CVE-2023-23447

Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to influence the availability of the webserver by invocing several open file requests via the REST interface...

The vulnerability of the inode_init_owner() function in the fs/inode.c file of the XFS file system’s kernel of the Linux operating system allows a malicious actor to escalate their privileges and gain access to protected information. It can also cause service interruptions.

The vulnerability of the inodeinitowner function in the fs/inode.c file of the XFS file system in the Linux operating system is related to the incorrect setting of access group attributes during file creation. Exploiting this vulnerability can allow an attacker to enhance their privileges and gai...

The vulnerability of the io_cqring_event_overflow() function in the uring/msg_ring.c module of the Linux operating system allows a hacker to escalate their privileges or cause service failures.

The vulnerability of the iocqringeventoverflow function in the uring/msgring.c module of the Linux operating system’s kernel is related to improper resource locking. Exploiting this vulnerability can allow an attacker to gain elevated privileges or cause service interruptions...

The vulnerability of the table_clear() function in the drivers/md/dm-ioctl.c file of the Linux kernel’s device-mapper driver allows a hacker to cause a service failure.

The vulnerability of the tableclear function in the drivers/md/dm-ioctl.c file of the Linux kernel’s device-mapper driver is related to recursive locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

SICK FTMg 资源管理错误漏洞

SICK FTMg is a flow sensor from SICK, Germany. A security vulnerability exists in the SICK FTMg AIR FLOW SENSOR that stems from the presence of uncontrolled resource consumption, which could allow a remote attacker to compromise the availability of a web server by invoking a Slowloris-style attac...

Libraw 缓冲区错误漏洞

Libraw is Libraw's C++ library for processing RAW CRW/CR2, NEF, RAF, DNG, andothers format images, supporting various operating systems. LibRaw suffers from a buffer overflow vulnerability that originates from a boundary error in the function raw2imageexint when handling untrusted input. A remote...

The vulnerability of the function dvb_frontend_test_event() in the driver drivers/media/dvb-core/dvb_frontend.c of the Linux operating system’s DVB kernel, which allows a hacker to cause a service failure.

The vulnerability of the function dvbfrontendtestevent in the driver drivers/media/dvb-core/dvbfrontend.c of the Linux operating system’s DVB kernel is related to incorrect use of synchronization mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the XFS file system in Linux operating systems allows a perpetrator to cause service failures or gain increased privileges.

The vulnerability of the XFS file system in Linux operating systems is related to insufficient control over metadata during the mounting of XFS file system images in the xlogrecoverbufcommitpass2 function within the fs/xfs/xfsbufitemrecover.c module. Exploiting this vulnerability can allow an...

Denial Of Service (DoS)

screen is vulnerable to Denial of Service DoS. The vulnerability allows local users to send a privileged SIGHUP signal to any PID resulting in a disruption of the target process...

CVE-2023-20878

VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt the system...

CVE-2023-20878

VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt the system...

Deserialization of untrusted data

VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt the system...

Vulnerability of the Server component: The MySQL Server database management system’s DDL functions allow attackers to gain privileged access or cause service interruptions.

Vulnerability of the MySQL Server component: The MySQL Server database management system has vulnerabilities due to insufficient validation of input data. Exploitation of these vulnerabilities can allow attackers to gain privileged access or cause service interruptions from a remote location...

The vulnerability of the OBVAM Trn Journal Domain sub-component of the Oracle Banking Virtual Account Management component of the banking analytics system’s simulation model, Oracle Financial Services Applications, allows a perpetrator to cause service failures or gain access to read, modify, add, or delete data.

The vulnerability of the OBVAM Trn Journal Domain component of the Oracle Banking Virtual Account Management banking analytics system’s simulation model relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures or gain access...

The vulnerability of the Oracle Database Recovery Manager component of the Oracle Database Server database management system allows a perpetrator to trigger a service failure.

The vulnerability of the Oracle Database Recovery Manager component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the OBVAM Internal Tfr Domain component of the Oracle Banking Virtual Account Management component in the banking analytics system’s simulation model of Oracle Financial Services Applications allows a perpetrator to cause service failures or gain access to read, modify, add, or delete data.

The vulnerability of the OBVAM Internal Tfr Domain component of the Oracle Banking Virtual Account Management component in the banking analytics system’s simulation model of Oracle Financial Services Applications is related to insufficient validation of input data. Exploiting this vulnerability...

Vulnerability of the MySQL Server component: This component is part of the Database Management System, allowing attackers to cause service failures.

The vulnerability of the MySQL Server component of the database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

VulnCheck KEV: CVE-2016-3427

Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions JMX. This vulnerability can be exploited through sandboxed Java Web Start applications and...

CVE-2023-20878

VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt the system...

The vulnerability of the OBVAM Trn Journal Domain sub-component of the Oracle Banking Virtual Account Management component of the banking analytics system’s simulation model, Oracle Financial Services Applications, allows a perpetrator to cause service failures or gain access to read, modify, add, or delete data.

The vulnerability of the OBVAM Trn Journal Domain component of the Oracle Banking Virtual Account Management banking analytics system’s simulation model relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures or gain access...