Extensions API Disclosure DoS

The vulnerability of the Extensions API for Google Chrome and Microsoft Edge lies in the improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures through a specially created...

blkfront Xen DoS

The vulnerability of the blkfront component in the Xen hypervisor is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Linux eBPF DoS

The vulnerability of the eBPF subsystem in the Linux operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures, unexpected termination of applications, or execute arbitrary code...

Cisco Expressway TelePresence Video Communication Server API Disclosure DoS

The vulnerability of the API interface of the microprogramming software for Cisco Expressway and the microprogramming software for the Cisco TelePresence Video Communication Server exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to...

SBIOS Component Code Execution

The vulnerability of the SBIOS component in the NVIDIA DGX A100 IpSecDxe server is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to execute arbitrary code, cause service failures, or compromise the integrity of the protected information...

Updated mariadb packages fix security vulnerability

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. CVE-2018-25032 A use-after-poison in prepareinplaceaddvirtual at /storage/innobase/handler/handler0alter.cc. CVE-2022-32081 An assertion failure at table-getrefcount == 0 in...

OPC UA Data Transfer Resource Consumption DoS

The vulnerability of implementations of data transfer specifications in industrial networks OPC UA is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

opcua asyncua Uncontrolled Resource Consumption DoS

The vulnerability of opcua and asyncua libraries is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

implementations of data transmission DoS

The vulnerability of implementations of data transmission specifications in industrial networks is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

implementations of data transmission DoS

The vulnerability of implementations of data transmission specifications in industrial networks is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Magento Open Source Access Control DoS

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Linux /net/nfc/netlink.c DoS

The vulnerability in the /net/nfc/netlink.c component of the Linux operating system is related to an unintercepted exception. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

SCALANCE W1788-1 M12 RemoteCapture DoS

The vulnerability of the RemoteCapture function in the microprogrammed software of industrial switches SCALANCE W1788-1 M12, SCALANCE W1788-2 EEC M12, SCALANCE W1788-2 M12, and SCALANCE W1788-2IA M12 exists due to insufficient verification of input data. Exploiting this vulnerability can allow a...

resolved-dns-stream Code Execution

The vulnerabilities of the onstreamio and dnsstreamcomplete functions in the resolved-dns-stream.c component of the initialization and service management subsystem of the Systemd-based Linux operating systems are related to the use of memory after it is freed. Exploiting these vulnerabilities cou...

Intel Ethernet E810 Controller DoS

The vulnerability of Intel Ethernet E810 controller’s microprogramming software is related to access control deficiencies. Exploiting this vulnerability can allow attackers to cause service failures...

Intel Ethernet E810 Controller DoS

The vulnerability of Intel Ethernet E810 controller’s microprogramming software is related to access control deficiencies. Exploiting this vulnerability can allow attackers to cause service failures...

Use safetransfer/safetransferFrom consistently instead of transfer/transferFrom

Lines of code Vulnerability details Impact Its a good to add require statement to checks the return value of token transfer or using safetransfer or safetransferFrom on Openzeppelin to ensure the token revert when transfer failure. Failure to do so will cause silent failures of transfer and affec...

Teamcenter File Server Cache DoS

The vulnerability of the File Server Cache service in the Teamcenter product lifecycle management system is related to the execution of a cycle with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...

EcoStruxure Control Expert Buffer Overflow DoS

The vulnerability of the EcoStruxure Control Expert programming tool for programmable logic controllers involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

SAP Business One XXE DoS

The vulnerability of the SAP Business One resource management system is related to errors in XML references to external objects XXE. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...