The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their susceptibility to cross-site requests forgery attacks. This allows attackers to cause service failures.

The vulnerabilities of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the exploitation of cross-site requests. Exploiting these vulnerabilities can allow attackers to trigger service interruptions throug...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the occurrence of operations outside the buffer in memory, allows attackers to trigger a service failure.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by processing or loading specially created web...

The vulnerability of HP LaserJet Pro printer’s microprogramming software, related to improper handling of unexpected data types, allows attackers to trigger malfunctions during maintenance.

The vulnerability of HP LaserJet Pro printer’s microprogramming software is related to improper handling of unexpected types of data. Exploiting this vulnerability can allow an attacker to cause a service failure by sending a JPEG-file via IPP Internet Printing Protocol...

The vulnerability of the NFSv4 “close” kernel component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the NFSv4 “close” kernel component in Linux operating systems is related to the mutual locking of execution threads. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the PowerScale OneFS operating system, related to integer overflows, allows a attacker to trigger a service failure.

The vulnerability of the PowerScale OneFS operating system is related to integer overflows. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Windows operating system’s streaming data transmission service allows a hacker to cause a service failure.

The vulnerability of the Windows operating system’s streaming data transmission service is related to the use of insecure mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the subclasses AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, AMRAudioFileServerMediaSubsessionLive, and OnDemandServerMediaSubsession within the Live555 multimedia streaming library, which allows a malicious actor to trigger a service failure.

The vulnerability of the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, AMRAudioFileServerMediaSubsessionLive, and OnDemandServerMediaSubsession classes within the Live555 streaming multimedia library suite is related to resource management errors. Exploiting this...

The vulnerability of the async.c and dict.c components of the client for interacting with the HIREDIS database allows a attacker to cause a service failure.

The vulnerability of the async.c and dict.c components of the client for interacting with the HIREDIS database is related to pointer dereferencing errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the C/C++ Libstb library, related to reading beyond the allowed buffer data limits, allows a hacker to cause a service failure.

The vulnerability of the C/C++ Libstb library lies in reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially created file...

The vulnerability of the high-performance server system HPE Cray XD670, related to bypassing authentication through spoofing, allows a perpetrator to trigger a service failure.

The vulnerability of the high-performance server system HPE Cray XD670 relates to bypassing authentication through spoofing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the qi_inst_state_free component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the qiinststatefree component in the Virtuoso-OpenSource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially...

The vulnerability of the sqlg_parallel_ts_seq component in the Virtuoso-OpenSource web application development platform allows a attacker to cause a service failure.

The vulnerability of the sqlgparalleltsseq component in the Virtuoso-opensource web application development platform is related to the improper disabling or release of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafte...

The vulnerability of the sqlg_hash_source component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the sqlghashsource component in the Virtuoso-opensource web application development platform is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending...

The vulnerability of the dfe_body_copy component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the dfebodycopy component in the Virtuoso-OpenSource web application development platform is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

The vulnerability of the Hash Handler component in the 389-ds-base package allows a hacker to trigger a service failure.

The vulnerability of the Hash Handler component in the 389-ds-base package is related to insufficient password hashing. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerabilities of Linux operating system’s x86/hypervisor kernel components, which allow attackers to cause service interruptions.

The vulnerability of the hvmachineshutdown function in Linux kernel-based x86/hyperv components is related to improper initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of RDMA/hns components of Linux operating system cores, allowing attackers to cause service interruptions

The vulnerability of RDMA/hns components of the Linux operating system is related to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `tcp_can_coalesce_send_queue_head()` function in the `net/ipv4/tcp_output.c` module of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the tcpcancoalescesendqueuehead function in the net/ipv4/tcpoutput.c module of the Linux kernel is associated with code errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Cisco AnyConnect VPN server’s microprogramming software in Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateways allows a intruder to trigger a service failure.

The vulnerability of the Cisco AnyConnect VPN server in the microprogramming software for Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateways is related to a reallocation of memory. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending specially...

CVE-2024-12537

In version 0.3.32 of open-webui/open-webui, the absence of authentication mechanisms allows any unauthenticated attacker to access the api/v1/utils/code/format endpoint. If a malicious actor sends a POST request with an excessively high volume of content, the server could become completely...