Unbound DNS Resource Consumption DoS

The vulnerability of the Unbound DNS server is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service failures...

Protobuf Serialization Resource Leak DoS

The vulnerability of the Protobuf serialization protocol’s text analysis component is related to errors during resource release. Exploiting this vulnerability allows a remote attacker to cause service failures...

Runc rootfs_linux.go Data Compromise

The vulnerability of the libcontainer/rootfslinux.go component, a tool for running isolated containers in Runc, is related to the use of a name with an incorrect reference. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service...

PHOENIX CONTACT FL/TC MGUARD DoS

The vulnerability of the microprogrammed software of the PHOENIX CONTACT FL/TC MGUARD family is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

systemd systemctl status Confidential Data Access

The vulnerability of the systemctl status command for the Systemd service initialization and management subsystem is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failure...

EulerOS 2.0 SP10 : cloud-init (EulerOS-SA-2023-2375)

According to the versions of the cloud-init package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could...

Remote Procedure Call Windows DoS

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Remote Procedure Call Windows DoS

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Remote Procedure Call Windows DoS

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Redis Database Management System DoS

The vulnerability of the Redis database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Oracle Java SE Utilities DoS

The vulnerability of the Utilities component in Oracle Java SE and Java SE Embedded software platforms is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Remote Procedure Call Windows DoS

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

CUPS httpClose DoS

The vulnerability of the httpClose function in a CUPS printing server lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause service failures...

Oracle Java SE Utility DoS

The vulnerability of the Utility component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

podman top Privilege Escalation

The vulnerability of the podman top command in the software for managing and starting OCI containers on Red Hat Enterprise Linux, RedOS, and the corporate platform Red Hat OpenShift Container Platform is related to the loading of a malicious image into the public registry due to incorrect access...

OX App Suite IMAP Resource Consumption DoS

The vulnerability of the IMAP service in the OX App Suite package is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

WordPress Booking Package Plugin <= 1.5.98 is vulnerable to Privilege Escalation

Software Booking Package Type Plugin Vulnerable versions = 1.5.98 Fixed in 1.5.99 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-37389 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 0ff1d9e379c0 Credits Rafie...

WordPress JetFormBuilder Plugin <= 3.0.8 is vulnerable to Privilege Escalation

Software JetFormBuilder Type Plugin Vulnerable versions = 3.0.8 Fixed in 3.0.9 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-37866 Patch priority Medium CVSS severity Medium 7.2 Developer Crocoblock PSID bb75400351be Credits Rafie...

ROS-2-1771

2.1771 Multiple vulnerabilities in ISC BIND CVE-2021-25216, CVE-2021-25215, CVE-2021-25214 1. Vulnerability Description: CVE-2021-25216 A vulnerability exists due to a boundary error in the GSS-TSIG extension. A remote attacker can send specially crafted requests to the server, trigger a buffer...

Django forms FileField ImageField Data Compromise

The vulnerability of the forms.FileField and forms.ImageField components in the Django web application framework is related to insufficient validation of entered data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...