Lucene search
K

3459 matches found

Github Security Blog
Github Security Blog
added 2024/02/02 10:23 p.m.11 views

Nervos CKB node panics when processing a block which parent timestamp is too new

Impact Adversary can initiate DOS attack by broadcasting two consecutive blocks with timestamps in the future. Patches Please upgrade to v0.34.1...

7AI score
Exploits0References4Affected Software1
OSV
OSV
added 2024/02/02 10:23 p.m.6 views

GHSA-HJQQ-29PW-96WJ Nervos CKB node panics when processing a block which parent timestamp is too new

Impact Adversary can initiate DOS attack by broadcasting two consecutive blocks with timestamps in the future. Patches Please upgrade to v0.34.1...

7AI score
Exploits0References3
NVD
NVD
added 2024/02/02 4:15 p.m.23 views

CVE-2023-41274

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to launch a denial-of-service DoS attack via a network. We have already fixed the vulnerability in the following...

5.5CVSS5.5AI score0.00437EPSS
Exploits0References1
Prion
Prion
added 2024/02/02 4:15 p.m.20 views

Null pointer dereference

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to launch a denial-of-service DoS attack via a network. We have already fixed the vulnerability in the following...

3.3CVSS6.9AI score0.00437EPSS
Exploits0References1Affected Software3
Prion
Prion
added 2024/02/02 4:15 p.m.15 views

Denial of service

An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to launch a denial-of-service DoS attack via a network. We have already fixed the vulnerability in the...

3.3CVSS6.9AI score0.00437EPSS
Exploits0References1Affected Software3
Vulnrichment
Vulnrichment
added 2024/02/02 4:5 p.m.13 views

CVE-2023-45028 QTS, QuTS hero, QuTScloud

An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to launch a denial-of-service DoS attack via a network. We have already fixed the vulnerability in the...

5.5CVSS6.5AI score0.00437EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/02/02 4:3 p.m.16 views

CVE-2023-41274 QTS, QuTS hero, QuTScloud

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to launch a denial-of-service DoS attack via a network. We have already fixed the vulnerability in the following...

5.5CVSS6.5AI score0.00437EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2024/01/30 1:30 p.m.53 views

Moderate: Red Hat Security Advisory: python3 security update

An update for python3 is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.5CVSS6.7AI score0.02507EPSS
Exploits3References4
Tenable Nessus
Tenable Nessus
added 2024/01/30 12:0 a.m.44 views

RHEL 8 : python3 (RHSA-2024:0586)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0586 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

7.5CVSS7.2AI score0.02507EPSS
Exploits3References9
Github Security Blog
Github Security Blog
added 2024/01/26 8:12 p.m.20 views

OpenFGA denial of service

Overview OpenFGA is vulnerable to a DoS attack. In some scenarios that depend on the model and tuples used, a call to ListObjects may not release memory properly. So when a sufficiently high number of those calls are executed, the OpenFGA server can create an "out of memory" error and terminate...

6.5CVSS6.9AI score0.00734EPSS
Exploits0References5Affected Software1
CNVD
CNVD
added 2024/01/26 12:0 a.m.50 views

Linux kernel code issue vulnerability (CNVD-2024-14763)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a code issue vulnerability that stems from the fact that in the nftbyteordereval function, the code iteratively loops and writes dst0, dst1, dst2, etc., and...

6.6CVSS7AI score0.00239EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/01/25 12:0 a.m.38 views

RHEL 8 : libxml2 (RHSA-2024:0413)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0413 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: integer overflo...

7.8CVSS7.5AI score0.2421EPSS
Exploits4References13
Tenable Nessus
Tenable Nessus
added 2024/01/25 12:0 a.m.48 views

RHEL 8 : python3 (RHSA-2024:0430)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0430 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

9.8CVSS7.6AI score0.27095EPSS
Exploits7References15
Veracode
Veracode
added 2024/01/24 8:40 a.m.35 views

Expired Pointer Dereference

squid is vulnerable to Expired Pointer Dereference. The vulnerability is due to the usage of a pointer after dereference. An attacker can exploit this vulnerability to mount a Denial Of Service DOS attack against Cache Manager error responses when generating error pages for Client Manager reports...

6.5CVSS6.7AI score0.6005EPSS
Exploits1References9Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/01/23 12:0 a.m.22 views

Axis Communications M1033-W IP Camera Denial of Service (CVE-2018-9158)

An issue was discovered on AXIS M1033-W IP camera Firmware version 5.40.5.1 devices. They don't employ a suitable mechanism to prevent a DoS attack, which leads to a response time delay. An attacker can use the hping3 tool to perform an IPv4 flood attack, and the services are interrupted from...

7.5CVSS7AI score0.01279EPSS
Exploits1References2
CNVD
CNVD
added 2024/01/19 12:0 a.m.27 views

Linux Kernel Out-of-Bounds Access Vulnerability (CNVD-2024-14764)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. An out-of-bounds access vulnerability exists in the Linux Kernel. The affected version has an out-of-bounds access vulnerability in the receiveencryptedstandard in the smb clie...

7.4CVSS6.9AI score0.01999EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/01/18 3:11 p.m.14 views

CVE-2023-40052 Progress Application Server (PAS) for OpenEdge Denial of Service

This issue affects Progress Application Server PAS for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0 . An attacker who can produce a malformed web request may cause the crash of a PASOE agent potentially disrupting the thread activities...

7.5CVSS7.7AI score0.0057EPSS
Exploits0References2
NVD
NVD
added 2024/01/17 8:15 a.m.7 views

CVE-2023-51742

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Add Downstream Frequency parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at...

7.5CVSS6.6AI score0.00581EPSS
Exploits0References1
Prion
Prion
added 2024/01/17 8:15 a.m.9 views

Input validation

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Add Downstream Frequency parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at...

5CVSS7.2AI score0.00581EPSS
Exploits0References1Affected Software1
Packet Storm
Packet Storm
added 2024/01/16 12:0 a.m.378 views

MailCarrier 2.51 Denial Of Service

!/usr/bin/perl use IO::Socket::INET Exploit Title: MailCarrier 2.51 - Denial of Service DoS Discovery by: Fernando Mengali Discovery Date: 16 january 2024 Tested Version: MailCarrier 2.51 Tested on: Window XP Professional - Service Pack 2 and 3 - English Vulnerability Type: Denial of Service DoS ...

7.4AI score
Exploits0
Rows per page
Query Builder