The vulnerability in the configuration of the traceoptions feature of the BGP protocol in the routing protocol rpd of Juniper Networks’ Junos OS and Junos OS Evolved allows a attacker to cause a service failure.

The vulnerability of the traceoptions configuration in the BGP protocol of the routing protocol rpd for Juniper Networks’ Junos OS and Junos OS Evolved is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause...

The vulnerability of the http.cookies library in the Python programming language allows a hacker to trigger a service failure.

The vulnerability of the http.cookies library in the Python interpreter relates to the use of a regular expression with high computational complexity. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service interruptions...

The vulnerability of the Junos OS Evolved operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of the Junos OS Evolved operating system is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Client Programs component of the Oracle MySQL Server database management system allows a attacker to cause a service failure.

The vulnerability of the Client Programs component of the Oracle MySQL Server database management system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL protocol...

The vulnerability of the InnoDB component of the MySQL Database Server, which allows a hacker to cause a service failure

The vulnerability of the InnoDB component in the MySQL Database Management System is related to errors in the authentication process due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

The vulnerability of the Packet Forwarding Engine (PFE) module of the Junos OS Evolved operating system, which allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in the Junos OS Evolved operating system is related to insufficient channel constraints for specified endpoints. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Vulnerability of Oracle MySQL Server’s Server: Optimizer and Cluster: General components of the database management system, allowing attackers to cause service interruptions.

Vulnerability of Server: Optimizer and Cluster: General components of the Oracle MySQL Server database management system is related to improper cleaning or release of resources. Exploiting this vulnerability may allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Suricata intrusion detection and prevention system arises from errors in checking the JA4 identifier, which provides information about the application protocol used between the client and the server. This vulnerability allows attackers to trigger a service failure.

The vulnerability of the Suricata intrusion detection and prevention system is related to errors in checking the JA4 identifier, which provides information about the application protocol used between the client and the server. Exploiting this vulnerability allows a malicious actor to cause servic...

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems is related to the execution of operations beyond the buffer in memory due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to improper checking of the return value of a function. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability in the implementation of the Online Certificate Status Protocol (OCSP) on Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Online Certificate Status Protocol OCSP implementation in Windows operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems is related to the execution of operations beyond the buffer in memory due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the Network Address Translation (NAT) technology in Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Network Address Translation NAT technology in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Network Address Translation (NAT) technology in Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Network Address Translation NAT technology in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the gnutls_pkcs7_verify function in the pkcs7 component of the GnuTLS library allows a attacker to cause a service failure.

The vulnerability of the gnutlspkcs7verify function in the pkcs7 component of the GnuTLS library is related to the reallocation of memory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

Prototype Pollution

@backstage/plugin-catalog-backend is vulnerable to Prototype Pollution. The vulnerability is caused due to improper user input sanitization in the catalog API, which allows an attacker to interrupt the service using a specially crafted query...

The vulnerability of the web servers of the microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP allows a perpetrator to cause service interruptions.

The vulnerability of the web servers of microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Networking component of Windows operating systems, which allows a hacker to trigger a service failure

The vulnerability of the Networking component of Windows operating systems exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2024-45815 Prototype pollution in @backstage/plugin-catalog-backend

Backstage is an open framework for building developer portals. A malicious actor with authenticated access to a Backstage instance with the catalog backend plugin installed is able to interrupt the service using a specially crafted query to the catalog API. This has been fixed in the 1.26.0 relea...

CVE-2024-45815 Prototype pollution in @backstage/plugin-catalog-backend

Backstage is an open framework for building developer portals. A malicious actor with authenticated access to a Backstage instance with the catalog backend plugin installed is able to interrupt the service using a specially crafted query to the catalog API. This has been fixed in the 1.26.0 relea...