CVE-2024-43011

An arbitrary file deletion vulnerability exists in the admin/del.php file at line 62 in ZZCMS 2023 and earlier. Due to insufficient validation and sanitization of user input for file paths, an attacker can exploit this vulnerability by using directory traversal techniques to delete arbitrary file...

The vulnerability of the command-line interface of Juniper Networks’ Junos OS and Junos OS Evolved allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the command-line interface of Juniper Networks’ Junos OS and Junos OS Evolved is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code by loading a specially created certificate file...

The vulnerability of the integrated service module of Dell iDRAC in remote access controllers iDRAC, related to the execution of operations outside the buffer in memory, allows a intruder to execute arbitrary code or cause a service failure.

The vulnerability of the Dell iDRAC Service Module integrated service module controllers in remote access controllers involves an operation that goes beyond the buffer in memory. Exploiting this vulnerability could allow a malicious individual to execute arbitrary code or cause service failures...

Nginx 1.5.13 - 1.27.0 Buffer Overread Vulnerability

Nginx is prone to a buffer overread in the ngxhttpmp4module. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nginx:nginx";...

K000138477: BIG-IP MPTCP vulnerability CVE-2024-41164

Security Advisory Description When a TCP profile with Multipath TCP enabled MPTCP is configured on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel TMM to terminate. CVE-2024-41164 Impact Traffic is disrupted...

The vulnerability of the SuiteLink server for AVEVA Historian, InTouch, Application Server, Communication Drivers Pack, and Batch Management products allows a hacker to cause service interruptions.

The vulnerability of the SuiteLink server for AVEVA Historian, InTouch, Application Server, Communication Drivers Pack, and Batch Management products is related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotel...

Rockwell Automation Micro850/870

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.9 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : Micro850/870 Vulnerability : Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability may cause CIP/Modbus...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS on SRX Series devices allows a hacker to cause a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS on SRX Series devices is related to the use of uncontrolled format strings. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to an uncontrolled resource consumption caused by the use of regular expressions in handling invalid commits. Exploiting this vulnerability can allow a malicious actor to cause service...

The vulnerability of the BIND DNS server, related to the distribution of resources without restrictions and regulation, allows a hacker to cause a service failure.

The vulnerability of the BIND DNS server is related to the exhaustion of resources on the resolver’s CPU. Exploiting this vulnerability allows a malicious actor to cause service failures by sending SIG0 signed requests...

The vulnerability of the gf_avc_change_vui() function on the GPAC multimedia platform allows a perpetrator to trigger a service failure.

The vulnerability of the gfavcchangevui function on the GPAC multimedia platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2024-42396

Multiple unauthenticated Denial-of-Service DoS vulnerabilities exist in the AP Certificate Management daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point...

PT-2024-29925 · Unknown · Soft Ap Daemon

Name of the Vulnerable Software and Affected Versions: Soft AP daemon affected versions not specified Description: The issue concerns multiple unauthenticated Denial-of-Service DoS vulnerabilities in the Soft AP daemon, which is accessed via the PAPI protocol. Successful exploitation of these...

CVE-2021-3805

A flaw was found in the object-path nodejs library when the del function is called to validate object properties. An attacker can manipulate or alter the prototype of an object causing the modification of default properties on all objects. This could lead into a service disruption or a denial of...

CVE-2024-40722

The specific API in TCBServiSign Windows Version from CHANGING Information Technology does does not properly validate the length of server-side input. When a user visits a spoofed website, unauthenticated remote attackers can cause a stack-based buffer overflow in the TCBServiSign, temporarily...

CVE-2024-40723

CVE-2024-40723 concerns HWATAIServiSign Windows Version from CHANGING Information Technology. The vulnerability is a stack-based buffer overflow caused by improper validation of the length of server-side inputs in a specific API. It can be triggered when an unauthenticated remote user visits a sp...

PT-2024-29001 · Changing Information Technology · Tcbservisign

Name of the Vulnerable Software and Affected Versions: TCBServiSign Windows Version from CHANGING Information Technology affected versions not specified Description: The issue concerns a specific API in TCBServiSign that fails to properly validate the length of server-side input. This can be...

The vulnerability of the BIND DNS server, related to the unlimited distribution of resources, allows attackers to cause service failures.

The vulnerability of the BIND DNS server is related to the unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor to cause service failures when there are a large number of resource records for the same domain name...

The vulnerability of the IBM i operating system, related to deficiencies in the deserialization mechanism, allows attackers to trigger a service failure.

The vulnerability of the IBM i operating system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the gen_sh_video() function in the MPlayer media player, related to writing beyond the memory boundaries, allows a hacker to cause a service failure.

The vulnerability of the genshvideo function in the Mplayer media player is related to writing beyond the memory boundaries. Exploiting this vulnerability could allow a hacker to cause a service failure...