CVE-2024-11144 Race Condition with LightFTP

The server lacks thread safety and can be crashed by anomalous data sent by an anonymous user from a remote network. The crash causes the FTP service to become unavailable, affecting all users and processes that rely on it for file transfers. If the crash occurs during file upload or download, it...

Sentron Powercenter BLE DoS

The vulnerability of the BLE Bluetooth Low Energy component of the microprogramming software for monitoring and controlling energy systems in Sentron Powercenter 1000/1100 is related to synchronization errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Adobe InDesign Buffer Overflow DoS

The vulnerability of Adobe InDesign’s computer layout automation tool is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service interruptions...

Veeam Backup Enterprise Manager Privilege Escalation

The vulnerability of the Veeam Backup Enterprise Manager management service for cloud, virtual, and physical system protection solutions lies in the absence of an authentication process. Exploiting this vulnerability could allow attackers to increase their privileges and cause service interruptio...

Germany Disrupts BADBOX Malware on 30,000 Devices Using Sinkhole Action

Germany's Federal Office of Information Security BSI has announced that it has disrupted a malware operation called BADBOX that came preloaded on at least 30,000 internet-connected devices sold across the country. In a statement published earlier this week, authorities said they severed the...

CVE-2024-47984

Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability. A User with Remote access could potentially exploit this vulnerability, leading to the disruption of most functionalities of the RPA persistent after reboot, resulting in need of technical support intervention ...

CVE-2024-47984

Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability. A User with Remote access could potentially exploit this vulnerability, leading to the disruption of most functionalities of the RPA persistent after reboot, resulting in need of technical support intervention ...

Dell RecoverPoint for Virtual Machines 安全漏洞

Dell RecoverPoint for Virtual Machines is a simple, efficient operations and disaster recovery solution from Dell, Inc. For virtualized applications in VMware environments. A security vulnerability exists in Dell RecoverPoint for Virtual Machines version 6.0 SP1 and version 6.0 SP1 P1, which stem...

Ollama System Out-of-Memory DoS

The vulnerability of the Ollama system for running and managing large language models is related to memory-bound reading. Exploiting this vulnerability could allow a malicious actor to trigger a service disruption segmentation attack through the use of a specially created file...

mm/kmemleak Kernel DoS

The vulnerability of mm/kmemleak in Linux kernel components is related to the lack of memory release after the effective lifespan of components. Exploiting this vulnerability can allow an attacker to cause a service failure...

RDMA/siw DoS

The vulnerability of RDMA/siw components of the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of these components. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux ca8210 Memory Leak DoS

The vulnerability of component ca8210 in the Linux operating system is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...

IBM DB2 Memory Allocation DoS

The vulnerability of the IBM DB2 database management system, including IBM DB2 Connect and the IBM DB2 Connect server, is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially crafted query...

Linux kernel net/mlx5e DoS

The vulnerability of the net/mlx5e components in the Linux operating system’s kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

mpt3sas DoS

The vulnerability of the mpt3sas component in the Linux operating system is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel hns3 DoS

The vulnerability of the hns3 component in the Linux operating system’s kernel is related to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-50928

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to change the wakeup interval of end devices in controller memory, disrupting the device's communications with the controller...

CVE-2024-50928

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to change the wakeup interval of end devices in controller memory, disrupting the device's communications with the controller...

CVE-2024-50928

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow an attacker to modify the wakeup interval of end devices within the controller's memory. This vulnerability, caused by insecure privilege management, results in the disruption of communications between the end d...

PT-2024-34457 · Silicon · Z-Wave Series 700/800

Name of the Vulnerable Software and Affected Versions: Silicon Labs SiLabs Z-Wave Series 700 and 800 version 7.21.1 Description: The issue is related to insecure permissions in the affected software, allowing attackers to disrupt communications between the controller and the device by repeatedly...