3497 matches found
CVE-2023-7192
A memory leak problem was found in ctnetlinkcreateconntrack in net/netfilter/nfconntracknetlink.c in the Linux Kernel. This issue may allow a local attacker with CAPNETADMIN privileges to cause a denial of service DoS attack due to a refcount overflow...
CVE-2023-47216
in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through occupy all resources...
CVE-2023-43511
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains IPPROTONONE as the next header...
PT-2024-13744 · Cesanta · Mjs
Name of the Vulnerable Software and Affected Versions: Cesanta mjs version 2.20.0 Description: An issue in Cesanta mjs allows a remote attacker to cause a denial of service via the mjs op json parse function in the msj.c file. Recommendations: For Cesanta mjs version 2.20.0, consider disabling th...
GitLab 12.9 < 14.3.6 / 14.4 < 14.4.4 / 14.5 < 14.5.2 (CVE-2021-39917)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. A...
Exploit for Out-of-bounds Write in Hutool
json.org CVE-2022-45688 false positive The project contains...
Exploit for Out-of-bounds Write in Hutool
json.org CVE-2022-45688 false positive The project contains...
squid: Fix of 2 CVEs
CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...
squid34: Fix of 2 CVEs
CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...
CVE-2023-4256
Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpeditdltcleanup function within plugins/dltplugins.c. This vulnerability can be exploited by supplying a specifically crafted file to the tcprewrite binary. This flaw enables a local attacker to initiate a...
CVE-2023-4256 Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c
Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpeditdltcleanup function within plugins/dltplugins.c. This vulnerability can be exploited by supplying a specifically crafted file to the tcprewrite binary. This flaw enables a local attacker to initiate a...
Improper Authentication
pulsar-websocket is vulnerable to Improper authentication. The vulnerability arises due to a lack of authentication a user makes request to the /pingpong endpoint. The attacker can potentially trigger a DoS attack or perform excessive data transfer as a result of this vulnerability...
Owners of LPs can be dosed when removing their position
Lines of code Vulnerability details Summary LP owners can reclaim liquidity to stop it from being extended for current liens but this doesn't stop from being used in new positions. Impact LP owners can signal their intention to pull liquidity by calling reclaimLiquidity. This function updates the...
Apache Doris Authorization Issues Vulnerability
Apache Doris is a modern MPP analytic database product of the U.S. Apache Apache Foundation. Can provide sub-second queries and efficient real-time data analysis. Apache Doris suffers from an authorization issue vulnerability that stems from api /api/snapshot and /api/getlogfile allowing...
CVE-2023-46266
An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack...
Design/Logic Flaw
An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack...
Design/Logic Flaw
An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack...
CVE-2023-46266
CVE-2023-46266 affects Ivanti Avalanche SecureFilter in Ivanti Avalanche; a remote attacker can send specially crafted requests to bypass authentication via Content-Type/URI handling, causing potential data leakage or DoS. Public sources describe it as a Content-Type authentication bypass vulnera...
CVE-2021-22962
CVE-2021-22962 concerns Ivanti Avalanche (Wavelink), where a specially crafted request could cause leakage of sensitive data or a resource-based DoS. The available documents describe the issue in general terms (data leakage/DoS) without detailing affected subcomponents, versions, or the exact roo...