Fedora 39 : apache-commons-io (2024-5d581b2365)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-5d581b2365 advisory. Fixes possible denial of service attack on untrusted input Tenable has extracted the preceding description block directly from the Fedora security advisory...

TP-LINK TL-WDR7660 wacWhitelistJsonToBin Function Buffer Overflow Vulnerability

The TP-LINK TL-WDR7660 is a Gigabit router from China P&L TP-LINK. A buffer overflow vulnerability exists in the TP-LINK TL-WDR7660 version 1.0, which originates from the wacWhitelistJsonToBin function not checking the parameter string name when handling it, and can be exploited by a remote...

D-Link DIR-619L formSetMuti function buffer overflow vulnerability

The D-Link DIR-619L is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-619L B12.06 version, which originates from the parameter curTime in the file /goform/formSetMuti that fails to correctly validate the length size of the input data, and can b...

D-Link DIR-619L formSetPortTr Function Buffer Overflow Vulnerability

The D-Link DIR-619L is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-619L B12.06 version, which originates from the parameter curTime in the file /goform/formSetPortTr that fails to correctly validate the length size of the input data, and can...

CVE-2024-9823

There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service DoS attack on the server using DosFilter. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory...

CVE-2024-9823 Jetty DOS vulnerability on DosFilter

There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service DoS attack on the server using DosFilter. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory...

CVE-2024-45230

An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize and urlizetrunc template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters...

PT-2024-7140

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 21.4R3-S9 Junos OS versions 22.2 prior to 22.2R3-S5 Junos OS versions 22.3 prior to 22.3R3-S4 Junos OS versions 22.4 prior to 22.4R3-S4 Junos OS versions 23.2 prior to 23.2R2-S2 Junos OS versions 23.4 prior to 23.4R2...

Siemens SICAM and SITIPE Products Third-Party Component Buffer Overflow Vulnerability

The SICAM 8 power automation platform is a universal, hardware and software based, all-in-one solution for all applications in the power sector. the SICAM A8000 RTUs Remote Terminal Units are modular devices for remote control and automation applications in all areas of energy supply. SICAM EGS...

[SECURITY] [DLA 3885-1] redis security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3885-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb September 10, 2024 https://wiki.debian.org/LTS -...

Server-Side Request Forgery in federated sharing API - ownCloud

Server-Side Request Forgery in federated sharing API may allow an unauthenticated attacker to identify internal servers. Furthermore, due to improper timeout handling, the server could be affected by a Denial of Service attack...

CVE-2023-51368

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to launch a denial-of-service DoS attack via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722...

CVE-2024-45311 Denial of service in quinn-proto when using `Endpoint::retry()`

Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. As of quinn-proto 0.11, it is possible for a server to accept, retry, refuse, or ignore an Incoming connection. However, calling retry on an unvalidated connection exposes the server to a likely panic in th...

Adobe Illustrator Input Validation Error Vulnerability (CNVD-2024-36361)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. An input validation error vulnerability exists in Adobe Illustrator that stems from incorrect input validation. An attacker could exploit this vulnerability to cause a denial of service on...

CVE-2024-36462

Uncontrolled resource consumption refers to a software vulnerability where a attacker or system uses excessive resources, such as CPU, memory, or network bandwidth, without proper limitations or controls. This can cause a denial-of-service DoS attack or degrade the performance of the affected...

CVE-2024-41990

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters...

TOTOLINK A7000R setWizardCfg function buffer overflow vulnerability

TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK A7000R version 9.1.0u.6268B20220504, which originates from the ssid parameter in the setWizardCfg function of the /cgi-bin/cstecgi.cgi page that fails to correctly...

PT-2024-6082

Name of the Vulnerable Software and Affected Versions QEMU NBD Server affected versions not specified Description A flaw was found in the QEMU NBD Server, allowing a denial of service DoS attack via improper synchronization during socket closure when a client keeps a socket open as the server is...

CVE-2020-11639 Insufficient access control on Inter process communication,

An attacker could exploit the vulnerability by injecting garbage data or specially crafted data. Depending on the data injected each process might be affected differently. The process could crash or cause communication issues on the affected node, effectively causing a denial-of-service attack. T...

openSUSE 15 Security Update : python-Django (SUSE-SU-2024:2545-1)

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2545-1 advisory. - CVE-2024-38875: Fixed potential denial-of-service attack via certain inputs with a very large number of brackets bsc1227590 - CVE-2024-39329: Fixed...