CVE-2022-3273

CVE-2022-3273 affects the GitHub repository ikus060/rdiffweb, specifically versions prior to 2.5.0a4. The root cause is an allocation of resources without limits or throttling. The vulnerability can lead to resource exhaustion, affecting availability and potentially exposing or degrading service ...

The vulnerability of Microsoft Edge browser on Windows operating systems, related to synchronization errors when using a shared resource, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge browser on Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...

Design/Logic Flaw

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3...

OESA-2022-1969 microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Improper isolation of shared resources in some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access.CVE-2022-21233...

The vulnerability of the Display component in Qualcomm’s embedded software allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Display component in Qualcomm’s embedded software lies in synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to cause system failures or execute arbitrary code...

Cisco IOS XE Wireless Controller software denial of service vulnerability

A denial of service vulnerability exists in Cisco IOS XE Wireless Controller Software, a wireless LAN controller from Cisco, which stems from a logical error in the handling of CAPWAP Mobility The vulnerability is caused by a logic error and mismanagement of resources when handling CAPWAP Mobilit...

The vulnerability of the kernel of microprogramming software in Qualcomm’s embedded chips allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of microprogramming software in embedded Qualcomm chips is related to synchronization errors when using common resources. Exploiting this vulnerability can allow attackers to cause service failures or execute arbitrary code...

PYSEC-2022-298

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3...

CVE-2022-3364

CVE-2022-3364 affects ikus060/rdiffweb before 2.5.0a3. The issue is an unlimited length of the Fullname parameter, enabling resource exhaustion and potential memory corruption that can lead to a Denial of Service. Root cause: no enforcement of a maximum length for Fullname; impact described as Do...

Security Bulletin: Vulnerabilities in FasterXML Jackson Databind and Apache Xerces affect IBM Spectrum Protect Backup-Archive Client, IBM Spectrum Protect for Space Management, and IBM Spectrum Protect for Virtual Environments

Summary IBM Spectrum Protect Backup-Archive Client, IBM Spectrum Protect for Space Management, and IBM Spectrum Protect for Virtual Environments may be affected by the below FasterXML Jackson Databind and Apache Xerces vulnerabilities CVEs. Vulnerability Details CVEID:CVE-2020-25649 DESCRIPTION:...

The vulnerability of the DBI interface module of the Perl database library allows attackers to gain access to confidential data and also cause service interruptions.

The vulnerability of the DBI interface module in Perl DBI is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows an attacker to access confidential data and also cause service failures...

Mattermost Denial of Service Vulnerability (CNVD-2022-67044)

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a denial of service vulnerability that arises from insufficient processing of specially crafted GIF files when uploaded, which can be exploited by an authenticated attacker to...

Mozilla: Remote content specified in an HTML document that was nested inside an iframe's srcdoc attribute was not blocked

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the internal HTML document, remote objects specified in the nested document for example, images or...

CVE-2022-3295

CVE-2022-3295 affects the rdiffweb project (rdiffweb, prior to 2.4.8). The root cause is unlimited length for root directory names, allowing a crafted long string to trigger a denial of service. Impact is a DoS condition with potential memory issues; no data confidentiality or integrity impact is...

Apache XML Graphics Batik Server-Side Request Forgery Vulnerability (CNVD-2022-73690)

Apache XML Graphics Batik is a Java-based application from the Apache Foundation that is primarily used to process images in SVG format. Apache XML Graphics Batik is vulnerable to server-side request forgery, which is caused by a flaw when calling the fop function. An attacker could exploit the...

Denial Of Service (DoS)

bind is vulnerable to denial of service. The vulnerability exists due to a lack of sanitiztion of memory resources allowing an attacker to exploit the vulnerability and crash the system...

Xxe

IBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 230017...

CVE-2022-34348

IBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 230017...

CVE-2022-34348

IBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 230017...

The vulnerability of Crossbeam Utils, a parallel programming tool, on 32-bit systems arises from the simultaneous execution using a shared resource with improper synchronization. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of CrossbeamUtils, a parallel programming tool, on 32-bit systems is related to the inconsistency between the arithmetic operations i,u64 and AtomicI,U64. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause...