Hitachi Ops Center Common Services DoS

The vulnerability of the software for managing, monitoring, configuring, and automating IT infrastructure of the Hitachi Ops Center Common Services is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Google Chrome Microsoft Edge Script Execution DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially...

Zeek ICSNPP-Ethercat Buffer Overflow DoS

The vulnerability of the Zeek plugin for industrial system management protocols ICSNPP-Ethercat relates to the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or gain unauthorized access to protected information...

Squid Proxy HttpStateData Heap Buffer Overflow DoS

The vulnerability of the HttpStateData function in the Chunked decoder of the Squid proxy server is related to buffer overflows in the stack due to uncontrolled recursion during HTTP message processing. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

uC/OS ICMPv6 DoS

The vulnerability of the ICMP and ICMPv6 analysis functions of the ISN stack generator used in uC/OS and uC/TCP-IP is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause service failures...

CVE-2024-27100

Discourse is an open source platform for community discussion. In affected versions the endpoints for suspending users, silencing users and exporting CSV files weren't enforcing limits on the sizes of the parameters that they accept. This could lead to excessive resource consumption which could...

ArubaOS CLI Privilege Escalation

The vulnerability of the CLI interface of ArubaOS operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access and delete any files they desire, as well as cause service failures...

Google Chrome Microsoft Edge Script Execution DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to operations that go beyond buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure through a specially crafted...

Delta Electronics DIAEnergie

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION : Exploitable remotely Vendor : Delta Electronics Equipment : DIAEnergie Vulnerabilities : Improper Authorization, SQL Injection, Path Traversal, Cross-site Scripting 2. RISK EVALUATION Successful exploitation of these vulnerabilities could...

Linux kernel kfd_svm.c Unauthorized Access

The vulnerability of the kfdsvm.c component in the Linux operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

Updated screen packages fix security vulnerability

The updated package fixes a security vulnerability: socket.c in GNU Screen through 4.9.0, when installed setuid or setgid the default on platforms such as Arch Linux and FreeBSD, allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the...

Ubuntu: Security Advisory (USN-6691-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

lib/listdebug Heap Buffer Overflow DoS

The vulnerability of the kmemcachedestroy function in the lib/listdebug.c library of the Linux operating system’s kernel is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

USN-6691-1 ovn vulnerability

It was discovered that OVN incorrectly enabled OVS Bidirectional Forwarding Detection on logical ports. A remote attacker could possibly use this issue to disrupt traffic...

USN-6691-1: OVN vulnerability

It was discovered that OVN incorrectly enabled OVS Bidirectional Forwarding Detection on logical ports. A remote attacker could possibly use this issue to disrupt traffic...

PT-2024-5632 · Dell · Dell Alienware Command Center

Name of the Vulnerable Software and Affected Versions: Dell Alienware Command Center versions 5.5.52.0 and prior Description: The issue is related to improper access control, which can lead to a Denial of Service on the local system. Exploitation of this issue may allow an attacker to cause a...

PT-2024-18171 · Faronics · Faronics Deep Freeze Server Standard

Name of the Vulnerable Software and Affected Versions: Faronics Deep Freeze Server Standard versions 8.30.020.4627 and earlier Description: A search path or unquoted item vulnerability affects the DFServ.exe file, allowing an attacker with local user privileges to replace the legitimate DFServ.ex...

Tenda AC9 fromSetLPMacBind Code Execution

The vulnerability of the fromSetLPMacBind function in the Tenda AC9 router’s microprogramming system relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures...

VFIO PCI Kernel DoS

The vulnerability of the VFIO PCI kernel driver for the Linux operating system is related to errors in the calculation of pointers in the functions hisiaccvfresumewrite and hisiaccvfsaveread in the drivers/vfio/pci/hisilicon/hisiaccvfiopci.c module. Exploiting this vulnerability can allow a remot...

drivers/phy/ti/phy-omap-usb2.c USB DoS

The vulnerabilities of functions mapusbsetvbus and omapusbstartsrp in the driver drivers/phy/ti/phy-omap-usb2.c of the TI USB device driver for the Linux operating system are related to the assignment of a null pointer. Exploiting these vulnerabilities could allow a remote attacker to cause a...