The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos operating systems allows a hacker to trigger an emergency shutdown of the application.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos operating systems is related to insufficient resource control during its existence. Exploiting this vulnerability can allow a malicious actor to cause an unexpected termination of an application...

The vulnerability of the SSH network protocol implementation in microprogrammable industrial network interfaces SCALANCE SC622-2C, SC626-2C, SC632-2C, SC636-2C, SC642-2C, and SC646-2C arises from insufficient data authentication checks. This allows attackers to trigger service failures.

The vulnerability of the SSH network protocol implementation in microprogrammable industrial network interfaces such as SCALANCE SC622-2C, SC626-2C, SC632-2C, SC636-2C, SC642-2C, and SC646-2C is related to insufficient resource control during their lifespan. Exploiting this vulnerability could...

The vulnerability of the Citrix ADC application delivery controller (formerly Citrix NetScaler Application Delivery Controller) and the Citrix Gateway access control system (formerly Citrix NetScaler Gateway) allows a perpetrator to execute arbitrary code.

The vulnerability of the Citrix ADC application delivery controller formerly Citrix NetScaler Application Delivery Controller and the Citrix Gateway access control system formerly Citrix NetScaler Gateway is related to insufficient resource control during its existence. Exploiting this...

Siemens SCALANCE Products

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

MediaTek 芯片安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek Modem 4G RRC that stems from incorrect input validation, which can lead to a system crash...

Input validation

An improper control of a resource through its lifetime vulnerability CWE-664 in FortiEDR CollectorWindows 4.0.0 through 4.1, 5.0.0 through 5.0.3.751, 5.1.0 may allow a privileged user to terminate the FortiEDR processes with special tools and bypass the EDR protection...

Fortinet FortiEDR 安全漏洞

Fortinet FortiEDR is a built-from-scratch endpoint security solution from Fortinet, Inc. A security vulnerability exists in Fortinet FortiEDR CollectorWindows versions 4.0.0 through 4.1, 5.0.0 through 5.0.3.751, and 5.1.0 that stems from improper control of resources...

PT-2022-6117 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on MX Series versions prior to 15.1R7-S13 Juniper Networks Junos OS on MX Series version 19.1 versions prior to 19.1R3-S9 Juniper Networks Junos OS on MX Series version 19.2 versions prior to 19.2R3-S6 Juniper Networ...

The vulnerability of the Mozilla Firefox browser lies in the insufficient resource control during the processing of XML documents. This allows attackers to execute arbitrary JavaScript code.

The vulnerability of the Mozilla Firefox browser is related to insufficient resource control during the processing of XML documents. Exploiting this vulnerability allows a malicious actor to cause service failures, bypass security restrictions, access confidential information, or execute arbitrar...

CVE-2022-3225

Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20...

The vulnerability of the NPM package manager vm2 library allows a hacker to execute arbitrary code.

The vulnerability of the NPM packet manager’s vm2 library is related to insufficient control over resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2022-22067

Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile...

The vulnerability of the Citrix Application Delivery Management (ADM) delivery service lies in the insufficient control over resources during its existence. This allows a malicious actor to cause a temporary interruption of the ADM licensing service.

The vulnerability of the Citrix Application Delivery Management ADM delivery management service is related to insufficient control over resources during its existence. Exploiting this vulnerability could allow a malicious actor to cause a temporary disruption in the ADM licensing service’s...

CVE-2021-30347

Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30343

Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

PT-2022-10006 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to an improper integrity check that can lead to a race condition between tasks PDCP and RRC after a valid RRC Command packet has been received. This affects...

PT-2022-10010 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to an improper integrity check that can cause a race condition between tasks PDCP and RRC after a valid RRC Command packet has been received. This affects...

Qualcomm 安全漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and from time to time fabricated on the surface of semiconductor wafers. A security vulnerability exists in various Qualcomm products that...

The vulnerability of the malware analysis process in Cisco Firepower Threat Defense software allows a perpetrator to trigger a service failure.

The vulnerability of the malware analysis process in Cisco Firepower Threat Defense software is related to insufficient resource control during its operation. Exploiting this vulnerability allows a remote attacker to cause service failures...

Qualcomm 代码问题漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits including primarily semiconductor devices, but also passive components, etc., and from time to time fabricated on the surface of semiconductor wafers. A code issue vulnerability exists in the Modem module of...