1145 matches found
dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList
A flaw was found in dotnet. The System.IO.Packaging library may allow untrusted inputs to influence algorithmically complex operations, resulting in a denial of service...
dotnet: Multiple .NET components susceptible to hash flooding
A flaw was found in dotnet. The System.Security.Cryptography.Cose, System.IO.Packaging and System.Runtime.Caching components may be exposed to hostile input, making them susceptible to hash flooding attacks, resulting in denial of service...
PT-2024-36409 · Dolby · Dolby Vision Provisioning
Name of the Vulnerable Software and Affected Versions: Dolby Vision Provisioning software versions prior to 2.0.0.2 Description: A potential information disclosure issue was reported in Lenovo's packaging of Dolby Vision Provisioning software that could allow a local attacker to read files on the...
dotnet: Multiple .NET components susceptible to hash flooding
A flaw was found in dotnet. The System.Security.Cryptography.Cose, System.IO.Packaging and System.Runtime.Caching components may be exposed to hostile input, making them susceptible to hash flooding attacks, resulting in denial of service...
dotnet: Multiple .NET components susceptible to hash flooding
A flaw was found in dotnet. The System.Security.Cryptography.Cose, System.IO.Packaging and System.Runtime.Caching components may be exposed to hostile input, making them susceptible to hash flooding attacks, resulting in denial of service...
dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList
A flaw was found in dotnet. The System.IO.Packaging library may allow untrusted inputs to influence algorithmically complex operations, resulting in a denial of service...
dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList
A flaw was found in dotnet. The System.IO.Packaging library may allow untrusted inputs to influence algorithmically complex operations, resulting in a denial of service...
dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList
A flaw was found in dotnet. The System.IO.Packaging library may allow untrusted inputs to influence algorithmically complex operations, resulting in a denial of service...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS due to untrusted inputs which can influence algorithmically complex operations. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS by a hash flooding attack, due to inefficient array processing when handling URI parts. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.10)
The version of AOS installed on the remote host is prior to 6.10. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.10 advisory. - squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. ...
SUSE SLED15: libpcp-devel / libpcp3 / libpcp_gui2 / libpcp_import1 / libpcp_mmv1 / etc (SUSE-SU-2024:3533-1)
"The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3533-1 advisory. pcp was updated from version 5.3.7 to version 6.2.0 jscPED-8192, jscPED-8389: - Security issues...
Security update for pcp
This update for pcp fixes the following issues: pcp was updated from version 5.3.7 to version 6.2.0 jscPED-8192, jscPED-8389: Security issues fixed: CVE-2024-45770: Fixed a symlink attack that allows escalating from the pcp to the root user bsc1230552 CVE-2024-45769: Fixed a heap corruption throu...
SUSE-SU-2024:3533-1 Security update for pcp
This update for pcp fixes the following issues: pcp was updated from version 5.3.7 to version 6.2.0 jscPED-8192, jscPED-8389: - Security issues fixed: CVE-2024-45770: Fixed a symlink attack that allows escalating from the pcp to the root user bsc1230552 CVE-2024-45769: Fixed a heap corruption...
Increase the size of the App Layering boot disk for packaging
When you create/edit layers in App Layering, a packaging machine is created. If you have caching enabled, then a boot disk is created as well as copies of the OS layer and any relevant App Layer. When the packing machine is booted, some system data such as the pagefile is stored on that boot disk...
Rollup 跨站脚本漏洞
Rollup is an open source module packager for JavaScript by Rollup. A cross-site scripting vulnerability exists in Rollup prior to version 4.22.4, which arises from the introduction of cross-site scripting code during certain packaging operations...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.8.1.5)
The version of AOS installed on the remote host is prior to 6.8.1.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.8.1.5 advisory. - squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than...
nodejs:18 security update
nodejs 1:18.20.4-1 - Update to 18.20.4 Fixes: CVE-2024-22020 CVE-2024-28863 nodejs-nodemon nodejs-packaging...
Malicious code in httpsmovements (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 1f6e48eea4c63cfcc19e892d140b0b70a48f1041c559effbaae92184fda61bc5 In the invokehttp, the init.py contains obfuscated code attempting to download and run one of two executables. They are identified as malicious by VT and the...