ChuanhuChatGPT Resource Management Error Vulnerability

ChuanhuChatGPT is a lightweight and easy-to-use Web GUI for ChatGPT/ChatGLM/LLaMA/StableLM/MOSS and many other LLMs. A resource management error vulnerability exists in ChuanhuChatGPT version 20240410, which originates from allowing any user to arbitrarily restart the server by sending a specific...

Citrix Systems Provisioning Security Vulnerability

Citrix Systems Provisioning is a software streaming technology push technology from Citrix Systems, Inc. It is used to deliver patches, updates, and other configuration information to multiple virtual desktop endpoints via a shared desktop image. A security vulnerability exists in versions prior ...

CVE-2024-6150: Incorrect Authorization

A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation through the parsing of X.509 certificates. An attacker can cause excessive CPU consumption and disrupt service by submitting a specially crafted malicious certificate. Remediation Upgrade...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation through the parsing of X.509 certificates. An attacker can cause excessive CPU consumption and disrupt service by submitting a specially crafted malicious certificate. Remediation Upgrade...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation through the parsing of X.509 certificates. An attacker can cause excessive CPU consumption and disrupt service by submitting a specially crafted malicious certificate. Remediation Upgrade...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation through the parsing of X.509 certificates. An attacker can cause excessive CPU consumption and disrupt service by submitting a specially crafted malicious certificate. Remediation Upgrade...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation through the parsing of X.509 certificates. An attacker can cause excessive CPU consumption and disrupt service by submitting a specially crafted malicious certificate. Remediation Upgrade...

CVE-2024-39869

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. Affected products allow to upload certificates. An authenticated attacker could upload a crafted certificates leading to a permanent denial-of-service situation. In order to recover from such an attack, the...

PT-2024-37416 · Citrix · Citrix Provisioning

Name of the Vulnerable Software and Affected Versions: Citrix Provisioning affected versions not specified Description: A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning. Recommendations: At the moment, there is no information about a newer version...

Microsoft Remote Desktop Client security vulnerabilities

Microsoft Windows Remote Desktop Licensing Service is a remote desktop licensing service that allows users to connect to remote computers interactively. A denial of service vulnerability exists in Microsoft Windows Remote Desktop Licensing Service, which can be exploited by an attacker to cause a...

PT-2024-24125 · Unknown · Freemodbus

Name of the Vulnerable Software and Affected Versions: freemodbus version 2018-09-12 Description: A Buffer Overflow issue allows a remote attacker to cause a denial of service via the LINUXTCP server component. Recommendations: For version 2018-09-12, as a temporary workaround, consider disabling...

SAP NetWeaver ABAP Uncontrolled Resource Consumption DoS

The vulnerability of SAP NetWeaver AS ABAP and SAP NetWeaver ABAP integration platforms is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

TIA Administrator Directory Permissions Disruption

The vulnerability of the TIA Administrator software-related to the creation of temporary download files in a directory with insecure permissions. Exploiting this vulnerability could allow an attacker to disrupt the update process...

FFmpeg de_stereo Heap Buffer Overflow DoS

The vulnerability of the destereo component afdialoguenhance.c in the FFmpeg multimedia library is related to buffer overflow in the “queue”. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure...

Cisco AppDynamics Network Visibility Agent DoS

The vulnerability of the Cisco AppDynamics Network Visibility Agent software for monitoring and analyzing network traffic exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to trigger a service failure through a specially crafted HTTP request...

Libyang yyparse() Code Execution

The vulnerability of the yyparse function in the syntax analyzer and modeling tool of the YANG Libyang language is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures remotely...

CPython zipfile DoS

The vulnerability of the zipfile module in the CPython programming language interpreter is related to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause a service failure...

Clang LLVM Code Execution

The vulnerability of Clang’s toolset for developing, optimizing, and compiling software involves an operation that occurs outside the buffer in memory when processing LR registers, due to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code o...

CVE-2024-38367 CoacoaPods trunk sessions verification step could be manipulated for owner session hijacking

trunk.cocoapods.org is the authentication server for the CoacoaPods dependency manager. Prior to commit d4fa66f49cedab449af9a56a21ab40697b9f7b97, the trunk sessions verification step could be manipulated for owner session hijacking Compromising a victim’s session will result in a full takeover of...