9368 matches found
AZL-53807 CVE-2024-53259 affecting package coredns for versions less than 1.11.1-16
quic-go is an implementation of the QUIC protocol in Go. An off-path attacker can inject an ICMP Packet Too Large packet. Since affected quic-go versions used IPPMTUDISCDO, the kernel would then return a "message too large" error on sendmsg, i.e. when quic-go attempts to send a packet that exceed...
DEBIAN-CVE-2024-53259
quic-go is an implementation of the QUIC protocol in Go. An off-path attacker can inject an ICMP Packet Too Large packet. Since affected quic-go versions used IPPMTUDISCDO, the kernel would then return a "message too large" error on sendmsg, i.e. when quic-go attempts to send a packet that exceed...
UBUNTU-CVE-2024-53259
quic-go is an implementation of the QUIC protocol in Go. An off-path attacker can inject an ICMP Packet Too Large packet. Since affected quic-go versions used IPPMTUDISCDO, the kernel would then return a "message too large" error on sendmsg, i.e. when quic-go attempts to send a packet that exceed...
BigDL Transmission Information DoS
The vulnerability of BigDL software is related to the transmission of critical information in open text. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
f2fs DoS
The vulnerability of the f2fs component of the Linux operating system’s kernel is related to damage to the f2fsinitpagearraycache function. Exploiting this vulnerability can allow an attacker to access confidential information...
GitLab Algorithmic Complexity DoS
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to algorithmic complexity. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service interruptions...
Linux RDMA/mlx5 DoS
The vulnerability of the isofs component in Linux operating systems is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel IB IPO DoS
The vulnerability of the IB/IpoIB components of the Linux operating system’s kernel is related to the assignment of the NULL pointer in the function ipoibintfinit. Exploiting this vulnerability can allow an attacker to cause a service failure...
jfs Kernel DoS
The vulnerability of the jfs component in the Linux operating system’s kernel is related to read-out errors beyond the boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...
Exploit for CVE-2024-49369
CVE-2024-49369 Overview This vulnerability leverages the I...
Dell Wyse Management Suite Authentication Bypass DoS File Deletion
The vulnerability of the hybrid cloud solution for managing thin clients in the Dell Wyse Management Suite is related to the absence of authentication procedures. Exploiting this vulnerability could allow a malicious actor to cause service interruptions and delete arbitrary files...
Linux TTY Driver Heap Buffer Overflow DoS
The vulnerability of the gsmcleanupmux function in the TTY driver drivers/tty/ngsm.c of the Linux operating system is related to the state of the race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
isofs Component DoS
The vulnerability of the isofs component in the Linux operating system’s kernel is related to reading data beyond the allowed range in memory for the isofsread inode function. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2024-11698
A flaw in handling fullscreen transitions may have inadvertently caused the application to become stuck in fullscreen mode when a modal dialog was opened during the transition. This issue left users unable to exit fullscreen mode using standard actions like pressing "Esc" or accessing right-click...
CVE-2024-11698
A flaw in handling fullscreen transitions can cause the application to become stuck in fullscreen mode when a modal dialog is opened during the transition. This issue specifically affects macOS and results in a disrupted browsing experience where users cannot exit fullscreen via standard actions ...
CopyCoder 7-Zip DoS
The vulnerability of the CopyCoder component in the 7-Zip compressor is related to insufficient memory allocation for operations. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the complexity of the mmapregion function, which leads to control flow disruption and the creation of multip...
Exploit for Code Injection in Rejetto Http_File_Server
CVE-2024-23692-poc CVE-2024-23692 is a template injection vu...
Exploit for Incorrect Authorization in Apache Ofbiz
cveCVE-2024-38856-poc CVE-2024-38856 is a serious vulnerabil...
Microsoft, Meta, and DOJ Disrupt Global Cybercrime and Fraudulent Networks
Meta Platforms, Microsoft, and the U.S. Department of Justice DoJ have announced independent actions to tackle cybercrime and disrupt services that enable scams, fraud, and phishing attacks. To that end, Microsoft's Digital Crimes Unit DCU said it seized 240 fraudulent websites associated with an...