231580 matches found
Design/Logic Flaw
Cloudflare Quiche through version 0.19.1/0.20.0 was affected by an unlimited resource allocation vulnerability causing rapid increase of memory usage of the system running quiche server or client. A remote attacker could take advantage of this vulnerability by repeatedly sending an unlimited numb...
Design/Logic Flaw
Cloudflare quiche was discovered to be vulnerable to unbounded storage of information related to connection ID retirement, which could lead to excessive resource consumption. Each QUIC connection possesses a set of connection Identifiers IDs; see RFC 9000 Section 5.1...
Privilege escalation
The FTL Server component of TIBCO Software Inc.'s TIBCO FTL - Enterprise Edition contains a vulnerability that allows a low privileged attacker with network access to execute a privilege escalation on the affected ftlserver. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Enterprise...
Privilege escalation
The Proxy and Client components of TIBCO Software Inc.'s TIBCO ActiveSpaces - Enterprise Edition contain a vulnerability that theoretically allows an Active Spaces client to passively observe data traffic to other clients. Affected releases are TIBCO Software Inc.'s TIBCO ActiveSpaces - Enterpris...
CVE-2024-1410
CVE-2024-1410 affects Cloudflare quiche, an open-source QUIC implementation. The issue is unbounded storage of information related to connection ID retirement, where an unauthenticated attacker can cause RETIRE_CONNECTION_ID frames to arrive faster than they can be retired, potentially overflowin...
CVE-2024-1765
Cloudflare Quiche (up to 0.19.1/0.20.0) contains an unlimited resource allocation vulnerability where an attacker floods QUIC CRYPTO frames (1-RTT) after the QUIC handshake, causing rapid memory usage growth on the affected system. The issue affects both server and client implementations and coul...
Privilege escalation
Windows Graphics Component Elevation of Privilege Vulnerability...
Information disclosure
Windows Kernel Information Disclosure Vulnerability...
Information disclosure
Windows Kernel Information Disclosure Vulnerability...
Privilege escalation
Windows USB Print Driver Elevation of Privilege Vulnerability...
Remote code execution
Windows USB Hub Driver Remote Code Execution Vulnerability...
Information disclosure
Microsoft Teams for Android Information Disclosure Vulnerability...
Security feature bypass
Windows Kerberos Security Feature Bypass Vulnerability...
Privilege escalation
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability...
Design/Logic Flaw
Windows Compressed Folder Tampering Vulnerability...
Denial of service
Microsoft QUIC Denial of Service Vulnerability...
Denial of service
Windows Kernel Denial of Service Vulnerability...
Privilege escalation
Windows Composite Image File System CimFS Elevation of Privilege Vulnerability...
Authentication flaw
An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required...