Null pointer dereference

Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability. The 0x22200B IOCTL code of the Vba32m64.sys driver allows to read up to 0x802 of memory from ar arbitrary user-supplied pointer...

Design/Logic Flaw

Uncontrolled Resource Consumption in GitHub repository mbloch/mapshaper prior to 0.6.44...

CVE-2024-1140

CVE-2024-1140 affects Twister Antivirus v8.17, vulnerable via an out-of-bounds read triggered by IOCTL 0x801120B8 to the filmfd.sys driver. Affected component is the filmfd.sys driver path used by Twister Antivirus. Root cause described across sources as an out-of-bounds read when handling the 0x...

CVE-2024-23440

CVE-2024-23440 affects Vba32 Antivirus v3.36.0. The vulnerability is an Arbitrary Memory Read via the 0x22200B IOCTL of the Vba32m64.sys driver, enabling reading up to 0x802 bytes from an arbitrary user-supplied pointer. Impact: potential leakage of memory contents. Exploitation status is not pro...

CVE-2024-23439

CVE-2024-23439 affects Vba32 Antivirus v3.36.0. The issue is an Arbitrary Memory Read vulnerability triggered by specific IOCTL codes (0x22201B, 0x22201F, 0x222023, 0x222027, 0x22202B, 0x22202F, 0x22203F, 0x222057, 0x22205B) issued to the Vba32m64.sys driver. Affected component: Vba32m64.sys with...

CVE-2024-1096

Twister Antivirus v8.17 is affected by CVE-2024-1096, a vulnerability in the fildds.sys driver that can trigger a Denial of Service by issuing specific IOCTL codes (0x80112067, 0x801120CB, 0x801120CC, 0x80112044, 0x8011204B, 0x8011204F, 0x80112057, 0x8011205B, 0x8011205F, 0x80112063, 0x8011206F, ...

CVE-2024-1163

CVE-2024-1163 maps to a path traversal vulnerability in mapshaper (mbloch/mapshaper) prior to version 0.6.44. The root cause is unsanitized/unsafe handling of the request URL path, enabling an attacker to read arbitrary files on the system with the user’s privileges. Public sources in the connect...

Type confusion

To keep its cache database efficient, named running as a recursive resolver occasionally attempts to clean up the database. It uses several methods, including some that are asynchronous: a small chunk of memory pointing to the cache element that can be cleaned up is first allocated and then queue...

Design/Logic Flaw

An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN...

Design/Logic Flaw

The DNS message parsing code in named includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected named instance by exploiting this flaw. This issue affects bot...

Code injection

Uncontrolled Resource Consumption vulnerability in Honeywell Niagara Framework on Windows, Linux, QNX allows Content Spoofing.This issue affects Niagara Framework: before Niagara AX 3.8.1, before Niagara 4.1...

Design/Logic Flaw

Rejected reason: REJECT Not a valid vulnerability...

Design/Logic Flaw

If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query performance. This issue affects BIND 9 versions 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and...

CVE-2023-6516

CVE-2023-6516 affects ISC BIND (named) as a denial-of-service vector via an out-of-memory condition in the cache-cleanup path when recursive queries trigger maintenance. The issue can allow memory usage to exceed max-cache-size, potentially causing DoS on vulnerable BIND 9 installations. Affected...

CVE-2023-5679

CVE-2023-5679 : A bad interaction between DNS64 and serve-stale in ISC BIND can cause named to crash with an assertion failure during recursive resolution when both features are enabled. Affected products/versions include BIND 9.16.x (notably up to 9.16.45) and 9.18.x/9.19.x series with correspon...

CVE-2023-5517

CVE-2023-5517 is a BIND vulnerability where a flaw in query-handling can cause named to exit with an assertion failure when nxdomain-redirect is configured and a PTR query for an RFC 1918 address would yield NXDOMAIN. Affected: BIND 9.x (various 9.12.0–9.19.19 and related 9.16/9.18 ranges; versio...

CVE-2023-4408

The CVE-2023-4408 issue is a vulnerability in the DNS message parsing of BIND's named where the parsing path has an overly high computational complexity. A crafted large or malformed DNS message can cause high CPU usage on affected BIND 9 releases, potentially impacting both authoritative servers...

CVE-2024-24782

CVE-2024-24782 describes an access control/origin verification error that allows an unauthenticated attacker to send a ping between isolated networks (across VLAN-segregated ports). Affected products in the connected data include HIMA Paul Hildebrandt F Series and X Series, with the underlying is...

CVE-2024-1309

CVE-2024-1309 describes an Uncontrolled Resource Consumption vulnerability in Honeywell Niagara Framework on Windows, Linux, and QNX that enables Content Spoofing. Affected versions are Niagara AX < 3.8.1 and Niagara 4

CVE-2023-6072

The CVE-2023-6072 entry concerns Trellix Central Management (CM). A cross-site scripting vulnerability exists in CM versions prior to 9.1.3.97129, enabling a remote authenticated attacker to craft CM dashboard internal requests and inject arbitrary content into dashboard responses. Affected produ...