CVE-2022-3283

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 While cloning an issue with special crafted content added to the description could have been used ...

CVE-2022-2908

Removed by vendor...

GitLab 资源管理错误漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab CE/EE versions prior to 15.2.5, 15.3...

CVE-2022-3283

GitLab CE/EE vulnerability CVE-2022-3283 affects GitLab versions prior to 15.2.5, and specific ranges in later releases (before 15.3.4 and before 15.4.1). The root cause is a potential denial-of-service: when cloning an issue, a specially crafted description could trigger high CPU usage, potentia...

CVE-2022-3283

Removed by vendor...

CVE-2022-2931

Removed by vendor...

Microsoft Edge Denial of Service Vulnerability

Microsoft Edge, a web browser developed by Microsoft based on the Chromium open source project and other open source software, has a denial-of-service vulnerability in versions prior to Microsoft Edge 106.0.1370.34 based on versions prior to Google Chrome 106.0.5249.91, which originates from a...

CVE-2022-39281

CVE-2022-39281 affects fat_free_crm before 0.20.1. An authenticated user can trigger a remote Denial of Service via the bucket access in the Tasks endpoint, caused by the Task model’s bucket_empty? logic. The issue has been fixed in commit c85a254 and will be released in 0.20.1; patching is recom...

Important: Red Hat Security Advisory: openvswitch2.11 security update

An update for openvswitch2.11 is now available for Fast Datapath for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Denial Of Service (DoS)

systemd is vulnerable to denial of service. The vulnerability exists due to the onstreamio function and dnsstreamcomplete function in resolved-dns-stream.c does not properly increment the reference counting for the DnsStream object, allowing an attacker to cause a system crash through the...

Denial Of Service (DoS)

jackson-databind is vulnerable to Denial Of Service DoS. The vulnerability exists in deserializeFromArray function in BeanDeserializer.java due to resource exhaustion when processing a deeply nested array which allows an attacker to cause an application crash via a malicious input...

Mattermost Server 7.1.0 DoS (MMSA-2022-00115)

The version of Mattermost Server running on the remote host is 7.1.0. It is, therefore, affected by a denial of service DoS vulnerability. An authenticated, remote attacker can upload a specially crafted GIF file when creating a post which causes resource exhaustion on the host. Note that Nessus...

SUSE-SU-2022:3485-1 Security update for python39

This update for python39 fixes the following issues: python39 was updated to version 3.9.14: - CVE-2020-10735: Fixed DoS due to int type in PyLongFromString not limiting amount of digits when converting text to int bsc1203125. - CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP...

LIEF 安全漏洞

LIEF is a cross-platform library from the individual developer Romain Thomas. It is used to parse, modify and abstract Elf, Pe and MachO formats. A security vulnerability exists in LIEF version v0.12.1. An attacker has exploited this vulnerability to cause a denial of service DOS via a segmentati...

PT-2022-25363 · Unknown · Flipper Zero

Name of the Vulnerable Software and Affected Versions: Flipper Zero versions prior to 0.65.2 Description: A buffer overflow in the nfc device load mifare ul data component allows attackers to cause a Denial of Service DoS via a crafted NFC file. Recommendations: For versions prior to 0.65.2, upda...

“Just-In-Time” liquidity providing protection can be used to DOS user withdrawals and mints

Lines of code Vulnerability details Impact Detailed description of the impact of this finding. Proof of Concept AlgebraPool.solL227-L230 uint32 liquidityCooldown = liquidityCooldown; if liquidityCooldown 0 requireblockTimestamp - lastLiquidityAddTimestamp = liquidityCooldown; The code above from...

Cisco Catalyst 输入验证错误漏洞

Catalyst 9800 series is a wireless controller from Cisco. A denial of service vulnerability exists in the Cisco Catalyst 9100 Series, which arises from a security issue in the 802.11 correlation frame authentication of the Catalyst 9100 Series access points APs, and can be exploited by an...

SUSE-SU-2022:3429-1 Security update for dpdk

This update for dpdk fixes the following issues: - CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs bsc1202903. - CVE-2022-28199: Fixed buffer overflow in the vhost code bsc1202956...

GHSA-5V95-J4RR-6F3C rdiffweb's unlimited username field length can lead to DoS

rdiffweb prior to 2.4.8 is vulnerable to a potential Dos attack via an unlimited length "username" field. This can result in excess memory consumption, or memory corruption, leading to a Denial of Service DoS. This issue is patched in version 2.4.8. There are no known workarounds...

SUSE: Security Advisory (SUSE-SU-2022:3381-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...