CVE-2023-39386

CVE-2023-39386 affects Huawei HarmonyOS’s PMS module where input parameters are not strictly verified. The vulnerability may cause newly installed apps to fail to restart if exploited. The CVE has a high impact on availability (per CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) and is listed wit...

Microsoft Message Queuing Service DoS

The vulnerability of the Microsoft Message Queuing MSMQ service on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

sips DoS

The vulnerability of the sips component in macOS operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause system failures...

Microsoft Visual Studio .NET Framework Uncontrolled Resource Consumption DoS

The vulnerability of Microsoft Visual Studio, a software development tool, and the Microsoft.NET Framework, a software platform, is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the skcipherrecvmsg function in the Linux operating system’s kernel code is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

ML lifecycle management Platform Command Injection

The vulnerability of the MLflow model lifecycle management platform exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability can allow an attacker to execute arbitrary commands or cause service failures...

libxpc DoS

The vulnerability of the libxpc library in iOS, iPadOS, macOS Big Sur, macOS Monterey, watchOS, and macOS Ventura systems is related to errors in processing input data. Exploiting this vulnerability allows an attacker to cause service failures...

PT-2025-41076

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0-rc7 for upstream min debug 2023 06 28 17 02 Description The Linux kernel contains an issue in the net/mlx5e module where the RTNL lock is not held when needed before calling xdp set features. This can occur...

phpMyFAQ Confidential Data Access

The vulnerability of the phpMyFAQ web application is related to the absence of element neutralization mechanisms. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures using a specially crafted CSV file...

Google Chrome Sandbox Unauthorized Access

The vulnerability of Google Chrome’s Sandbox component is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information, compromise its integrity, or cause service failures...

Unexpected Snapshot Deletion Failures in the Job Sessions for ONTAP 9.13.1

Article Applicability The issue documented in this article affects builds 12.0.0.1420 P20230718 and lower. This issue was resolved starting in Veeam Backup & Replication build 12.1.0.2131. Challenge VeeamAUX snapshots cannot be deleted immediately on ONTAP 9.13.1 or later; they are instead delete...

FC-Only Nimble Array Snapshot Failures in Veeam Backup & Replication P20230718

Challenge When using Veeam Backup & Replication 12 P20230718, rescan, backup, and restore operations may fail when the Nimble array is configured to only use Fibre Channel FC protocol. The request could not be understood by the server. Unexpected argument 'multiinitiator'. Solution A private fix ...

CODESYS DoS

The vulnerability of CODESYS software products is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Airflow Regular Expression DoS

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service...

SAP SQL Anywhere Permission DoS

The vulnerability of SAP SQL Anywhere relational database management systems is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to cause service failures or other adverse effects...

WordPress Stripe Payment Gateway for WooCommerce Plugin <= 3.7.7 is vulnerable to Privilege Escalation

Software Stripe Payment Gateway for WooCommerce Type Plugin Vulnerable versions = 3.7.7 Fixed in 3.7.8 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-3162 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID...

iOS kernel DoS

The vulnerability in the kernels of iOS, iPadOS, and macOS exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

IOT Orchestrator Security E1 DoS

The vulnerability of component E1 in the JD Edwards EnterpriseOne Orchestrator Security application relates to errors in processing input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

WordPress Shop as a Customer for WooCommerce Plugin < 1.1.8 is vulnerable to Privilege Escalation

Software Shop as a Customer for WooCommerce Type Plugin Vulnerable versions 1.1.8 Fixed in 1.1.8 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE N/A Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 05b83bfeee18 Credits...

WordPress Shop as a Customer for WooCommerce Plugin < 1.2.4 is vulnerable to Privilege Escalation

Software Shop as a Customer for WooCommerce Type Plugin Vulnerable versions 1.2.4 Fixed in 1.2.4 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE N/A Patch priority Medium CVSS severity Medium 7.2 Developer Claim ownership PSID 10934473fa31 Credi...