50 matches found
Denial of Service (DoS)
Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Denial of Service DoS through the handling of resource requests. An attacker can cause the application to become unresponsive by sending specially crafted requests that...
CVE-2025-62320
HTML Injection can be carried out in Product when a web application does not properly check or clean user input before showing it on a webpage. Because of this, an attacker may insert unwanted HTML code into the page. When the browser loads the page, it may automatically interact with external...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the use of inconsistent numtqps values for resource requests in the hns3 driver, which could lead to...
SUSE CVE-2025-59836
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.1.5 and 1.0.2, there is a nil pointer dereference vulnerability in the Omni Resource Service allows unauthenticated users to cause a server panic and denial of service by sending empty create/update resource reques...
GO-2025-4021 Omni is Vulnerable to DoS via Empty Create/Update Resource Requests in github.com/siderolabs/omni
Omni is Vulnerable to DoS via Empty Create/Update Resource Requests in github.com/siderolabs/omni...
EUVD-2025-34081
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.1.5 and 1.0.2, there is a nil pointer dereference vulnerability in the Omni Resource Service allows unauthenticated users to cause a server panic and denial of service by sending empty create/update resource reques...
Omni is Vulnerable to DoS via Empty Create/Update Resource Requests
Summary A nil pointer dereference vulnerability in the Omni Resource Service allows unauthenticated users to cause a server panic and denial of service by sending empty create/update resource requests through the API endpoints. Details The vulnerability exists in the isSensitiveSpec function whic...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the isSensitiveSpec function which calls grpcomni.CreateResource without checking if the resource's metadata field is nil. An attacker can cause a server crash and disrupt service availability by sending emp...
EUVD-2018-2704
Malware in sbrugna...
EUVD-2016-1675
Malware in sbrugna...
EUVD-2009-2831
Malware in sbrugna...
EUVD-2021-19710
Malware in sbrugna...
EUVD-2023-53992
Malicious code in bioql PyPI...
EUVD-2023-53989
Malicious code in bioql PyPI...
EUVD-2023-53991
Malicious code in bioql PyPI...
EUVD-2025-1699
Malicious code in bioql PyPI...
EUVD-2023-50911
Malicious code in bioql PyPI...
EUVD-2024-49313
Malicious code in bioql PyPI...
EUVD-2022-6472
Malicious code in bioql PyPI...
CVE-2024-29007
The CloudStack management server and secondary storage VM could be tricked into making requests to restricted or random resources by means of following 301 HTTP redirects presented by external servers when downloading templates or ISOs. Users are recommended to upgrade to version 4.18.1.1 or...