CVE-2021-33597

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant whereby the SAVAPI component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service DoS of the...

CVE-2021-33597

CVE-2021-33597 describes a DoS in F-Secure Atlant where the SAVAPI component can crash while scanning fuzzed files. The issue can be triggered remotely and, if exploited, results in availability impact to the Anti-Virus engine. The provided documents confirm the vulnerability and impact but do no...

Cisco IoT Field Network Director DoS (cisco-sa-iot-coap-dos-WTBu6YTq)

A denial of service DoS vulnerability exists in Cisco IoT Field Network Director due to incorrect handling of certain valid, but not typical, Ethernet frames. An unauthenticated, remote attacker can exploit this issue by sending the Ethernet frames onto the Ethernet segment, to cause the device t...

MariaDB 10.4.0 < 10.4.21 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.4.21. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.4.21 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.34 and...

Elastic Elasticsearch DoS Vulnerability (ESA-2021-15)

Elasticsearch is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2020-18428

tinyexr commit 0.9.5 was discovered to contain an array index error in the tinyexr::SaveEXR component, which can lead to a denial of service DOS...

CVE-2021-32795

ArchiSteamFarm (ASF) is affected by CVE-2021-32795, a DoS that allows a remote attacker to crash a v4.x ASF instance by sending a specially crafted Steam chat message. The attacker does not need authentication and must know ASF’s CommandPrefix; many deployments use the default. The issue is fixed...

Inefficient Regular Expression Complexity in erxes/erxes

✍️ Description If we want to use Regex in our match or search or replace or … functions, we must be sanitize this function's inputs. if an attacker capable to inject any Regex or abuse the exponential Regexes that used in our codes, then the ReDoS vulnerability appear and according to "freezing th...

CVE-2020-19475

An issue has been found in function CCITTFaxStream::lookChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 2...

Denial Of Service (DoS)

xlsx is vulnerable to denial of service. An attacker is able to crash the application via a malicious .xlsx document...

DEBIAN-CVE-2021-23409

The package github.com/pires/go-proxyproto before 0.6.0 are vulnerable to Denial of Service DoS via creating connections without the proxy protocol header...

CVE-2021-34618

A remote denial of service DoS vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.4.x: All versions; Aruba...

CVE-2021-0290 Junos OS: MX Series, EX9200 Series, SRX4600: Ethernet interface vulnerable to specially crafted frames

Improper Handling of Exceptional Conditions in Ethernet interface frame processing of Juniper Networks Junos OS allows an attacker to send specially crafted frames over the local Ethernet segment, causing the interface to go into a down state, resulting in a Denial of Service DoS condition. The...

CVE-2021-34476

Bowser.sys Denial of Service Vulnerability...

Juniper Junos OS DoS (JSA11054)

The version of Junos OS installed on the remote host is affected by a denial of service vulnerability as referenced in the JSA11054 advisory. When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets...

CVE-2021-21995

CVE-2021-21995 affects VMware ESXi OpenSLP, enabling a remote attacker to trigger a heap out-of-bounds read over port 427 and cause a denial-of-service. OpenSLP DOS is documented across multiple sources (NVD, Red Hat, VMware). Mitigation is via VMware security advisory VMSA-2021-0014 and related ...

CVE-2021-22399

CVE-2021-22399 is a Huawei P30 Bluetooth DoS vulnerability. An attacker can install third‑party apps to send specific broadcasts, causing the Bluetooth module to crash and function to become abnormal. Affected versions include P30 firmware ranges such as 10.0.0.195, 10.0.0.200, 10.0.0.201, 10.0.0...

Apache Tomcat DoS Vulnerability (Jul 2021) - Linux

Apache Tomcat is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

PT-2021-20289 · Unknown · Jt Utilities

Name of the Vulnerable Software and Affected Versions: JT Utilities versions prior to 13.0.2.0 Description: A vulnerability has been identified that can cause the application to crash when parsing specially crafted JT files. This occurs because a hash function is called with an incorrect argument...

gRPC Swift 输入验证错误漏洞

gRPC Swift is an open source Swift language implementation of gRPC , it contains a gRPC Swift API and code generator . Provides an API and generated code for gRPC clients and servers and can be built using Xcode or the Swift package manager. A security vulnerability in HTTP2ToRawGRPCServerCodec i...