PT-2024-13274 · Vconsole · Vconsole

Name of the Vulnerable Software and Affected Versions: Console affected versions not specified Description: The console may experience a service interruption when processing file names with invalid characters. Recommendations: At the moment, there is no information about a newer version that...

The vulnerability of the PowerScale OneFS operating system, related to the use of hidden time channels for data transmission, allows a hacker to trigger a service failure.

The vulnerability of the PowerScale OneFS operating system lies in the use of hidden time channels for data transmission. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerabilities of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices involve a data protection mechanism that can be exploited, allowing an attacker to cause the device to fail.

The vulnerability of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

The vulnerability of the vlan_dev_hard_header function in the Linux kernel’s team component, which allows a hacker to cause a service failure.

The vulnerability of the vlandevhardheader function in the Linux kernel’s team component is related to a pointer dereferencing error. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerabilities of the functions create_dir(), __kobject_del(), kobject_cleanup(), and kobj_child_ns_ops() in the b/kobject.c library of the Linux operating system’s kernel allow a attacker to cause a service failure.

The vulnerabilities of the functions createdir, kobjectdel, kobjectcleanup, and kobjchildnsops in the b/kobject.c library of the Linux operating system are related to pointer arithmetic errors. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

The vulnerability of the `dc_link_construct()` function (drm/amd/display) in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the dclinkconstruct function drm/amd/display in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

CVE-2024-22182

The CVE-2024-22182 entry concerns the Commend WS203VICM video door station. A remote, unauthenticated attacker can send crafted messages to the device’s web server causing a restart and service disruption. Technical details across sources identify this as an Argument Injection (CWE-88) flaw affec...

CVE-2024-22182 Commend WS203VICM Argument Injection

A remote, unauthenticated attacker may be able to send crafted messages to the web server of the Commend WS203VICM causing the system to restart, interrupting service...

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the uncontrolled resource consumption, which allows attackers to cause service failures.

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

CVE-2024-22054

A malformed discovery packet sent by a malicious actor with preexisting access to the network could interrupt the functionality of device management and discovery. Affected Products: UniFi Access Points UniFi Switches UniFi LTE Backup UniFi Express Only Mesh Mode, Router mode is not affected...

Design/Logic Flaw

A malformed discovery packet sent by a malicious actor with preexisting access to the network could interrupt the functionality of device management and discovery. Affected Products: UniFi Access Points UniFi Switches UniFi LTE Backup UniFi Express Only Mesh Mode, Router mode is not affected...

CVE-2024-22054

A malformed discovery packet sent by a malicious actor with preexisting access to the network could interrupt the functionality of device management and discovery. Affected Products: UniFi Access Points UniFi Switches UniFi LTE Backup UniFi Express Only Mesh Mode, Router mode is not affected...

CVE-2024-22054

A malformed discovery packet sent by a malicious actor with preexisting access to the network could interrupt the functionality of device management and discovery. Affected Products: UniFi Access Points UniFi Switches UniFi LTE Backup UniFi Express Only Mesh Mode, Router mode is not affected...

The vulnerability of the Windows operating system’s Network Address Translation (NAT) technology allows a hacker to induce a service failure.

The vulnerability of the Network Address Translation NAT technology implementation in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the DNS Client component for Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the DNS Client component for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

PT-2024-1855 · Commend · Commend Ws203Vicm

Name of the Vulnerable Software and Affected Versions: Commend WS203VICM affected versions not specified Description: A remote, unauthenticated attacker may be able to send crafted messages to the web server of the Commend WS203VICM, causing the system to restart and interrupting service. The...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service interruptions...

The vulnerability of the ngx_http_v3_module in NGINX and NGINX Plus servers allows a hacker to cause a service failure.

The vulnerability of the ngxhttpv3module in NGINX and NGINX Plus servers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of HTTP/3 QUIC modules in NGINX Plus and NGINX OSS web servers allows attackers to cause service interruptions.

The vulnerability of HTTP/3 QUIC in NGINX Plus and NGINX OSS web servers is related to the swapping of the zero pointer. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted requests...

The vulnerability of the tiffrasterscanlinesize64() function in the LibTIFF library, which allows a hacker to cause a service failure

The vulnerability of the tiffrasterscanlinesize64 function in the LibTIFF library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...