PT-2023-13553 · Unknown · Wecube Platform

Name of the Vulnerable Software and Affected Versions: WeCube Platform version 3.2.2 Description: An issue was discovered in WeCube Platform, where multiple CSV injection issues exist. The affected pages include the Home / Admin / Resources page, the Home / Admin / System Params page, and the Hom...

The vulnerability of the control interfaces for microprogrammed software-based routers from Phoenix Contact, FL MGUARD and TC MGUARD, allows a intruder to trigger a service failure.

The vulnerability of the control interfaces for Microprogramming Software-based Routers from Phoenix Contact, FL MGUARD and TC MGUARD, relates to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures by creating a large numb...

PT-2022-9031 · Unknown · Chris92De Adminserv

Name of the Vulnerable Software and Affected Versions: Chris92de AdminServ affected versions not specified Description: A vulnerability was found in Chris92de AdminServ, affecting unknown code of the file resources/core/adminserv.php. The manipulation of the text argument leads to cross-site...

CVE-2022-44564

Huawei Aslan Children's Watch has a path traversal vulnerability. Successful exploitation may allow attackers to access or modify protected system resources...

CVE-2022-44564

Huawei Aslan Children's Watch has a path traversal vulnerability. Successful exploitation may allow attackers to access or modify protected system resources...

Path traversal

Huawei Aslan Children's Watch has a path traversal vulnerability. Successful exploitation may allow attackers to access or modify protected system resources...

CVE-2021-4235

A flaw was found in go-yaml. This issue occurs due to unbounded alias chasing, where a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

GHSA-3FM3-M23V-5R46 Tendermint Client package vulnerable to Uncontrolled Resource Consumption

Due to support of Gzip compression in request bodies, as well as a lack of limiting response body sizes, a malicious server can cause a client to consume a significant amount of system resources, which may be used as a denial of service vector...

YAML Go package vulnerable to denial of service

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

CVE-2022-44564

Huawei Aslan Children's Watch has a path traversal vulnerability. Successful exploitation may allow attackers to access or modify protected system resources...

CVE-2022-44564

Huawei Aslan Children's Watch has a path traversal vulnerability. Successful exploitation may allow attackers to access or modify protected system resources...

memos 安全漏洞

memos is an open source hosted memo center with knowledge management and social features. A security vulnerability exists in versions of memos prior to 0.9.1, which can be exploited by an attacker to delete user resources...

Huawei Aslan-AL10 路径遍历漏洞

Huawei Aslan-AL10 is a children's smartwatch from Huawei China. A security vulnerability exists in Huawei Aslan-AL10 that stems from the presence of a path traversal vulnerability that could allow an attacker to access or modify protected system resources...

CVE-2022-44564

CVE-2022-44564 covers a path traversal vulnerability in Huawei Aslan Children’s Watch. Reported impact: attacker could access or modify protected system resources. The CVE entry lists a high-severity score (CVSS v3.1: 7.8, HIGH) with LOCAL attackVector, LOW attackComplexity, and LOW privileges re...

CVE-2019-25072

Due to support of Gzip compression in request bodies, as well as a lack of limiting response body sizes, a malicious server can cause a client to consume a significant amount of system resources, which may be used as a denial of service vector...

CVE-2021-4235

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

CVE-2021-4235

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

Denial of service

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

CVE-2021-4235

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

CVE-2021-4235 Denial of service in gopkg.in/yaml.v2

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...