8239 matches found
Vulnerability of the McAfee Security protection software: An antivirus VPN for the Android operating system, which allows a perpetrator to trigger a service failure
The vulnerability of the McAfee Security protection software: The Android operating system-based antivirus and VPN solution has a flaw related to incorrect handling of exceptional states. Exploiting this vulnerability can allow an attacker to cause service interruptions by using incorrect...
CVE-2024-40634
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. This report details a security vulnerability in Argo CD, where an unauthenticated attacker can send a specially crafted large JSON payload to the /api/webhook endpoint, causing excessive memory allocation that leads to...
Vulnerability of the Server component: Connection Handling of the Oracle MySQL Server database management system, which allows attackers to cause service interruptions.
The vulnerability of the Server component: Connection Handling in the Oracle MySQL Server database management system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
The vulnerability of the InnoDB component of the MySQL Database Server, which allows a hacker to cause a service failure
The vulnerability of the InnoDB component of the MySQL Database Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
CrowdStrike Update Causes Havoc, Grounding Flights and Disrupting Businesses
The Biggest IT Outage in Recent Memory? A faulty CrowdStrike update triggered a global tech meltdown, grounding flights,…...
The vulnerabilities of the content scanning and message filtering functions of the Cisco Secure Email Gateway allow attackers to enhance their privileges.
The vulnerability of content scanning and message filtering functions of the Cisco Secure Email Gateway relates to incorrect restrictions on the path name to the directory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges, modify the device configuration,...
The vulnerability of the Suricata detection and intrusion prevention mechanism, which allows a intruder to trigger a service failure.
The vulnerability of the httpmemcap parameter in the Suricata intrusion detection and prevention tool is related to pointer assignment errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Navigating Insider Risks: Are your Employees Enabling External Threats?
Attacks on your network are often meticulously planned operations launched by sophisticated threats. Sometimes your technical fortifications provide a formidable challenge, and the attack requires assistance from the inside to succeed. For example, in 2022, the FBI issued a warning1 that SIM swap...
The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS Evolved operating system allows a hacker to trigger a service failure.
The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS Evolved operating system is related to the assignment of a zero pointer. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
Denial Of Service (DoS)
org.wildfly: wildfly-domain-http is vulnerable to Denial Of Service DoS. The vulnerability is caused by a lack of sockets limits within the management interface, which can result in Denial Of Service DoS due to hitting the nofile limit. An attacker can exploit this by overwhelming the system with...
The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions using a specially created OpenAPI fil...
The vulnerability of Huawei TC7001-10, WS7200-10, and WS7206-10 Wi-Fi routers lies in the lack of a mechanism to lock sessions. This allows attackers to gain unauthorized access to protected information or cause service failures.
The vulnerability of Huawei TC7001-10, WS7200-10, and WS7206-10 Wi-Fi routers’ microprogramming software is related to the lack of a session fixation mechanism, due to the absence of reverse address checking and TCP connection tracing. Exploiting this vulnerability can allow an unauthorized actor...
The vulnerability of the gif2rgb converter (util/gif2rgb.c) in the GIFLIB library allows a hacker to induce a service failure.
The vulnerability of the gif2rgb converter util/gif2rgb.c in the GIFLIB library is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure by using specially created GIF files...
CVE-2024-6036
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the /queue/join? endpoint with "fnindex":66. This unrestricted server restart capability can severely disrupt service availability, cause data loss or...
PYSEC-2024-317
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory C: dir. This can lead to uncontrolled resource consumption, resulting in resource exhaustion, denial of service DoS, server...
CVE-2024-6036
CVE-2024-6036 affects gaizhenbiao/chuanhuchatgpt v20240410. A vulnerability allows any user to restart the server by sending a request to the /queue/join? endpoint with "fn_index":66, leading to service disruption and potential data integrity issues. Several connected sources corroborate the issu...
CVE-2024-6036 Denial of Service in gaizhenbiao/chuanhuchatgpt
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the /queue/join? endpoint with "fnindex":66. This unrestricted server restart capability can severely disrupt service availability, cause data loss or...
