Juniper Networks’ Junos OS Packet Forwarding Engine DoS

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS on SRX Series devices is related to the use of uncontrolled format strings. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2024-7567: Uncontrolled Resource Consumption

A denial-of-service vulnerability exists via the CIP/Modbus port in the Rockwell Automation Micro850/870 2080 -L50E/2080 -L70E. If exploited, the CIP/Modbus communication may be disrupted for short duration...

BIND DNS DoS

The vulnerability of the BIND DNS server is related to the exhaustion of resources on the resolver’s CPU. Exploiting this vulnerability allows a malicious actor to cause service failures by sending SIG0 signed requests...

GitLab Uncontrolled Resource Consumption DoS

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to an uncontrolled resource consumption caused by the use of regular expressions in handling invalid commits. Exploiting this vulnerability can allow a malicious actor to cause service...

gf_avc_change_vui() DoS

The vulnerability of the gfavcchangevui function on the GPAC multimedia platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2024-42396

Multiple unauthenticated Denial-of-Service DoS vulnerabilities exist in the AP Certificate Management daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point...

PT-2024-29925 · Unknown · Soft Ap Daemon

Name of the Vulnerable Software and Affected Versions: Soft AP daemon affected versions not specified Description: The issue concerns multiple unauthenticated Denial-of-Service DoS vulnerabilities in the Soft AP daemon, which is accessed via the PAPI protocol. Successful exploitation of these...

CVE-2021-3805

A flaw was found in the object-path nodejs library when the del function is called to validate object properties. An attacker can manipulate or alter the prototype of an object causing the modification of default properties on all objects. This could lead into a service disruption or a denial of...

CVE-2024-40722

The specific API in TCBServiSign Windows Version from CHANGING Information Technology does does not properly validate the length of server-side input. When a user visits a spoofed website, unauthenticated remote attackers can cause a stack-based buffer overflow in the TCBServiSign, temporarily...

CVE-2024-40723

CVE-2024-40723 concerns HWATAIServiSign Windows Version from CHANGING Information Technology. The vulnerability is a stack-based buffer overflow caused by improper validation of the length of server-side inputs in a specific API. It can be triggered when an unauthenticated remote user visits a sp...

BIND DNS Unlimited Resource Distribution DoS

The vulnerability of the BIND DNS server is related to the unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor to cause service failures when there are a large number of resource records for the same domain name...

PT-2024-29001 · Changing Information Technology · Tcbservisign

Name of the Vulnerable Software and Affected Versions: TCBServiSign Windows Version from CHANGING Information Technology affected versions not specified Description: The issue concerns a specific API in TCBServiSign that fails to properly validate the length of server-side input. This can be...

CVE-2024-40722: Stack-based Buffer Overflow

The specific API in TCBServiSign Windows Version from CHANGING Information Technology does does not properly validate the length of server-side input. When a user visits a spoofed website, unauthenticated remote attackers can cause a stack-based buffer overflow in the TCBServiSign, temporarily...

IBM i Deserialization DoS

The vulnerability of the IBM i operating system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

scanLib.bin Buffer Overflow Privilege Escalation

The vulnerability of the scanLib.bin library in the microprogramming software for AutomationDirect P3-550E controllers is related to insufficient data authenticity checks. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

D-Link DIR-3040 DoS

The vulnerability of the prog.cgi file in D-Link DIR-3040 wireless router software relates to the lack of proper memory management when processing HTTP cookie values. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Mplayer mp_getbits() Heap Buffer Overflow DoS

The vulnerability of the mpgetbits function in the Mplayer media player is related to writing beyond the memory boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

MPlayer gen_sh_video Heap Buffer Overflow DoS

The vulnerability of the genshvideo function in the Mplayer media player is related to writing beyond the memory boundaries. Exploiting this vulnerability could allow a hacker to cause a service failure...

Google Chrome Microsoft Edge Code Execution

The vulnerability of the Loader component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause service interruptions or execute arbitrary code...

Mplayer mp_unescape03 Heap Buffer Overflow DoS

The vulnerability of the mpunescape03 function in the Mplayer media player is related to writing beyond the memory boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...