dcmdata libsrc dcbytstr Heap Buffer Overflow DoS

The vulnerability of the DcmByteString::makeDicomByteString function in the dcmdata/libsrc/dcbytstr.cc library, which is used for working with DICOM format data, relates to the issue of the operation’s output being stored outside of the buffer. Exploiting this vulnerability could allow an attacke...

UTT 1200GW DoS

The vulnerability of the formArpBindConfig function in the UTT 1200GW network device software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2024-12537

In version 0.3.32 of open-webui/open-webui, the absence of authentication mechanisms allows any unauthenticated attacker to access the api/v1/utils/code/format endpoint. If a malicious actor sends a POST request with an excessively high volume of content, the server could become completely...

KWHotel CSV DoS

The vulnerability of the KWHotel hotel management software is related to the lack of mechanisms for neutralizing elements in the CSV file. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Sante PACS Server DoS

The vulnerability of the URL parsing module of the Sante PACS Server PG system is related to insufficient data validation during URL parsing. Exploiting this vulnerability could allow an attacker to cause service interruptions...

Online Certificate Status Protocol DoS

The vulnerability of the Online Certificate Status Protocol OCSP implementation in Windows operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Intel PROSet/Wireless WiFi Network Device Access Control DoS

The vulnerability of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to cause service interruptions...

CloudFlare Quiche DoS

The vulnerability of the software implementing the transport protocols QUIC and HTTP/3 in CloudFlare Quiche is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Cisco NX-OS TACACS RADIUS DoS

The vulnerability of the TACACS and RADIUS protocols for operating systems of Cisco NX-OS routers such as MDS 9000, Nexus 1000, Nexus 1000V, Nexus 3000, Nexus 5500, Nexus 5600, Nexus 6000, Nexus 7000, and Nexus 9000 exists due to insufficient validation of input data. Exploiting this vulnerabilit...

Cisco IOS XE CAPWAP DoS

The vulnerability of the CAPWAP management protocol implementation and wireless access point provisioning in Cisco IOS XE operating systems is related to insufficient validation of CAPWAP packets. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

ImfMultiPartInputFile Buffer Overflow DoS

The vulnerability of the ImfMultiPartInputFile component, which handles graphic image files in OpenEXR format, relates to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause service interruptions...

JunOS SRX1500 DoS

The vulnerability of the srxpfe process in the JunOS operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...