dotnet: .NET Framework: Denial of Service via network-based buffer overflow

A flaw was found in .NET Framework. This vulnerability, a stack-based buffer overflow, allows an unauthorized attacker to remotely exploit the system over a network. Successful exploitation can lead to a denial of service DoS, making the affected system unavailable to legitimate users...

CVE-2025-25248

Fortinet CVE-2025-25248 is an Integer Overflow (CWE-190) affecting FortiOS and related Fortinet SSL-VPN components, including FortiOS, FortiProxy, and FortiPAM. The issue concerns SSL-VPN RDP and VNC bookmarks that may allow an authenticated user to affect device availability via crafted requests...

Important: java-17-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15,...

CVE-2024-57482

The CVE-2024-57482 entry concerns H3C N12 V100R005 with a buffer overflow caused by missing length verification in the 5G wireless network processing function. A remote actor can crash the target or run arbitrary commands by sending a POST to /bin/webs. Public details confirm the affected device ...

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists due to unauthorized network access which allows a remote attacker to crash the application via multiple protocols to compromise MySQL Server...

CVE-2010-2976

The controller in Cisco Unified Wireless Network UWN Solution 7.x through 7.0.98.0 has 1 a default SNMP read-only community of public, 2 a default SNMP read-write community of private, and a value of "default" for the 3 SNMP v3 username, 4 SNMP v3 authentication password, and 5 SNMP v3 privacy...

Code injection

ircu 2.10.12.03 and 2.10.12.04 does not associate a timestamp with ops privilege on an unused channel zannel, which allows remote attackers to 1 set or remove certain channel modes via a "netriding" attack or 2 take over a channel by joining an unlinked server with the A/Upass and then setting a...

CVE-2004-2705

Unspecified vulnerability in Player vs. Player Gaming Network PvPGN before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq packets...

Mandrake Linux Security Advisory : kdenetwork (MDKSA-2002:080)

The SuSE security team discovered two vulnerabilities in the KDE lanbrowsing service during an audit. The LISa network daemon and 'reslisa', a restricted version of LISa are used to identify servers on the local network by using the URL type 'lan://' and 'rlan://' respectively. A buffer overflow...