SUSE CVE-2019-19050

A memory leak in the cryptoreportstat function in crypto/cryptouserstat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering cryptoreportstatalg failures, aka CID-c03b04dcdba1...

SUSE CVE-2019-19057

Two memory leaks in the mwifiexpcieinitevtring function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service memory consumption by triggering mwifiexmappcimemory failures, aka CID-d10dcb615c8e...

SUSE CVE-2019-19068

A memory leak in the rtl8xxxusubmitinturb function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxucore.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering usbsubmiturb failures, aka CID-a2cdd07488e6...

SUSE CVE-2020-13962

Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket users. Because errors leak in unrelated TLS sessions, an unrelated session may be disconnected when any handshake fails...

SUSE CVE-2021-28692

inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operation of the CPUs issuing such commands. In the current implementation in Xen, asynchronous notification of the completion of such commands is not used. Instead, the issuing CPU...

SUSE CVE-2021-36978

QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in PlASCII85Decoder::write called from PlAESPDF::flush and PlAESPDF::finish when a certain downstream write fails...

BIOS Component System Failure

The vulnerability of the BIOS component of AMD processors exists due to insufficient checking of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

System Management Unit DoS

The vulnerability of the System Management Unit SMU component of AMD processors arises from operations that occur outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Description of the security update for Microsoft Exchange Server 2019, 2016, and 2013: February 14, 2023 (KB5023038)

None None...

Advantech iView Authentication Bypass Code Execution

The vulnerability of the centralized control system for network devices and ports of Advantech iView lies in the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger service failures remotely...

Django Unlimited Resource Distribution DoS

The vulnerability of the Django web application framework lies in the unlimited distribution of resources when processing the Accept-Language header. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick

cve-2022-44268-detector - detect malicious PNGs cve-2022-4426...

User Activity <= 1.0.1 - IP Spoofing

The plugin checks headers such as the X-Forwarded-For to retrieve the IP address of the request, which could lead to IP spoofing 1. Send login request with x-forwarded-for: REDACTEDIP 2. Show spoofed IP address in the dashboard OWASP A09:2021 – Security Logging and Monitoring Failures...

GSD-2023-1001716 drm/i915/gt: Cleanup partial engine discovery failures

drm/i915/gt: Cleanup partial engine discovery failures This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

Oracle Solaris NSSwitch Unauthorized Access

The vulnerability of the NSSwitch component in Oracle Solaris systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized read, modify, or delete access to data, or cause service failures through various network protocols...

Eclipse Jetty Proxy Failure

The vulnerability of Eclipse Jetty servlet containers exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause failures in the proxy scenarios...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

GNU Core Utilities File Copying DoS

The vulnerability of the file copying utility cp in the GNU Core Utilities system for the EMIAS OS operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow an attacker to cause service failures or have other...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

SNC_io parser Heap Buffer Overflow DoS

Vulnerability of SNCio parser: ::readsface; sfh-boundaryentryobjects. The Edgeof component NefS2/SNCio parser.h is part of the computational geometry library CGAL. This vulnerability is related to unvalidated array indexing. Exploitation of this vulnerability allows unauthorized access to...