The vulnerability of server software like HAProxy arises from incomplete cleanup of temporary or auxiliary resources, allowing attackers to gain access to confidential data.

The vulnerability of server software like HAProxy is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

Design/Logic Flaw

IBM WebSphere Application Server Liberty 22.0.0.13 through 23.0.0.7 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 262567...

CVE-2023-38737 IBM WebSphere Application Server Liberty denial of service

IBM WebSphere Application Server Liberty 22.0.0.13 through 23.0.0.7 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 262567...

Authentication flaw

An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is unique to CVE-2023-35078 announced earlier...

CVE-2023-35082

An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is unique to CVE-2023-35078 announced earlier...

Denial Of Service (DoS)

ryu is vulnerable to Denial of Service DoS attacks. The vulnerability occurs when Ryu parses a specially crafted OFPBundleCtrlMsg message with a queue length of zero, which results in an infinite loop, consuming excessive CPU resources and preventing other users from accessing the service...

Intel NUC BIOS firmware security vulnerability

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in the Intel NUC BIOS firmware that originates from the use of uninitialized resources. An attacker can exploit the vulnerability to obtain sensitive information...

The vulnerability of the WatsonX.data data storage service on the IBM Cloud Pak for Data (CP4D) cloud platform allows a attacker to cause a service failure.

The vulnerability of the WatsonX.data data storage service on the IBM Cloud Pak for Data CP4D cloud platform involves unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Siemens SICAM TOOLBOX II Critical Resource Privilege Assignment Error Vulnerability

SICAM TOOLBOX II is an engineering solution for plants and systems of all sizes. It allows data collection, data modeling, configuration and parameterization. It is used for process information engineering of automation and central control room systems. Siemens SICAM TOOLBOX II suffers from a...

Siemens SICAM TOOLBOX II 安全漏洞

SICAM TOOLBOX II is an engineering solution for plants and systems of all sizes. It allows data collection, data modeling, configuration and parameterization. It is used for process information engineering of automation and central control room systems. Siemens SICAM TOOLBOX II suffers from a...

EulerOS 2.0 SP9 : dhcp (EulerOS-SA-2023-2580)

According to the versions of the dhcp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively...

The vulnerability of the zenHelpCheck software platform for operating data management, which is used to optimize the production of ABB Ability zenon, allows a hacker to execute arbitrary code.

The vulnerability of the zenHelpCheck software platform for operating data management systems, which is used to optimize ABB Ability zenon production, is related to the improper assignment of permissions to critical resources. Exploiting this vulnerability could allow attackers to execute arbitra...

Information Disclosure

gitlab is vulnerable to Information Disclosure. The vulnerability is due to lack of Jira issue validation, which allows an attacker to use GitLab Flavored Markdown GFM references in a Jira issue to disclose the names of resources they don't have access to...

Denial Of Service (DoS)

samba is vulnerable to Denial of Service DoS attacks. This vulnerability occurs when Samba parses a specially crafted RPC request. If the request is valid, Samba will enter an infinite loop. This could cause Samba to consume excessive CPU resources and eventually crash...

Denial Of Service (DoS)

gitlab is vulnerable to Denial of Service DoS attacks. This vulnerability occurs when an attacker can send a large number of requests to read commit details. This could cause GitLab to run out of resources, such as memory or CPU, and could lead to a denial of service...

GHSA-Q7MC-FC87-V7W7 OpenRefine Server-Side Request Forgery vulnerability

OpenRefine = v3.5.2 contains a Server-Side Request Forgery SSRF vulnerability, which permits unauthorized users to exploit the system, potentially leading to unauthorized access to internal resources and sensitive file disclosure...

DEBIAN-CVE-2022-41401

OpenRefine = v3.5.2 contains a Server-Side Request Forgery SSRF vulnerability, which permits unauthorized users to exploit the system, potentially leading to unauthorized access to internal resources and sensitive file disclosure...

CVE-2022-41401

OpenRefine = v3.5.2 contains a Server-Side Request Forgery SSRF vulnerability, which permits unauthorized users to exploit the system, potentially leading to unauthorized access to internal resources and sensitive file disclosure...

UBUNTU-CVE-2022-41401

OpenRefine = v3.5.2 contains a Server-Side Request Forgery SSRF vulnerability, which permits unauthorized users to exploit the system, potentially leading to unauthorized access to internal resources and sensitive file disclosure...

OpenRefine Code Issues Vulnerabilities

OpenRefine is a Java-based open source tool. The product is mainly used for loading data, analyzing data and cleaning data. A security vulnerability exists in OpenRefine 3.5.2 and earlier versions, which stems from the presence of a Server Request Forgery SSRF vulnerability. An unauthorized...