure permissions allows a hacker to disrupt the update process.
The vulnerability of the TIA Administrator software-related to the creation of temporary download files in a directory with insecure permissions. Exploiting this vulnerability could allow an attacker to disrupt the update process...
The vulnerability of the de_stereo component (af_dialoguenhance.c) in the FFmpeg multimedia library allows a attacker to execute arbitrary code or cause a service failure.
The vulnerability of the destereo component afdialoguenhance.c in the FFmpeg multimedia library is related to buffer overflow in the “queue”. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure...
The vulnerability of the Cisco AppDynamics Network Visibility Agent’s software for monitoring and analyzing network traffic stems from insufficient validation of input data. This allows attackers to trigger service interruptions.
The vulnerability of the Cisco AppDynamics Network Visibility Agent software for monitoring and analyzing network traffic exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to trigger a service failure through a specially crafted HTTP request...
The vulnerability of the yyparse() function in the syntax analyzer and tools for the YANG modeling language Libyang allows a perpetrator to execute arbitrary code or cause service failures.
The vulnerability of the yyparse function in the syntax analyzer and modeling tool of the YANG Libyang language is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures remotely...
The vulnerability of the zipfile module in the CPython interpreter allows a hacker to cause a service failure.
The vulnerability of the zipfile module in the CPython programming language interpreter is related to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of Clang’s tooling interface for developing, optimizing, and compiling software using the LLVM framework allows attackers to execute arbitrary code or cause service interruptions.
The vulnerability of Clang’s toolset for developing, optimizing, and compiling software involves an operation that occurs outside the buffer in memory when processing LR registers, due to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code o...
CVE-2024-38367 CoacoaPods trunk sessions verification step could be manipulated for owner session hijacking
trunk.cocoapods.org is the authentication server for the CoacoaPods dependency manager. Prior to commit d4fa66f49cedab449af9a56a21ab40697b9f7b97, the trunk sessions verification step could be manipulated for owner session hijacking Compromising a victim’s session will result in a full takeover of...
BIT-HUBBLE-UI-2023-27595
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In version 1.13.0, when Cilium is started, there is a short period when Cilium eBPF programs are not attached to the host. During this period, the host does not implement any of Cilium's featureset. This ca...
Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce
CosmicSting: critical unauthenticated XXE vulnerability in Ado...
The vulnerability of the Collection Preview component of the edu-sharing e-learning platform management system allows a perpetrator to execute arbitrary code or trigger a service failure.
The vulnerability of the Collection Preview component in the edu-sharing e-learning platform management system involves unlimited downloading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code using a specially created HTML file, or to...
PT-2024-5209 · Cocoapods · Cocoapods
Name of the Vulnerable Software and Affected Versions: CocoaPods affected versions not specified Description: The issue is related to the authentication server for the CocoaPods dependency manager, where the trunk sessions verification step could be manipulated, allowing for owner session...
The vulnerability of the microprogrammed software of the industrial cellular LTE modem OnCell G3470A-LTE, related to buffer overflow in the stack, allows a hacker to trigger a service failure.
The vulnerability of the microprogrammed software in the OnCell G3470A-LTE industrial cellular LTE modem is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...