Lucene search
+L

18767 matches found

BDU FSTEC
BDU FSTEC
added 2024/09/24 12:00 a.m.17 views

The vulnerability of the Webmin control panel for hosting services, related to a loop with an unreachable exit condition, allows attackers to cause a service failure.

The vulnerability of the Webmin control panel involves a cycle with an unreachable exit condition. Exploiting this vulnerability allows a malicious actor to cause service failures...

7.8CVSS5.4AI score0.00623EPSS
SaveExploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/24 12:00 a.m.9 views

The vulnerability of the Go programming language’s network component, which allows a hacker to trigger a service failure

The vulnerability of the Go programming language component is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS7AI score0.01001EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:00 a.m.11 views

The vulnerability of the PHP programming language, related to the execution of loops with an unavailable exit condition, allows attackers to cause service failures.

The vulnerability of the PHP programming language lies in the execution of a loop with an unavailable exit condition. Exploiting this vulnerability allows an attacker to cause a service failure...

5.5CVSS6.9AI score0.00609EPSS
SaveExploits0References14Affected Software5
OpenVAS
OpenVAS
added 2024/09/21 12:00 a.m.61 views

openSUSE: Security Advisory for kubernetes1.23 (SUSE-SU-2024:3341-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.7CVSS8.5AI score0.99999EPSS
SaveExploits23References4
OSV
OSV
added 2024/09/19 7:15 p.m.9 views

CVE-2024-40125

An arbitrary file upload vulnerability in the Media Manager function of Closed-Loop Technology CLESS Server v4.5.2 allows attackers to execute arbitrary code via uploading a crafted PHP file to the upload endpoint...

9.8CVSS6.1AI score0.00883EPSS
SaveExploits1References2
NVD
NVD
added 2024/09/19 7:15 p.m.23 views

CVE-2024-40125

An arbitrary file upload vulnerability in the Media Manager function of Closed-Loop Technology CLESS Server v4.5.2 allows attackers to execute arbitrary code via uploading a crafted PHP file to the upload endpoint...

9.8CVSS0.00883EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 2024/09/19 3:11 a.m.7 views

SUSE CVE-2024-46718

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't overmap identity VRAM mapping Overmapping the identity VRAM mapping is triggering hardware bugs on certain platforms. Use 2M pages for the last unaligned to 1G VRAM chunk. v2: - Always use 2M pages for last chunk Fe...

5.5CVSS8AI score0.00177EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/09/19 12:00 a.m.36 views

CVE-2024-40125

An arbitrary file upload vulnerability in the Media Manager function of Closed-Loop Technology CLESS Server v4.5.2 allows attackers to execute arbitrary code via uploading a crafted PHP file to the upload endpoint...

0.00883EPSS
SaveExploits1References2
CVE
CVE
added 2024/09/19 12:00 a.m.54 views

CVE-2024-40125

The CVE-2024-40125 entry concerns Closed Loop Technology CLESS Server v4.5.2, where the Media Manager’s file upload endpoint is vulnerable to arbitrary PHP file uploads. The underlying issue enables remote code execution because a crafted PHP file can be uploaded and subsequently executed on the ...

9.8CVSS8.1AI score0.00883EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/19 12:00 a.m.15 views

CVE-2024-40125

An arbitrary file upload vulnerability in the Media Manager function of Closed-Loop Technology CLESS Server v4.5.2 allows attackers to execute arbitrary code via uploading a crafted PHP file to the upload endpoint...

8.1AI score0.00883EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2024/09/18 4:07 p.m.8 views

golang: net: malformed DNS message can cause infinite loop

A flaw was found in the net package of the Go stdlib. When a malformed DNS message is received as a response to a query, the Lookup functions within the net package can get stuck in an infinite loop. This issue can lead to resource exhaustion and denial of service DoS conditions...

5.9CVSS7.3AI score0.01001EPSS
SaveExploits0References5
NVD
NVD
added 2024/09/18 3:15 p.m.29 views

CVE-2023-28455

An issue was discovered in Technitium through 11.0.2. The forwarding mode enables attackers to create a query loop using Technitium resolvers, launching amplification attacks and causing potential DoS...

7.5CVSS0.0053EPSS
SaveExploits0References2
OSV
OSV
added 2024/09/18 3:15 p.m.8 views

CVE-2023-28455

An issue was discovered in Technitium through 11.0.2. The forwarding mode enables attackers to create a query loop using Technitium resolvers, launching amplification attacks and causing potential DoS...

7.5CVSS5.8AI score0.0053EPSS
SaveExploits0References2
OSV
OSV
added 2024/09/18 7:15 a.m.5 views

UBUNTU-CVE-2024-46729

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix incorrect size calculation for loop WHY feclken has size of 5 but sizeoffeclken has byte size 20 which is lager than the array size. HOW Divide byte size 20 by its element size. This fixes 2 OVERRUN issues...

7.8CVSS6.5AI score0.00212EPSS
SaveExploits0References10
Cvelist
Cvelist
added 2024/09/18 6:32 a.m.46 views

CVE-2024-46729 drm/amd/display: Fix incorrect size calculation for loop

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix incorrect size calculation for loop WHY feclken has size of 5 but sizeoffeclken has byte size 20 which is lager than the array size. HOW Divide byte size 20 by its element size. This fixes 2 OVERRUN issues...

0.00212EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/09/18 12:00 a.m.7 views

Technitium DNS Server 安全漏洞

Technitium DNS Server is an open source authoritative and recursive DNS server from the Technitium team. It can be used to self-host DNS servers for privacy and security. A security vulnerability exists in Technitium DNS Server version 11.0.2 and earlier, which stems from a forwarding pattern tha...

7.5CVSS6.5AI score0.0053EPSS
SaveExploits0References3
Redos
Redos
added 2024/09/18 12:00 a.m.16 views

ROS-20240918-05

A vulnerability in the net component of the Golang programming language is related to the execution of a loop with an inaccessible exit condition. exit condition. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

5.9CVSS7AI score0.01001EPSS
SaveExploits0
Cvelist
Cvelist
added 2024/09/18 12:00 a.m.31 views

CVE-2023-28455

An issue was discovered in Technitium through 11.0.2. The forwarding mode enables attackers to create a query loop using Technitium resolvers, launching amplification attacks and causing potential DoS...

0.0053EPSS
SaveExploits0References2
CVE
CVE
added 2024/09/18 12:00 a.m.57 views

CVE-2023-28455

The CVE-2023-28455 issue affects Technitium DNS Server (up to v11.0.2). The root cause is a forwarding mode pattern that can create query loops in Technitium resolvers, enabling amplification and potential DoS. Documented impacts describe denial-of-service risk due to network-based query looping....

7.5CVSS6.9AI score0.0053EPSS
SaveExploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2024/09/14 2:51 a.m.6 views

SUSE CVE-2024-46681

In the Linux kernel, the following vulnerability has been resolved: pktgen: use cpusreadlock in pgnetinit I have seen the WARNONsmpprocessorid != cpu firing in pktgenthreadworker during tests. We must use cpusreadlock/cpusreadunlock around the foreachonlinecpucpu loop. While we are at it use...

2.5CVSS6.5AI score0.00203EPSS
SaveExploits0References16
Rows per page
Query Builder