9393 matches found
Yokogawa FA-M3 FTP DoS
The vulnerability of the FTP server software of the Yokogawa FA-M3 programmable logic controller is related to the exhaustion of the connection limits. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Tomcat: WebSocket DoS with incomplete closing handshake
A denial of service DoS vulnerability present in the Apache Tomcat package arises from an incomplete cleanup process. Specifically, WebSocket clients can perpetuate WebSocket connections without proper termination, thereby causing a sustained drain on system resources. This vulnerability...
Juniper Networks RPD DoS
The vulnerability of the Demon Routing Protocols Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient handling of exceptional states during packet forwarding based on the Class-of-Service CoS-based forwarding mechanism. Exploiting this...
Traefik Reverse Proxy DoS
The vulnerability of the Reverse Proxy server Containous Traefik is related to insufficient handling of exceptional states during the processing of the Content-Length header. This occurs due to an incorrect setting of the read request duration parameter. Exploiting this vulnerability allows a...
Cisco IP Phones DoS
The vulnerability of the web-based management interface for Cisco IP Phones 6800, 7800, 8800, and 8875 lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure by sending specially crafted...
PT-2024-25924 · O Ran · O-Ran Near-Rt Ric
Name of the Vulnerable Software and Affected Versions: O-RAN Near-RT RIC I-Release affected versions not specified Description: An issue was discovered in appmgr, allowing an attacker to register an unintended RMR message type during xApp registration, which could disrupt other service components...
CVE-2024-34473
A security vulnerability exists in appmgr within O-RAN Near-RT RIC I-Release (affected versions not specified). Due to improper input validation (CWE-20), an attacker can register an unintended RMR message type during xApp registration. This action can result in the disruption of other service co...
Tenda FH1206 fromAddressNat() Function Code Execution
The vulnerability of the fromAddressNat function /goform/addressNat in the Tenda FH1206 router microprogramming system is related to the operation that goes beyond the buffer boundaries in memory when processing the parameter entrys. Exploiting this vulnerability could allow a remote attacker to...
PT-2024-25506 · Parrot · Parrot Anafi Usa
Name of the Vulnerable Software and Affected Versions: Parrot ANAFI USA firmware version 1.10.4 Description: The issue concerns a lack of validation for the MAV MISSION TYPE in the Parrot ANAFI USA firmware, specifically for values 0, 1, 2, and 255. This allows an attacker to disrupt the connecti...
Mitel 6800 SIP and 6900 SIP security vulnerabilities
Mitel 6800 SIP and Mitel 6900 SIP are both products of Mitel Canada.Mitel 6800 SIP is a 6800 SIP series IP phone.Mitel 6900 SIP is a 6900 SIP series IP phone. A security vulnerability exists in the Mitel 6800 SIP and 6900 SIP that stems from improper authentication controls, successful exploitati...
CVE-2024-33514
Unauthenticated Denial-of-Service DoS vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected service...
CVE-2024-33515
Unauthenticated Denial-of-Service DoS vulnerabilities exist in the AP Management service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected service...
PT-2024-25289 · Aruba · Arubaos
Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: An unauthenticated Denial of Service DoS issue exists in the Auth service accessed via the PAPI protocol provided by ArubaOS. Successful exploitation of this issue results in the ability to...
Aruba Networks ArubaOS security vulnerabilities
Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks including Mobility Controllers and Mobility Access Switches from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks ArubaOS that originates from the presence of an unauthenticated Denial of Servi...
Aruba Networks ArubaOS security vulnerabilities
Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks including Mobility Controllers and Mobility Access Switches from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks ArubaOS that originates from the presence of an unauthenticated Denial of Servi...
Firefox Use-After-Free
The vulnerability in the Firefox web browser relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
Firefox Use-After-Free
The vulnerability in the Firefox web browser relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
Firefox Buffer Overflow DoS
The vulnerability in the Firefox web browser is related to writing beyond the buffer limit. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...
GitLab Path Traversal
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to disclose protected information or cause...
QEMU esp_do_nodma Heap Buffer Overflow DoS
The vulnerability of the espdonodma function in the hw/scsi/esp.c file of the QEMU hardware emulation software is related to a buffer overflow condition caused by the TI command. This occurs when the expected transfer length without DMA is less than the available data in the FIFO. Exploiting this...