vmwgfx Driver Privilege Escalation

The vulnerability of the vmwgfx driver drivers/gpu/vmxgfx/vmxgfxexecbuf.c in the Linux operating system is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service failures...

CVE-2022-31225: Unchecked Return Value

Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated administrator user could potentially exploit this vulnerability in order to change the state of the system or cause unexpected failures...

CVE-2022-31220: Insecure Automated Optimizations

Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated administrator user could potentially exploit this vulnerability in order to change the state of the system or cause unexpected failures...

Kubernetes Cluster Synchronization Resource Cleanup DoS

The vulnerability of the Kubernetes cluster synchronization software, which relies on configuration sources like Flux and the Kubernetes package manager Helm, is related to improper resource cleanup or release. Exploiting this vulnerability allows a malicious actor to cause service failures...

Azure Site Recovery DoS

The vulnerability of the disaster recovery tool for Azure virtual machines exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Prosody WebSocket DoS

The vulnerability of the WebSocket server implementation for Jabber/XMPP Prosody is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Eclipse Jetty Uncontrolled Resource Consumption DoS

The vulnerability of Eclipse Jetty servlet containers is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Core Component Oracle Coherence DoS

The vulnerability of the Core component of the Oracle Coherence data processing software exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using the specially crafted T3 network protocol...

Microsoft Visual Studio .NET Framework Resource Leak DoS

The vulnerability of the Microsoft Visual Studio software development tool and the Microsoft.NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Go compress/gzip DoS

The vulnerability of the Go programming language’s compress/gzip package is related to unmanaged recursion. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

Microsoft Visual Studio .NET Framework Resource Leak DoS

The vulnerability of the Microsoft Visual Studio software development tool and the Microsoft.NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Microsoft Visual Studio .NET Framework Resource Leak DoS

The vulnerability of the Microsoft Visual Studio software development tool and the Microsoft.NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

GitLab DoS

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

client_golang DoS

The vulnerability of the clientgolang library in the monitoring and event-notification application for Prometheus is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

mariadb: assertion failures in decimal_bin_size

A flaw was found in the MariaDB Server. It contains a global buffer overflow in the component, decimalbinsize, which is exploited via specially crafted SQL statements, impacting availability...

blkfront driver Xen DoS

The vulnerability of the blkfront driver in the PV command of the Xen hypervisor is caused by synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

Extensions API Disclosure DoS

The vulnerability of the Extensions API for Google Chrome and Microsoft Edge lies in the improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures through a specially created...

mlx5 driver DPDK DoS

The vulnerability of the mlx5 driver for libraries and drivers used in fast packet processing in DPDK is related to unlimited resource allocation. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

ASUS RT-AC86U Command Injection

The vulnerability of the microprogrammed Wi-Fi router software from ASUS, the RT-AC86U, exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands or cause...

CRI environment DoS

The vulnerability of the CRI environment for Containerd implementations is related to uncontrolled resource consumption. Exploiting this vulnerability can allow attackers to cause service failures...