Lucene search
K

11191 matches found

RedhatCVE
RedhatCVE
added 2024/10/14 4:55 p.m.11 views

CVE-2024-8184

A flaw was found in Jetty's ThreadLimitHandler.getRemote. This flaw allows unauthorized users to cause remote denial of service DoS attacks. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory. Mitigation Mitigation for this issue is...

6.5CVSS5.5AI score0.011EPSS
Exploits0References6
NVD
NVD
added 2024/10/14 4:15 p.m.16 views

CVE-2024-8184

There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote which can be exploited by unauthorized users to cause remote denial-of-service DoS attack. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory...

6.5CVSS0.011EPSS
Exploits0References4
OSV
OSV
added 2024/10/14 3:15 p.m.11 views

CVE-2024-9823

There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service DoS attack on the server using DosFilter. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory...

7.5CVSS7.1AI score
Exploits0References5
NVD
NVD
added 2024/10/14 3:15 p.m.15 views

CVE-2024-9823

There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service DoS attack on the server using DosFilter. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory...

7.5CVSS0.0068EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2024/10/14 3:9 p.m.11 views

CVE-2024-8184 Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks

There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote which can be exploited by unauthorized users to cause remote denial-of-service DoS attack. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory...

5.9CVSS7.1AI score0.011EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2024/10/14 3:9 p.m.9 views

CVE-2024-8184

There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote which can be exploited by unauthorized users to cause remote denial-of-service DoS attack. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory...

6.5CVSS6.9AI score0.011EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2024/10/14 3:3 p.m.13 views

CVE-2024-9823 Jetty DOS vulnerability on DosFilter

There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service DoS attack on the server using DosFilter. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory...

5.3CVSS7.2AI score0.0068EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/10/14 3:3 p.m.34 views

CVE-2024-9823 Jetty DOS vulnerability on DosFilter

There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service DoS attack on the server using DosFilter. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory...

5.3CVSS0.0068EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2024/10/14 3:3 p.m.9 views

CVE-2024-9823

There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service DoS attack on the server using DosFilter. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory...

7.5CVSS6.4AI score0.0068EPSS
Exploits0
Veracode
Veracode
added 2024/10/14 10:5 a.m.5 views

Input Validation

typo3/cms-backend is vulnerable to Input Validation. The vulnerability is due to a lack of proper validation checks on user input, allowing for the manipulation of data saved in the bookmark toolbar and triggering errors that disrupt access to the backend user interface...

4.9CVSS6.6AI score0.00249EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2024/10/14 12:0 a.m.5 views

PT-2024-38862 · Eclipse +4 · Jetty +4

Name of the Vulnerable Software and Affected Versions: Jetty versions 9.3.12 through 9.4.55 Jetty versions 10.0.0 through 10.0.23 Jetty versions 11.0.0 through 11.0.23 Jetty versions 12.0.0 through 12.0.8 Description: There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote...

7.5CVSS6.2AI score0.944EPSS
Exploits32References116
BDU FSTEC
BDU FSTEC
added 2024/10/14 12:0 a.m.3 views

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems is related to pointer assignment errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

6.5CVSS5.5AI score0.00401EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/11 12:0 a.m.1 views

The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of the Windows operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS5.4AI score0.00208EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/10/11 12:0 a.m.2 views

PT-2024-9466 · Siemens · Sentron Powercenter 1000/1100

Name of the Vulnerable Software and Affected Versions: Sentron Powercenter 1000/1100 affected versions not specified Description: A denial of service issue may occur in a BLE network when multiple central devices continuously connect and disconnect to a peripheral device, requiring a hard reset t...

6.5CVSS6.9AI score0.00047EPSS
Exploits0References7
BDU FSTEC
BDU FSTEC
added 2024/10/11 12:0 a.m.1 views

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows a hacker to circumvent existing security restrictions.

The vulnerability of Remote Desktop Services RDS for Windows operating systems is related to access control errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

4.8CVSS5.4AI score0.00367EPSS
Exploits0References2
OSV
OSV
added 2024/10/10 12:55 p.m.1 views

USN-7061-1 golang-1.17 vulnerabilities

Hunter Wittenborn discovered that Go incorrectly handled the sanitization of environment variables. An attacker could possibly use this issue to run arbitrary commands. CVE-2023-24531 Sohom Datta discovered that Go did not properly validate backticks as Javascript string delimiters, and did not...

9.8CVSS7.1AI score0.00924EPSS
Exploits0References12
BDU FSTEC
BDU FSTEC
added 2024/10/10 12:0 a.m.1 views

The vulnerability of the IPv4 Fragmentation Handler component in Cisco IOS XE router operating systems such as Cisco ASR 1000 and Cisco cBR-8 allows a attacker to cause a service failure.

The vulnerability of the IPv4 Fragmentation Handler component in Cisco IOS XE routers of the Cisco ASR 1000 and Cisco cBR-8 family is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

8.6CVSS5.4AI score0.17314EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/10 12:0 a.m.1 views

The vulnerability of the Unified Threat Defense function in the Cisco IOS XE operating system, which allows a perpetrator to trigger a service failure.

The vulnerability of the Unified Threat Defense function in the Cisco IOS XE operating system is related to state management errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

8.6CVSS5.5AI score0.00893EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/10 12:0 a.m.1 views

The vulnerability of the PIM protocol implementation in the Cisco IOS XE operating system allows a attacker to trigger a service failure.

The vulnerability of the Protocol Independent Multicast PIM protocol implementation in the Cisco IOS XE operating system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

8.6CVSS5.4AI score0.00477EPSS
Exploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/10/10 12:0 a.m.51 views

SUSE SLES12 Security Update : kernel (SUSE-SU-2024:3566-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3566-1 advisory. The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...

7.8CVSS7.4AI score0.00495EPSS
Exploits6References273
Rows per page
Query Builder