Microsoft .NET DoS

The vulnerability of the Microsoft .NET software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

WPLSoft Buffer Overflow DoS

The vulnerability of the WPLSoft PLC programming software lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause system failures remotely...

HTTP/2 Request Stream DoS

The vulnerability of the HTTP/2 protocol lies in the ability to create request streams within an already established network connection, without the need to establish new network connections or confirm the receipt of packets. Exploiting this vulnerability allows a malicious actor to cause service...

Cisco Unified Communications Manager DoS

The vulnerabilities of the Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P are related to insufficient checking of incoming requests duri...

DEBIAN-CVE-2023-45322

libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when...

Weincloud Industrial Device Management Cloud Platform DoS

The vulnerability of the Weincloud industrial device management cloud platform is related to incorrect handling of its components. Exploiting this vulnerability could allow a malicious actor to cause service failures...

libvpx Heap Buffer Overflow DoS

The vulnerability of the multimedia library libvpx is related to incorrect processing of exception states during the processing of certain special format video data. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially created HTML page...

Spring Framework DoS

The vulnerability of the Spring Framework software platform is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

ConfigSync Failure May Be Seen When Delivering App-V, MSIX, or MSIX App Attach Packages

For customers using Delivery Controller Version 2308 and delivering App-V, MSIX or MSIX app attach packages through Citrix, errors with the source “Citrix ConfigSync Service” and the Event ID “505” may be logged to the Windows Event Viewer on Delivery Controllers with the following message: “The...

NVIDIA GPU Driver Privilege Escalation

The vulnerability of NVIDIA GPU graphics driver involves the use of an unreliable pointer. Exploiting this vulnerability can allow attackers to cause system failures or gain increased privileges...

Go crypto/TLS DoS

The vulnerability of the Go programming language’s crypto/TLS package is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using a specially created RSA key certificate...

How to check logs for monitor failures.

Sometimes monitors bound to a service or service group fail and the error is not descriptive enough of why the monitor check failed. In such times if the monitor is a user customized monitor or any of the built-in monitors that use a Pearl script to run such as LDAP, STOREFRONT,...etc., then the...

PHOENIX CONTACT TC ROUTER XML External Object DoS

The vulnerability of the microprogramming software for routers PHOENIX CONTACT TC ROUTER, TC CLOUD CLIENT, and CLOUD CLIENT is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failur...

Johnson Controls VideoEdge Insufficient Verification

The vulnerability of the Johnson Controls VideoEdge network video recorder software is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an intruder to modify configuration files and cause service failures...

WordPress Simple Membership Plugin <= 4.3.4 is vulnerable to Privilege Escalation

Software Simple Membership Type Plugin Vulnerable versions = 4.3.4 Fixed in 4.3.5 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-41957 Patch priority High CVSS severity High 8.6 Developer Claim ownership PSID 1bb17eda4daa Credits Rafie...

PDF Viewer Input Validation DoS

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to trigge...

TP-Link Archer C50/C20/C2 Buffer Overflow

The vulnerability of the microprogrammed software of TP-Link Archer C50, Archer C20, and Archer C2 Wi-Fi routers lies in the fact that the operation data is written outside the buffer in memory when processing request parameters. Exploiting this vulnerability can allow a remote attacker to cause...

Zoom Desktop software DoS

The vulnerability of the Zoom Desktop video conferencing software for Linux users stems from insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

QMS.Mobile Module Disclosure Arbitrary Functions Service Failures

The vulnerability of the QMS.Mobile module of the quality management software for automobile manufacturers, QMS Automotive, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information, perform arbitrary functions, or...

Rockwell Automation Pavilion8 JMX Console Unauthorized Access

The vulnerability of the JMX console on the Rockwell Automation Pavilion8 simulation, control, and optimization platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information or cause...