Oracle Application Object Library GUI Component DoS Data Access

The vulnerability of the GUI component of the Oracle Application Object Library in the Oracle E-Business Suite system for enterprise automation activities is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures or gain...

Core component Oracle Health Sciences InForm DoS Data Access

The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures or gain access to read, modify, add, or delete data...

Oracle Java SE DoS

The vulnerability of the JSE component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2023-32112

Vendor Master Hierarchy - versions SAPAPPL 500, SAPAPPL 600, SAPAPPL 602, SAPAPPL 603, SAPAPPL 604, SAPAPPL 605, SAPAPPL 606, SAPAPPL 616, SAPAPPL 617, SAPAPPL 618, S4CORE 100, does not perform necessary authorization checks for an authenticated user to access some of its function. This could lea...

The values for strategyIndexes are not enforced

Lines of code Vulnerability details Proof of Concept strategyIndexes is used to indicate which strategies the caller will withdraw 100% of his shares, but it can contain any value when calling StrategyManager.queueWithdrawal and StrategyManager.slashShares. These two functions will reuse...

BGP OPEN Message Handler Buffer Overflow DoS

The vulnerability of the BGP OPEN Message Handler component of the networking routing implementation software on Unix-like systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

MySQL Server Optimizer DoS

The vulnerability of the MySQL Server component of the database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause the system to become unresponsive or lead to service failures...

Core server component of Information Disclosure

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose sensitive information, as well as cause service failures...

Zyxel NBG-418N XSS

The vulnerability of the web interface for controlling Zyxel NBG-418N v2 Wi-Fi routers is related to insufficient protection of the website structure when processing parameters. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks or cause service failure...

Important: openldap

Issue Overview: An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain access that would otherwise be denied via a simple bind for any identity covered...

hiredis library Integer Overflow DoS

The vulnerability of the hiredis library in the NoSQL Redis database management system is related to integer overflow. Exploiting this vulnerability allows an attacker to remotely access confidential data, compromise its integrity, and cause service failures...

Nextcloud DoS

The vulnerability of cloud-based software for creating and using Nextcloud storage solutions is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Core server component DoS

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures using the T3 network...

PHP DoS

The vulnerability of the PHP programming language interpreter is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Dnsmasq Unlimited Resource Allocation DoS

The vulnerability of the Dnsmasq DNS server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

WebLogic Server DoS

The vulnerability of the Web Services component of the Oracle WebLogic Server application server, a software platform of Oracle Fusion Middleware, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures using the HTTP...

Nextcloud DoS

The vulnerability of cloud-based software for creating and using Nextcloud storage solutions is related to the lack of restrictions on the download of files. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by downloading arbitrary files ont...

Windows Secure Channel DoS

The vulnerability of the Windows Secure Channel component in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using specially created data...

IhisiSmm Component DoS

The vulnerability of the IhisiSmm component in the InsydeH2O UEFI firmware creation framework is related to state management errors. Exploiting this vulnerability could allow a remote attacker to cause system failures...

CVE-2022-2084

A vulnerability was found in cloud-init. With this flaw, sensitive data could be exposed in world-readable cloud-init logs when schema failures are reported. This issue leak could include hashed passwords...