CVE-2019-5500

Certain versions of the NetApp Service Processor and Baseboard Management Controller firmware allow a remote unauthenticated attacker to cause a Denial of Service DoS...

CVE-2019-5500

Certain versions of the NetApp Service Processor and Baseboard Management Controller firmware allow a remote unauthenticated attacker to cause a Denial of Service DoS...

CVE-2019-5500

CVE-2019-5500 concerns NetApp’s Service Processor (SV) and Baseboard Management Controller (BMC) firmware. Connected documents confirm a remote, unauthenticated attacker can cause a Denial of Service (DoS) on affected devices. The impact is described as DoS, with CVSS metrics indicating a Network...

PT-2020-11142

Name of the Vulnerable Software and Affected Versions NetApp Service Processor and Baseboard Management Controller firmware affected versions not specified Description The issue allows a remote unauthenticated attacker to cause a Denial of Service DoS. Recommendations At the moment, there is no...

CVE-2019-5500: Undefined Security Weakness

Certain versions of the NetApp Service Processor and Baseboard Management Controller firmware allow a remote unauthenticated attacker to cause a Denial of Service DoS...

CVE-2020-10693

A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation escaping, stripping controls that developers may have put in place...

PT-2020-12288

Name of the Vulnerable Software and Affected Versions Hibernate Validator version 6.1.2.Final Description A flaw was found in the message interpolation processor of Hibernate Validator, enabling invalid EL expressions to be evaluated as if they were valid. This allows attackers to bypass input...

qt5-qtimageformats: QTgaFile CPU exhaustion

An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption...

CVE-2020-11884

A flaw was found in the Linux kernel on s390 architecture. The issue occurs on multiprocessing systems when one s390 CPU is in Secondary Address Mode and another CPU does a kernel page table upgrade. An inter-processor interrupt IPI is then sent to each active CPU to update the control registers...

DEBIAN-CVE-2020-1722

A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password = 1,000,000 characters to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this...

com.shopizer:shopizer-shipping-canadapost-module (>=0.0.1, <=2.11.0), com.shopizer:shopizer-shipping-distance-processor (>=2.0.3, <=2.8.1) +2 more potentially affected by CVE-2020-11007 via com.shopizer:sm-core-model (>=2.0.2, <=2.10.0)

com.shopizer:sm-core-model MAVEN version =2.0.2, =0.0.1, =2.0.3, =2.0.2, =2.6.0, =2.7.0 Source cves: CVE-2020-11007 Source advisory: OSV:GHSA-W8RC-PGXQ-X2CJ...

com.shopizer:shopizer-shipping-canadapost-module (>=0.0.1, <=2.11.0), com.shopizer:shopizer-shipping-distance-processor (>=2.0.3, <=2.8.1) +2 more potentially affected by CVE-2020-11007 via com.shopizer:sm-core-model (>=2.0.2, <=2.10.0)

com.shopizer:sm-core-model MAVEN version =2.0.2, =0.0.1, =2.0.3, =2.0.2, =2.6.0, =2.7.0 Source cves: CVE-2020-11007 Source advisory: GHSA-W8RC-PGXQ-X2CJ...

com.shopizer:shopizer-shipping-canadapost-module (>=0.0.1, <=2.11.0), com.shopizer:shopizer-shipping-distance-processor (>=2.0.3, <=2.8.1) +2 more potentially affected by CVE-2020-11007 via com.shopizer:sm-core-model (>=2.0.2, <=2.10.0)

com.shopizer:sm-core-model MAVEN version =2.0.2, =0.0.1, =2.0.3, =2.0.2, =2.6.0, =2.7.0 Source cves: CVE-2020-11007 Source advisory: MEND:CVE-2020-11007...

CVE-2020-11669

A flaw was found in the way Linux kernel running on the Power9 processor saves and restores its registers while going in and coming out of an idle state. The issue occurs when a guest kernel has Kernel Userspace Address Protection KUAP feature enabled. The idlebook3s function does not save and...

Design/Logic Flaw

An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service or possibly gain privileges because of missing memory barriers in read-write unlock paths. The read-write unlock paths don't contain a memory barrier. On Arm, this means a processor is allowed to...

HTTP/2: request for large response leads to denial of service

A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server's...

Xen Hypervisor Permission Misconfiguration

The vulnerability of Xen hypervisors is related to the occurrence of exceptions that are handled without modifying the processor’s level. Some interrupts are inevitably included when an exception is generated. Exploiting this vulnerability can allow a remote attacker to access confidential data,...

PDFium PDF Uninitialized Access

The vulnerability of the PDFium PDF-content processor in the Google Chrome browser relates to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to information and compromise its integrity and...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A flaw was found in the way the Xen hypervisor implementation handled instruction emulation during virtual machine exits. A malicious user-space process running in an SMP guest could trick the emulator into reading a different instruction than the one th...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the Xen hypervisor implementation when using the Intel Itanium architecture, allowing guests to enter an unsupported state. An unprivileged guest user could trigger this flaw by setting the BE Big Endia...