input[url] function DoS

The vulnerability of the inputurl function in the application development environment and the Angular platform is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

$resource service Angular DoS

The vulnerability of the $resource service in the Angular application and single-page application development platforms is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

FreeRDP avc420_ensure_buffer Heap Buffer Overflow DoS

The vulnerability of the functions avc420ensurebuffer and avc444ensurebuffer in the RDP client FreeRDP is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures or other adverse effects...

ImageIO DoS

The vulnerability of the ImageIO component in Oracle Java SE and the Oracle GraalVM Enterprise Edition software platform is related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Zoom SDK Uncontrolled Resource Consumption DoS

The vulnerability of Zoom, a video conferencing software, is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

OPC UA Server DoS

The vulnerability of the OPC UA Server software for integration systems and automation devices in industrial applications is related to pointer assignment errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Java Protocol Buffers protobuf-java DoS

The vulnerability of the Java Protocol Buffers protobuf-java environment library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Python email.utils parseaddr DoS

The vulnerability of the email.utils.parseaddr function in the Python programming language is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...

OpenSSL DH Check Buffer Overflow DoS

The vulnerabilities of the functions DHcheck, DHcheckex, and EVPPKEYparamcheck in the OpenSSL library are related to excessive iteration. Exploiting these vulnerabilities can allow a remote attacker to cause service failures...

Apache Traffic Server DoS

The vulnerability of the Apache Traffic Server web server is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to cause service failures...

WordPress JupiterX Core Plugin <= 3.3.8 is vulnerable to Privilege Escalation

Software JupiterX Core Type Plugin Vulnerable versions = 3.3.8 Fixed in 3.4.3 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-38389 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID bb67776164d1 Credits Rafie...

Firefox Confidential Data Access DoS

The vulnerability in the Firefox web browser is related to insufficient elimination of certain elements in the request. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

OpenImageIO Buffer Overflow DoS

The vulnerability of the OpenImageIO image processing library lies in the escape of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures through t...

Gstreamer Integer Overflow DoS

The vulnerability of the Gstreamer multimedia framework is related to a potential overflow condition. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures through a specially created file...

OpenImageIO Output Component Confidential Data Compromise

The vulnerability of the OpenImageIO image processing library’s output component is related to the output data being stored outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service...

Zyxel Switches DoS

The vulnerability of the microprogrammed software of Zyxel’s XGS2220, XMG1930, and XS1930 series switches is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Intel oneVPL GPU DoS

The vulnerability of the software for developing and optimizing multimedia applications using Intel oneVPL GPUs is related to improper cleaning or release of resources. Exploiting this vulnerability can allow attackers to cause service failures...

Windows Message Queuing DoS

The vulnerability of Windows’ Message Queuing system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CMPapp Component Codesys DoS Execution Code

The vulnerability of the CMPapp component in the Codesys industrial automation software suite relates to the ability to write data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause system failures or execute arbitrary code...

Microsoft Message Queuing Service DoS

The vulnerability of the Microsoft Message Queuing MSMQ service on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...