4558 matches found
Juniper Networks Junos OS Evolved Information Disclosure
The vulnerability of the Juniper Networks Junos OS Evolved operating system is related to insufficient restrictions on communication channels for specified endpoints. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information and cause service...
Accutech Manager Buffer Overflow DoS
The vulnerability of the software for configuring and managing Accutech Manager lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures by sending specially crafted...
MySQL InnoDB DoS
The vulnerability of the InnoDB component in the MySQL Database Management System is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures using the MySQL protocol...
LibTIFF Heap Buffer Overflow DoS
The vulnerability of the TIFFReadEncodedStrip function in the LibTIFF library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
GPAC Heap Buffer Overflow DoS
The vulnerability of the multimedia platform GPAC is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to cause service failures...
GPAC multimedia platform Heap Buffer Overflow DoS
The vulnerability of the gfm2tsprocesssdt function on the GPAC multimedia platform is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause service failures...
CVE-2024-7006 Libtiff: null pointer dereference in tif_dirinfo.c
A null pointer dereference flaw was found in Libtiff via tifdirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash,...
Consul Resource Leak DoS
The vulnerability of the Consul and Consul Enterprise service configuration tool is related to an error that allows a one-node cluster with a service named the same as the local service to potentially compromise the Consul system. Exploiting this vulnerability could enable a malicious actor to...
On the Cyber Safety Review Board
When an airplane crashes, impartial investigatory bodies leap into action, empowered by law to unearth what happened and why. But there is no such empowered and impartial body to investigate CrowdStrikes faulty update that recently unfolded, ensnarling banks, airlines, and emergency services to t...
Expected Behavior Violation
Overview Affected versions of this package are vulnerable to Expected Behavior Violation via the HPackParser function when the gRPC client is communicating with an HTTP/2 proxy, allowing the attacker to poison the HPACK table. By manipulating the header encoding and poisoning the HPACK table...
Fedora 40 : bind / bind-dyndb-ldap (2024-8af1780fdf)
The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-8af1780fdf advisory. Update to BIND 9.18.28 Security Fixes - A malicious DNS client that sent many queries over TCP but never read the responses could cause a server to...
Safe Browsing Service DoS
The vulnerability of Google Chrome and Microsoft Edge browsers’ Safe Browsing service is related to insufficient validation of entered data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
PT-2024-32156
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a qgroup reserve leak in the cow file range function of the btrfs filesystem. In the buffered write path, the dirty page owns the qgroup reserve until it creates ...
Safe Browsing Service DoS
The vulnerability of Google Chrome and Microsoft Edge browsers’ Safe Browsing service is related to insufficient validation of entered data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Virtuozzo Hybrid Server 7.5 Update 6 Hotfix 3 (7.5.6-126)
The Hotfix 3 for Virtuozzo Hybrid Server 7.5 Update 6 provides stability and usability bug fixes. Vulnerability id: PSBM-156725 Some virtual machines failed to start, and ‘libvirtd.service’ hung after the Virtuozzo Hybrid Server 7.5 Update 6 Hotfix 2 upgrade. Vulnerability id: PSBM-157279 Default...
Qualcomm Heap Buffer Overflow Information Disclosure
The vulnerability of embedded Qualcomm software is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause system failures...
GHSA-3JCG-VX7F-J6QF The fuels-ts typescript SDK has no awareness of to-be-spent transactions
Brief/Intro The typescript SDK has no awareness of to-be-spent transactions causing some transactions to fail or silently get pruned as they are funded with already used UTXOs. The Typescript SDK provides the fund function which retrieves UTXOs, which belong to the owner and can be used to fund t...
CVE-2024-41945
fuels-ts is a library for interacting with Fuel v2. The typescript SDK has no awareness of to-be-spent transactions causing some transactions to fail or silently get pruned as they are funded with already used UTXOs. The problem occurs, because the fund function in...
AZL-47403 CVE-2024-42156 affecting package kernel for versions less than 6.6.64.2-9
In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of clear-key structures on failure Wipe all sensitive data from stack for all IOCTLs, which convert a clear-key into a protected- or secure-key...
JOSE Component Apache CXF DoS
The vulnerability of the JOSE component in Apache CXF web services is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...