PT-2024-10217 · Ibm · Ibm Security Reaqta

Name of the Vulnerable Software and Affected Versions: IBM Security ReaQta version 3.12 Description: The issue is related to improper allocation of resources, which could allow a privileged user to cause a denial of service by sending multiple administration requests. This could potentially be...

The vulnerability of the python-eventlet library used by the OpenStack Platform for building cloud solutions allows a attacker to cause service failures.

The vulnerability of the python-eventlet library used by the OpenStack Platform for building cloud solutions is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Cisco Secure Client (formerly Cisco AnyConnect Secure Mobility Client) endpoint security mechanism, related to improper cleaning or release of resources, allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco Secure Client formerly Cisco AnyConnect Secure Mobility Client endpoint security mechanism is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a attacker to cause service failures...

The vulnerability of the Oracle Solaris operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the Oracle Solaris operating system’s kernel is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

IBM WebSphere Application Server Liberty 23.0.0.9 < 23.0.0.11 Security Weakness (7058356)

The IBM WebSphere Application Server Liberty running on the remote host is 23.0.0.9 prior to 23.0.0.11. It may, therefore, provide weaker than expected security due to improper resource expiration handling. Note that Nessus has not tested for this issue but has instead relied only on the...

CVE-2023-46158 IBM WebSphere Application Server session fixation

IBM WebSphere Application Server Liberty 23.0.0.9 through 23.0.0.10 could provide weaker than expected security due to improper resource expiration handling. IBM X-Force ID: 268775...

Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows attackers to perform DoS attacks.

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to improper resource cleanup. Exploiting this vulnerability can allow a remote attacker to execute a DoS Denial-of-Service attack...

Security Bulletin: IBM WebSphere Application Server Liberty could provide weaker than expected security (CVE-2023-46158)

Summary IBM WebSphere Application Server Liberty could provide weaker than expected security with the appSecurity-1.0, appSecurity-2.0, appSecurity-3.0, appSecurity-4.0 or appSecurity-5.0 feature enabled. Vulnerability Details CVEID:CVE-2023-46158 DESCRIPTION: IBM WebSphere Application Server...

The vulnerability of the RPC server of the Samba networking communication software allows a attacker to trigger a service failure.

The vulnerability of the Samba networking communication server RPC server is related to the improper release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Vulnerability of Windows operating system deployment services, allowing attackers to trigger service failures

The vulnerability of Windows operating system deployment services is related to improper resource cleaning. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Hitachi Energy AFS65x,AFF66x, AFS67x, and AFR67x Series Products

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Hitachi Energy Equipment : AFS65x, AFF66x, AFS67x, AFR67x Series Vulnerabilities : Incorrect Calculation, Integer Overflow or Wraparound, Improper Encoding or Escaping of Output, Exposure of...

The vulnerability of the AireOS operating system, related to improper cleaning or release of resources, allows a perpetrator to trigger a system reboot.

The vulnerability of the AireOS operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to trigger a system reboot...

Design/Logic Flaw

An improper resource allocation vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to creation of an arbitrary directory. An attacker can send a sequence of...

CVE-2023-34994

An improper resource allocation vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to creation of an arbitrary directory. An attacker can send a sequence of...

CVE-2023-34994

Open Automation Software OAS Platform v18.00.0072 contains an improper resource allocation vulnerability in the OAS Engine configuration management functionality. Talos notes that an unauthenticated or low-privileged user can leverage the configuration tool (including a remote file browser that a...

CVE-2023-34994

An improper resource allocation vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to creation of an arbitrary directory. An attacker can send a sequence of...

PT-2023-25084 · Open Automation · Open Automation Software Oas Platform

Name of the Vulnerable Software and Affected Versions: Open Automation Software OAS Platform version 18.00.0072 Description: An improper resource allocation issue exists in the OAS Engine configuration management functionality. A specially crafted series of network requests can lead to the creati...

Open Automation Software OAS Platform OAS Engine configuration management improper resource allocation vulnerability

Talos Vulnerability Report TALOS-2023-1773 Open Automation Software OAS Platform OAS Engine configuration management improper resource allocation vulnerability September 5, 2023 CVE Number CVE-2023-34994 SUMMARY An improper resource allocation vulnerability exists in the OAS Engine configuration...

The vulnerability of the CryptoAPI programming interface for Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the CryptoAPI programming interface for Windows operating systems relates to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Devolutions Server 安全漏洞

Devolutions Server is an application from Devolutions Canada. provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server version 2023.1.8 and prior versions, which stems from improper resource deletion in the user management...