4065 matches found
SUSE-SU-2021:3301-1 Security update for libcryptopp
This update for libcryptopp fixes the following issues: - CVE-2016-9939: Fixed potential DoS in Crypto++ libcryptopp ASN.1 parser bsc1015243...
CVE-2021-39893
A potential DOS vulnerability was discovered in GitLab starting with version 9.1 that allowed parsing files without authorisation...
Design/Logic Flaw
A potential DOS vulnerability was discovered in GitLab starting with version 9.1 that allowed parsing files without authorisation...
UBUNTU-CVE-2021-39893
A potential DOS vulnerability was discovered in GitLab starting with version 9.1 that allowed parsing files without authorisation...
CVE-2021-39893
A potential DOS vulnerability was discovered in GitLab starting with version 9.1 that allowed parsing files without authorisation...
CVE-2021-39893
CVE-2021-39893 relates to a potential DoS in GitLab, beginning with version 9.1, where parsing of files could occur without authorization. The root cause, as described in connected sources, is inability to enforce authorization during file parsing, leading to denial of service (impact on availabi...
CVE-2021-39893
Removed by vendor...
ALPINE-CVE-2021-41524
While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project...
CVE-2021-22259
A potential DOS vulnerability was discovered in GitLab EE starting with version 12.6 due to lack of pagination in dependencies API...
CVE-2021-22259
A potential DOS vulnerability was discovered in GitLab EE starting with version 12.6 due to lack of pagination in dependencies API...
Design/Logic Flaw
A potential DOS vulnerability was discovered in GitLab EE starting with version 12.6 due to lack of pagination in dependencies API...
CVE-2021-22259
A potential DOS vulnerability was discovered in GitLab EE starting with version 12.6 due to lack of pagination in dependencies API...
CVE-2021-22259
CVE-2021-22259 describes a potential denial-of-service against GitLab EE beginning with version 12.6, caused by lack of pagination in the dependencies API. The issue affects GitLab EE (starting at 12.6) and has CVSS-derived scores indicating higher impact on availability (as per the provided metr...
Apache Httpd < 2.4.50 : null pointer dereference in h2 fuzzing
While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project...
PT-2021-4293 · Apache +1 · Apache Http Server +1
Name of the Vulnerable Software and Affected Versions: Apache HTTP Server version 2.4.49 Description: The issue is related to a null pointer dereference error during HTTP/2 request processing, which can be exploited by an external source to cause a denial of service DoS via a specially crafted...
SUSE-SU-2021:3254-1 Security update for rabbitmq-server
This update for rabbitmq-server fixes the following issues: - CVE-2021-32718: Fixed improper neutralization of script-related HTML tags in a web page basic XSS in management UI bsc1187818. - CVE-2021-32719: Fixed improper neutralization of script-related HTML tags in a web page basic XSS in...
KLA12363 DoS vulnerability in Apache HTTP Server
Denial of service vulnerability was found in Apache HTTP Server. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Fixed in Apache HTTP Server 2.4.35 Related products Apache-HTTP-Server CVE list CVE-2018-11763 high Solution Update to the latest version...
CVE-2021-37273
A Denial of Service issue exists in China Telecom Corporation EPON Tianyi Gateway ZXHN F450EPON ONU 3.0. Tianyi Gateway is a hardware terminal of "Optical Modem Smart Router." Attackers can use this vulnerability to restart the device multiple times...
CVE-2021-41753
The CVE-2021-41753 entry concerns D-Link DIR-X1560 (v1.04B04) and DIR-X6060 (v1.11B04) where a remote, unauthenticated attacker can cause a denial of service by sending specific spoofed SAE authentication frames to trigger disconnection of a wireless client. Connected sources corroborate the affe...