9378 matches found
configobj Regular Expression DoS
The vulnerability of the configobj program for reading and writing INI files is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
CGI Microprogramming DoS
The vulnerability of CGI microprogramming software for network devices such as Zyxel ATP, USG FLEX, and USG FLEX 50W/USG20W-VPN lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to cause service interruptions by sending a...
Zyxel ATP USG FLEX USG FLEX 50(W)/USG20(W)-VPN
The vulnerability of the microprogrammed software in Zyxel ATP, USG FLEX, and USG FLEX 50W/USG20W-VPN devices is related to errors in pointer assignment. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted packets...
Denial Of Service (DoS)
path-to-regexp is vulnerable to Denial Of Service DoS. The vulnerability is due to the generation of inefficient regular expressions when path strings contain two parameters within a single segment separated by a non-period character, allowing an attacker to cause high CPU usage and potentially...
Asterisk IP-telephony SIP Request Emergency Termination
The vulnerability of Asterisk IP-telephony systems and Certified Asterisk is related to errors in sending SIP requests with URIs. Exploiting this vulnerability can allow a malicious actor to cause service failures and terminate operations remotely...
TOTOLINK AC1200 CGI Handler Code Execution
The vulnerability of the CGI handler formWlEncrypt in the microprogramming software of TOTOLINK AC1200 routers is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service interruptions remotely...
Linux kernel DRM/VRR DoS
The vulnerability of the drm/vrr component in the Linux operating system’s kernel relates to an attempt by the driver to call the drm core set prop function without proper authorization. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
Linux kernel Net Packet Information Disclosure
The vulnerability of the net/packet component in the Linux operating system’s kernel is related to the presence of access beyond the boundaries of the slab memory area in packetrecvmsg. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...
cpio Path Traversal DoS
The vulnerability of the binary archiver cpio is related to a regression issue when the --no-absolute-filenames parameter is used. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
London’s city transport hit by cybersecurity incident [updated]
Transport for London TfL, the citys transport authority, is fighting through an ongoing cyberattack. TfL runs three separate units that arrange transports on Londons surface, underground, and Crossrail transportation systems. It serves some 8 million inhabitants of the London metropolitan area. I...
Linux mISDN dsp_pipeline_build Heap Buffer Overflow DoS
The vulnerability of the dsppipelinebuild function in the mISDN component of the Linux operating system is related to the invocation of the dup variable, which contains NULL. Exploiting this vulnerability could allow an attacker to cause a service failure...
NGINX Plus/OSS Module Heap Overflow DoS
The vulnerability of the ngxhttpv4module in NGINX Plus and NGINX OSS web servers is related to reading data from outside of the memory boundaries. Exploiting this vulnerability can allow attackers to cause service failures...
Monero: A peer can remotely fill the pending block queue to an extremely high size, with blocks that will never leave the queue.
The pending block queue in the Monero cryptocurrency protocol could be remotely filled to an extremely high size, up to approximately 54 GB, with blocks that would never leave the queue. This was possible due to lax rules in the synchronization code that allowed the queue size limit to be bypasse...
PT-2024-41490 · Ао "Нппкт" · Осон Основа Оnyx
Уязвимость функции run timers модуля net/bluetooth/mgmt.c ядра операционных систем Linux связана с использованием памяти после ее освобождения при обработке объекта struct hci dev. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и...
Windows 11 VDA seamless app launches with fullscreen black border behind logon window
The customer uses windows 11 VDAs to provide access to a published application which has desktop operating system requirement. The initial launch of the published application showed the seamless application launch with a full screen black border behind the logon window. This is disruptive to user...
openldap: null pointer dereference in ber_memalloc_x function
A vulnerability was found in OpenLDAP, in bermemallocx function, leading to a null pointer dereference. This flaw can result in reduced system memory and cause LDAP authentication failures. The impact is primarily a disruption in authentication processes, which may hinder user access or service...
CVE-2024-20279
Cisco APIC (Application Policy Infrastructure Controller) is affected by an access-control vulnerability in the restricted security domain implementation used for multi-tenancy. An authenticated remote attacker with a restricted-domain user could read, modify, or delete child policies under defau...
CVE-2024-20279: Improper Access Control
A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to modify the behavior of default system policies, such as quality of service QoS policies, on an affected system. This...
NASM ieee_write_file Buffer Overflow DoS
The vulnerability of the ieeewritefile function in the /output/outieee.c component of the Netwide Assembler NASM compiler is related to reading beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...
UBUNTU-CVE-2024-45236
An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP a signed object containing an empty signedAttributes field. Fort accesses the set's elements without sanitizing it first. Because Fort is an RPKI Relying...