Squid proxy server Input Validation DoS

The vulnerability of the Squid proxy server exists due to insufficient input validation during the processing of HTTP responses. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

SDWAN doesn't support "MSS Clamping" in PPPoE Internet Service (Before version 11.3.1), that causes some external web pages can't be loaded

When users access internet web servers through SDWAN Internet Service. Meanwhile, the Internet Service is a PPPoE Link.The internet access may fail when load some pages...

MtcSetDataItem Function Privilege Escalation

The vulnerability of the MtcSetDataItem function in the embedded web server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and cause service failures using a specially crafted package...

Bind9 DNS Forward First DoS

The “forward first” mode of the Bind9 DNS server has vulnerabilities due to insufficient validation of input data. Exploiting these vulnerabilities can allow a malicious actor to cause service failures...

libuv DNS DoS

The vulnerability of the libuv library for DNS-servers like Bind9 is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures...

MGASA-2021-0220 Updated bind packages fix security vulnerabilities

A broken inbound incremental zone update IXFR can cause named to terminate unexpectedlyCVE-2021-25214. Mageia 7 version not affected. An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself CVE-2021-25215. This affects both...

Cisco SD-WAN vDaemon DoS

The vulnerability of the vDaemon process in Cisco SD-WAN is due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

PT-2024-11154

Name of the Vulnerable Software and Affected Versions Linux kernel version 5.13.0-rc1+ Description The vulnerability is related to RDMA/rxe, where an invalid lkey is supplied, causing a kernel panic when an atomic operation is sent with an explicitly wrong lkey. The issue arises from the missing...

Oracle Solaris Kernel DoS Data Modification

The vulnerability of the Kernel component in Oracle Solaris operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures or gain access to modify, add, or delete data...

Use safeTransfer/safeTransferFrom consistently instead of transfer/transferFrom

Handle 0xRajeev Vulnerability details Impact It is good to add a require statement that checks the return value of token transfers or to use something like OpenZeppelin’s safeTransfer/safeTransferFrom unless one is sure the given token reverts in case of a failure. Failure to do so will cause...

GPAC Integer Overflow Vulnerability (CNVD-2022-04965)

GPAC is an open source multimedia framework. GPAC 1.0.1 is vulnerable to integer overflow, which can be exploited by attackers to cause assignment failures...

ClamAV Macro Analysis DoS

The vulnerability of the Excel XLM module in the ClamAV antivirus software package exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Microsoft SharePoint Server DoS

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

NTFS DoS

The vulnerability of the DNS service in Microsoft Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Application Compatibility Cache DoS

The vulnerability of the Application Compatibility Cache component “AppCompatCache” in Microsoft Windows systems is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CDATA Optical Line Terminals Resource Release DoS

The vulnerability of the CDAATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 optical li...

Mozilla Firefox Thunderbird Privilege Escalation

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to incorrect handling of zero bytes or NULL values during data exchange. Exploiting these vulnerabilities can allow an attacker to increase their privileges or cause service failures...

GPAC input validation error vulnerability

GPAC is an open source multimedia framework. GPAC 1.0.1 is vulnerable to integer overflow, which can be exploited by attackers to cause assignment failures...

SUSE: Security Advisory (SUSE-SU-2019:0941-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:0653-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...