Lucene search
+L

1294 matches found

Positive Technologies
Positive Technologies
•added 2024/02/20 12:00 a.m.•13 views

PT-2024-5001 · Oracle +5 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 8.0.35 and prior Oracle MySQL Server versions 8.2.0 and prior Description: The issue is related to the Server: Optimizer component of Oracle MySQL Server and is caused by incorrect clearance or release of resource...

7.5CVSS5.4AI score0.02129EPSS
SaveExploits0References434
Positive Technologies
Positive Technologies
•added 2024/02/13 12:00 a.m.•18 views

PT-2024-1766 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to errors in resource release in the Windows Hyper-V hardware virtualization system, which can be exploited to cause a denial of service. This allows attackers ...

6.5CVSS9.2AI score0.0103EPSS
SaveExploits0References9
GitLab Advisory Database
GitLab Advisory Database
•added 2024/01/31 12:00 a.m.•43 views

Missing Release of Resource after Effective Lifetime

In etcd before versions 3.3.23 and 3.4.10, the etcd gateway is a simple TCP proxy to allow for basic service discovery and access. However, it is possible to include the gateway address as an endpoint. This results in a denial of service, since the endpoint can become stuck in a loop of requestin...

7.7CVSS7.3AI score0.01127EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2024/01/18 5:15 p.m.•64 views

CVE-2023-31274 Missing Release of Resource after Effective Lifetime vulnerability in Aveva PI Server

AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to cause the PI Message Subsystem of a PI Server to consume available memory resulting in throttled processing of new PI Data Archive events and a partial denial-of-service...

5.3CVSS5.4AI score0.00502EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/01/15 12:00 a.m.•17 views

Microsoft .NET Framework Resource Leak DoS

The vulnerability of the Microsoft .NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.2AI score0.03578EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/01/09 12:00 a.m.•20 views

PT-2024-1246

Name of the Vulnerable Software and Affected Versions Microsoft Identity versions prior to 5.7.0 Microsoft Identity versions prior to 6.34.0 Microsoft Identity versions prior to 7.1.2 Description The issue is related to incorrect clearing or release of resources in the Microsoft Identity library...

6.8CVSS6.9AI score0.02892EPSS
SaveExploits0References67
Positive Technologies
Positive Technologies
•added 2024/01/09 12:00 a.m.•3 views

PT-2024-1248

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description The issue is related to incorrect clearing or release of resources in the Windows Hyper-V system, which can be exploited to cause a denial of service. This allows attackers to affect...

5.5CVSS5.8AI score0.00739EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
•added 2023/12/26 12:00 a.m.•19 views

Linux netfilter API DoS

The vulnerability of the net/netfilter/nftablesapi.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00323EPSS
SaveExploits0References8Affected Software4
Rosalinux
Rosalinux
•added 2023/12/19 11:53 a.m.•64 views

Advisory ROSA-SA-2023-2312

Software: java-1.8.0-openjdk 1.8.0.392.b08 OS: rosa-server79 packageevrstring: java-1.8.0-openjdk-1.8.0.392.b08-2.res7 CVE-ID: CVE-2023-22045 BDU-ID: 2023-04350 CVE-Crit: LOW CVE-DESC.: A vulnerability in the Hotspot component of the Java SE software platform and Oracle GraalVM Enterprise Edition...

5.9CVSS7.2AI score0.08346EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/12/12 12:00 a.m.•14 views

PT-2023-7615 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the Internet Connection Sharing ICS function of the Windows operating system. This vulnerability is caused by incorrect clearing...

6.5CVSS8.9AI score0.01282EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
•added 2023/12/12 12:00 a.m.•30 views

MySQL Server DoS

The vulnerability of the MySQL Server component of the database management system involves errors in resource release. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

6.1CVSS6.3AI score0.01115EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2023/12/07 12:00 a.m.•2 views

PT-2023-9560

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.39 and prior MySQL Server versions 8.4.2 and prior MySQL Server versions 9.0.1 and prior Description The issue is related to the InnoDB component of MySQL Server and can be easily exploited. It allows an attacker with...

4.6CVSS5.9AI score0.00316EPSS
SaveExploits0References214
Positive Technologies
Positive Technologies
•added 2023/12/07 12:00 a.m.•3 views

PT-2023-9568

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.39 and prior MySQL Server versions 8.4.2 and prior MySQL Server versions 9.0.1 and prior Description The issue is related to the InnoDB component of Oracle MySQL Server and is caused by incorrect clearance or release ...

6.8CVSS5.8AI score0.0095EPSS
SaveExploits0References197
BDU FSTEC
BDU FSTEC
•added 2023/11/29 12:00 a.m.•27 views

python-eventlet DoS

The vulnerability of the python-eventlet library used by the OpenStack Platform for building cloud solutions is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS6.4AI score0.00972EPSS
SaveExploits0References5Affected Software4
BDU FSTEC
BDU FSTEC
•added 2023/11/27 12:00 a.m.•21 views

Cisco Secure Client Resource Leak DoS

The vulnerability of the Cisco Secure Client formerly Cisco AnyConnect Secure Mobility Client endpoint security mechanism is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a attacker to cause service failures...

5.5CVSS5.9AI score0.00197EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2023/11/27 12:00 a.m.•20 views

Cisco Secure Client Resource Leak DoS

The vulnerability of the Cisco Secure Client formerly Cisco AnyConnect Secure Mobility Client endpoint security mechanism is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a attacker to cause service failures...

5.5CVSS5.9AI score0.00197EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2023/11/21 11:31 a.m.•14 views

kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.

A flaw was found in the blkgs destruction path in block/blk-cgroup.c in the Linux kernel, leading to a cgroup blkio memory leakage problem. When a cgroup is being destroyed, cgrouprstatflush is only called at cssreleaseworkfn, which is called when the blkcg reference count reaches 0. This circula...

5.5CVSS6.6AI score0.00249EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/11/14 12:00 a.m.•17 views

PT-2023-7300 · Amd · Amd Radeon Graphics Display Driver

Name of the Vulnerable Software and Affected Versions: AMD RadeonTM Graphics display driver affected versions not specified Description: The issue is related to improper input validation in the AMD RadeonTM Graphics display driver, which may allow an attacker to corrupt the display, potentially...

7.5CVSS7.2AI score0.01272EPSS
SaveExploits0References8
Redos
Redos
•added 2023/11/13 12:00 a.m.•13 views

ROS-20231110-03

Vulnerability of the DirSync catlog synchronization mechanism of the Samba networking software package is related to insufficient protection of service data. Exploitation of the vulnerability could allow an attacker, acting remotely, gain unauthorized access to protected information and increase...

9.8CVSS7.5AI score0.02688EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2023/11/13 12:00 a.m.•14 views

Oracle Solaris Kernel DoS

The vulnerability of the Oracle Solaris operating system’s kernel is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS5.9AI score0.00197EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder