Lucene search
K

2543 matches found

Veracode
Veracode
added 2024/10/22 6:10 a.m.11 views

Denial Of Service (DoS)

Next.js is vulnerable to a Denial of Service DoS. The vulnerability is due to improper handling of image optimization, allowing for excessive resource consumption that can lead to a Denial of Service DoS attack...

7.5CVSS7.4AI score0.01306EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2024/10/21 6:15 p.m.0 views

UBUNTU-CVE-2024-49907

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before using dc-clkmgr WHY & HOW dc-clkmgr is null checked previously in the same function, indicating it might be null. Passing "dc" to "dc-hwss.applyidlepoweroptimizations", which dereferenc...

5.5CVSS6.2AI score0.00011EPSS
Exploits0References32
CNNVD
CNNVD
added 2024/10/18 12:0 a.m.1 views

ACON 输入验证错误漏洞

ACON is an Adaptive Correlation Optimization Network package from the Torin Etheridge Personal Developer. An input validation error vulnerability exists in versions of ACON prior to 1.0.0, which stems from a vulnerability that allows an attacker to submit malicious input data to bypass input...

9.3CVSS7.7AI score0.00514EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/18 12:0 a.m.1 views

The vulnerability of Microsoft DeepSpeed’s optimization library, related to the failure to take measures to neutralize special elements used in the operating system’s command set, allows attackers to execute arbitrary code.

The vulnerability of Microsoft DeepSpeed’s optimization library relates to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability can allow attackers to execute arbitrary code...

8.4CVSS5.9AI score0.00681EPSS
Exploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2024/10/14 7:55 p.m.27 views

CVE-2024-47831

A flaw was found in Next.js. In certain versions, a vulnerability in the image optimization feature allows for a potential Denial of Service DoS condition, which could lead to excessive CPU consumption. Neither the next.config.js file that is configured with images.unoptimized set to true or...

5.9CVSS6.5AI score0.01306EPSS
Exploits1References5
OSV
OSV
added 2024/10/14 7:45 p.m.0 views

GHSA-G77X-44XX-532M Denial of Service condition in Next.js image optimization

Impact The image optimization feature of Next.js contained a vulnerability which allowed for a potential Denial of Service DoS condition which could lead to excessive CPU consumption. Not affected: - The next.config.js file is configured with images.unoptimized set to true or images.loader set to...

8.2CVSS7.2AI score0.01306EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2024/10/14 7:45 p.m.39 views

Denial of Service condition in Next.js image optimization

Impact The image optimization feature of Next.js contained a vulnerability which allowed for a potential Denial of Service DoS condition which could lead to excessive CPU consumption. Not affected: - The next.config.js file is configured with images.unoptimized set to true or images.loader set to...

7.5CVSS6.7AI score0.01306EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2024/10/14 6:15 p.m.17 views

CVE-2024-47831

Next.js is a React Framework for the Web. Cersions on the 10.x, 11.x, 12.x, 13.x, and 14.x branches before version 14.2.7 contain a vulnerability in the image optimization feature which allows for a potential Denial of Service DoS condition which could lead to excessive CPU consumption. Neither t...

7.5CVSS0.01306EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/10/14 6:4 p.m.26 views

CVE-2024-47831 Next.js image optimization has Denial of Service condition

Next.js is a React Framework for the Web. Cersions on the 10.x, 11.x, 12.x, 13.x, and 14.x branches before version 14.2.7 contain a vulnerability in the image optimization feature which allows for a potential Denial of Service DoS condition which could lead to excessive CPU consumption. Neither t...

5.9CVSS0.01306EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/10/14 6:4 p.m.22 views

CVE-2024-47831 Next.js image optimization has Denial of Service condition

Next.js is a React Framework for the Web. Cersions on the 10.x, 11.x, 12.x, 13.x, and 14.x branches before version 14.2.7 contain a vulnerability in the image optimization feature which allows for a potential Denial of Service DoS condition which could lead to excessive CPU consumption. Neither t...

