Tenable Nessus Network Monitor 5.10.0 DoS Vulnerability (TNS-2020-04)

Tenable Nessus Network Monitor is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Python DoS Vulnerability (Oct 2022) - Mac OS X

Python is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

Microsoft Windows win32kfull Null Pointer Dereference Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

ibc (>=0.11.0, <=0.19.0), ibc-relayer (>=0.11.0, <=0.19.0) +6 more potentially affected by CVE-2022-23507 via tendermint-light-client-verifier (>=0.23.5, <=0.27.0)

tendermint-light-client-verifier CARGO version =0.23.5, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.15.0, =0.23.5, =0.23.0, =0.27.0 Source cves: CVE-2022-23507 Source advisory: OSV:GHSA-XQQC-C5GW-C5R5...

transfer is used on address payable

Lines of code Vulnerability details Proof of Concept The codebase makes heavy use of the deprecated transfer function of address payable. Its will inevitably make the transaction fail when: 1. The receiver smart contract does not implement a payable function. 2. The receiver smart contract does...

CVE-2022-23486

CVE-2022-23486 affects the Rust implementation of libp2p (libp2p-rust) in versions before 0.45.1. An attacker node can induce a victim to allocate a large number of small memory chunks, exhausting the victim process memory and potentially causing OOM/killing, enabling a denial-of-service, especia...

Race condition

Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.0.0 to 4.0.3 allows a remote authenticated attacker to consume huge storage space, which may result in a denial-of-service DoS condition...

Low: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.8 Security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

CVE-2022-46405

Mastodon through 4.0.2 allows attackers to cause a denial of service large Sidekiq pull queue by creating bot accounts that follow attacker-controlled accounts on certain other servers associated with a wildcard DNS A record, such that there is uncontrolled recursion of attacker-generated message...

Cisco IOS XE Software Border Gateway Protocol Resource Public Key Infrastructure DoS (cisco-sa-iosxe-rpki-dos-2EgCNeKE)

According to its self-reported version, Cisco IOS-XE Software is affected by a denial of service DoS vulnerability that exists in its implementation of the Public Key Infrastructure RPKI feature due to the incorrect handling of a specific RPKI to Router RTR Protocol packet header. An...

SUSE: Security Advisory (SUSE-SU-2022:4258-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KLA20103 DoS vulnerability in Microsoft Browser

Heap buffer overflow vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2022-4135 Related products Microsoft-Edge CVE list CVE-2022-4135 critical KB list Solution Install necessary updates from the...

Nextcloud Server < 22.2.10, 23.0.x < 23.0.7, 24.0.x < 24.0.3 DoS Vulnerability (GHSA-6w9f-jgjx-4vj6)

Nextcloud Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

DoS on claiming rewards in PirexRewards is possible

Lines of code Vulnerability details Proof of Concept The claim method in PirexRewards iterates over the rewardTokens array for a producerToken. Now this array is completely managed by the contract’s owner who can call addRewardToken which pushes a new value in that array, as many times as he...

KLA20100 DoS vulnerability in Google Chrome

Heap buffer overflow vulnerability was found in Google Chrome. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Stable Channel Update for Desktop Related products Google-Chrome CVE list CVE-2022-4135 critical Solution Update to the latest version...

Denial Of Service (DoS)

engine.io is vulnerable to denial of service. The vulnerability exists in setTimeout parameter in server.js because the HTTP request is not properly triggered which allows to attacker to crash NodeJS...

Denial Of Service (DoS)

Tensorflow is vulnerable to denial of service. The vulnerability exists due to a segment fault in ndarraytensorbridge because the inputs are not properly validated which allows an attacker to cause an application crash...

Oracle Linux 9 : speex (ELSA-2022-7979)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7979 advisory. - CVE-2020-23903 speex: divide by zero in readsamples via crafted WAV file Tenable has extracted the preceding description block directly from the Oracle Linux...

Cisco IOS XE Software for cBR 8 Converged Broadband Routers Common Open Policy Service Denial of Service (cisco-sa-cbr8-cops-Vc2ZsJSx)

According to its self-reported version, Cisco IOS-XE Software for Cisco cBR-8 Converged Broadband Routers is affected by a DoS vulnerability in the Common Open Policy Service COPS. A deadlock condition exists in the COPS packet processing that could allow allow an unauthenticated, remote attacker...

RHEL 9 : libtirpc (RHSA-2022:8400)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8400 advisory. The libtirpc packages contain SunLib's implementation of transport-independent remote procedure call TI- RPC documentation, which includes a library...