CVE-2023-6918

A flaw was found in the libssh implements abstract layer for message digest MD operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the...

Qualcomm Embedded Software Assert Failure

The vulnerability of embedded software developed for Qualcomm chips lies in the improper implementation of the channel bandwidth division mechanism and the switching between subbands when performing Beam Switching. This occurs due to the use of the assert function. Exploiting this vulnerability c...

Qualcomm Embedded Software DoS

The vulnerability of embedded Qualcomm software is related to insufficient validation of input data when receiving messages related to connection configuration from the RRC. Exploiting this vulnerability can allow a remote attacker to cause service failures...

HashiCorp Vault DoS

The vulnerability of the maxrequestduration component in the HashiCorp Vault and Vault Enterprise platforms for archiving corporate information involves unlimited resource allocation during HTTP request processing. Exploiting this vulnerability could allow a malicious actor to cause service...

Default credentials

An issue was discovered by Elastic whereby Elastic Agent would log a raw event in its own logs at the WARN or ERROR level if ingesting that event to Elasticsearch failed with any 4xx HTTP status code except 409 or 429. Depending on the nature of the event that Elastic Agent attempted to ingest,...

USN-6534-2: Linux kernel vulnerabilities

It was discovered that the USB subsystem in the Linux kernel contained a race condition while handling device descriptors in certain situations, leading to a out-of-bounds read vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2023-37453 Lin Ma...

PT-2023-31411 · Elastic · Agent +2

Name of the Vulnerable Software and Affected Versions: Beats versions prior to 7.17.16 Beats versions prior to 8.11.3 Elastic Agent versions prior to 7.17.16 Elastic Agent versions prior to 8.11.3 Description: An issue was discovered whereby Beats and Elastic Agent would log a raw event in its ow...

Tor Debian DoS

The vulnerability of the Tor browser for the Debian GNU/Linux operating system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

APIX DoS

The vulnerability of the APIX application programming interface for the AXIS OS operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

BIG-IP DNS Pointer Redirection DoS

The vulnerability of the BIG-IP DNS server is related to pointer redirection errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Zoho ManageEngine ADManager Plus DoS

The vulnerability of the DomainUserSSPLogonAuth method in the Zoho ManageEngine ADManager Plus software for managing Active Directory services is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

OPC UA NET Standard Uncontrolled Resource Consumption

The vulnerability of implementations of the OPC UA.NET Standard data transfer specification in industrial networks is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor to cause service failures remotely...

Mitsubishi Electric GX Works3 Code Execution

The vulnerabilities of the software for programming Mitsubishi Electric GX Works3, as well as the software tools for managing applications in industrial automation systems such as MELSOFT iQ AppPortal, MELSOFT Navigator, and Motion Control Setting, are related to external control mechanisms...

Zyxel ATP Network Device Buffer Overflow DoS

The vulnerability of the microprogrammed software in Zyxel ATP, USG FLEX, USG FLEX 50W, USG20W-VPN, and VPN network devices is related to the operation of writing data outside the buffer in memory during the processing of the sdwanifaceipc file. Exploiting this vulnerability can allow a malicious...

Knative Serving Resource Consumption DoS

The vulnerability of the Knative Serving deployment and application management tool is related to an uncontrolled resource consumption when processing endpoints in the /metrics directory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CSS parser DoS

The vulnerability of the CSS parser for Node.js’s css-tools is related to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service failures...

STARDOM FCN/FCJ Uncontrolled Resource Consumption DoS

The vulnerability of the microprogrammed software in STARDOM FCN/FCJ programmable logic controllers is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

NVIDIA Graphics Kernel Mode DoS

The vulnerability of the kernel mode of NVIDIA GeForce, Studio, RTX/Quadro, NVS, and Tesla graphics processors is related to pointer dereferencing errors. Exploiting this vulnerability can allow attackers to cause system failures...

User enumeration or launch failures after upgrading Citrix StoreFront to LTSR 2203 CU4

After upgrading Citrix Storefront to 2203 Cu4, a high number of launchfailures or enumeration may be reported by end users. Upon checking, you may notice that there is a high load on the CTXSite database which is related to stored procedures being invoked. As a result of this, it causes session...

Perl Buffer Overflow DoS

The vulnerability of the Perl programming language is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause system failures or execute arbitrary code...