5.9CVSS6.8AI score0.01306EPSS
Exploits1References2
OSV
OSV
added 2024/10/14 6:4 p.m.21 views

CVE-2024-47831 Next.js image optimization has Denial of Service condition

Next.js is a React Framework for the Web. Cersions on the 10.x, 11.x, 12.x, 13.x, and 14.x branches before version 14.2.7 contain a vulnerability in the image optimization feature which allows for a potential Denial of Service DoS condition which could lead to excessive CPU consumption. Neither t...

5.9CVSS6.6AI score0.01306EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/10/14 12:0 a.m.6 views

PT-2024-7169 · Vercel · Next.Js

Name of the Vulnerable Software and Affected Versions: Next.js versions 10.x through 14.x before version 14.2.7 Description: The issue is related to the image optimization feature in Next.js, which contains a vulnerability allowing for a potential Denial of Service DoS condition that could lead t...

7.5CVSS7.5AI score0.01306EPSS
Exploits1References15
Vulnrichment
Vulnrichment
added 2024/10/02 7:35 a.m.11 views

CVE-2024-8800 RabbitLoader – Website Speed Optimization for improving Core Web Vital metrics with Cache, Image Optimization, and more <= 2.21.0 - Reflected Cross-Site Scripting

The RabbitLoader – Website Speed Optimization for improving Core Web Vital metrics with Cache, Image Optimization, and more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and...

6.1CVSS6.1AI score0.01995EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/10/02 7:35 a.m.12 views

CVE-2024-8800 RabbitLoader – Website Speed Optimization for improving Core Web Vital metrics with Cache, Image Optimization, and more <= 2.21.0 - Reflected Cross-Site Scripting

The RabbitLoader – Website Speed Optimization for improving Core Web Vital metrics with Cache, Image Optimization, and more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and...

6.1CVSS0.01995EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/10/02 12:0 a.m.0 views

The vulnerability of the Rockwell Automation Pavilion8 platform’s simulation, control, and optimization functions arises from an improper limitation on the path name to the restricted access catalog. This allows a malicious actor to execute arbitrary code.

The vulnerability of the Rockwell Automation Pavilion8 platform for simulation, control, and optimization is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

10CVSS5.9AI score0.04361EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/09/28 12:0 a.m.30 views

openSUSE 15 Security Update : coredns (openSUSE-SU-2024:0319-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0319-1 advisory. Update to version 1.11.3: optimize the performance for high qps 6767 bump deps Fix zone parser error handling 6680 Add alternate option to forwar...

7.5CVSS7.8AI score0.01524EPSS
Exploits1References13
OSV
OSV
added 2024/09/27 2:1 p.m.28 views

OPENSUSE-SU-2024:0319-1 Security update for coredns

This update for coredns fixes the following issues: Update to version 1.11.3: optimize the performance for high qps 6767 bump deps Fix zone parser error handling 6680 Add alternate option to forward plugin 6681 fix: plugin/file: return error when parsing the file fails 6699 fix:documentation...

7.5CVSS9AI score0.01524EPSS
Exploits1References7
Microsoft KB
Microsoft KB
added 2024/09/26 12:0 a.m.4 views

September 26, 2024—KB5043145 (OS Builds 22621.4249 and 22631.4249) Preview

September 26, 2024—KB5043145 OS Builds 22621.4249 and 22631.4249 Preview 07/09/24---END OF SERVICE NOTICE ---IMPORTANT Home and Pro editions of Windows 11, version 22H2 will reach end of service on October 8, 2024. Until then, these editions will only receive security updates. They will not...

6.5AI score
Exploits0
Veeam
Veeam
added 2024/09/26 12:0 a.m.10 views

Release Information for Veeam Backup for Nutanix AHV 6.1

This update has been superseded by Veeam Backup for Nutanix AHV 7.0, which was released alongside and supports only Veeam Backup & Replication 12.3. Requirements To upgrade to Veeam Backup for Nutanix AHV 6.1, download the installer below and run it on the Veeam Backup & Replication server that...

7AI score
Exploits0Affected Software1
HackRead
HackRead
added 2024/09/24 4:3 p.m.7 views

Harnessing the Power of Cloud App Development and DevOps for Modern Businesses

Leverage Cloud App Development and DevOps to boost business agility, scalability, and security. Optimize operations, deploy faster, and…...

7.3AI score
Exploits0
Rows per page
Query Builder