TOTOLINK CP450 Hardcoding Vulnerability

The TOTOLINK CP450 is a wireless bridge device manufactured by China's Gion Electronics TOTOLINK. A hard-coded vulnerability exists in the TOTOLINK CP450. This affects unknown parts of the /webcste/cgi-bin/product.ini file of the component Telnet Service. No details of the vulnerability are...

SUSE SLES15 / openSUSE 15 Security Update : squid (SUSE-SU-2024:2268-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:2268-1 advisory. - Update to version 6.10 - CVE-2024-37894: Fixed a denial of Service issue in ESI processing bsc1227086 Tenable has extracted...

PT-2024-14538 · Unknown · Ril Service

Name of the Vulnerable Software and Affected Versions: ril service affected versions not specified Description: The issue is related to a possible out of bounds write in the ril service due to a missing bounds check. This could lead to local denial of service and requires System execution...

Ubuntu 23.10 : Rack vulnerabilities (USN-6689-1)

The remote Ubuntu 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6689-1 advisory. It was discovered that Rack incorrectly parse some headers. An attacker could possibly use this issue to cause a denial of service. CVE-2023-27539,...

Studio will not open with error "A working 'Storefront' service could not be found"

Storefront is installed on the DDC. After successfully upgrading both Storefront servers to CVAD 2203 CU3, Studio fails to open with the following error. After clicking on "View Details" another error appears: "A working 'Storefront' service could not be found" Error Id: XDDS:E354580F Exception:...

SUSE-SU-2023:4958-1 Security update for tinyxml

This update for tinyxml fixes the following issues: - CVE-2023-34194: Fixed reachable assertion may lead to denial of service bsc1218040...

CVE-2023-6174 Out-of-bounds Read in Wireshark

SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file...

Unable to launch resources or Studio - connection between broker service and database has been lost

Users unable to launch resources such as published applications and desktops. Administrators unable to use Studio to manage environment. When checking event viewer logs on the DDC, we see event 1201 warning: When accessing the SQL Database, below error is see:...

PT-2023-24046 · Unknown · Gnss Service

Name of the Vulnerable Software and Affected Versions: gnss service affected versions not specified Description: The issue is related to a possible out of bounds read in the gnss service due to improper input validation. This could lead to local information disclosure with System execution...

PT-2023-24047 · Unknown · Gnss Service

Name of the Vulnerable Software and Affected Versions: gnss service affected versions not specified Description: The issue is related to a possible out of bounds read in the gnss service due to improper input validation. This could lead to local information disclosure, requiring System execution...

SUSE-SU-2023:2789-1 Security update for bind

This update for bind fixes the following issues: - CVE-2023-2828: Fixed DOS against recursive resolvers related to cache-cleaning algorithm bsc1212544...

PT-2023-17882 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: A local escalation of privilege issue exists due to a possible way to keep the foreground service alive while the app is in the background. This could lead to local escalation of...

SUSE-SU-2023:1710-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. - CVE-2022-3523: Fixed a use after free related to device private page handling bsc1204363. - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver bsc1203332. -...

CVE-2022-0650

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on...

PT-2023-20760 · Zoho · Zoho Manageengine Supportcenter Plus +2

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ServiceDesk Plus versions through 14104 Zoho ManageEngine Asset Explorer versions through 6987 Zoho ManageEngine ServiceDesk Plus MSP versions prior to 14000 Zoho ManageEngine Support Center Plus versions prior to 14000...

SA40206 - [Pulse Secure] Denial of service issue possible (CVE-2016-4786)

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. An issue was discovered in the Pulse Connect Secure device that would allow an attacker to impact CPU performance. This issue exists on non-authenticated resources. This issue was...

CVE-2022-42732

A vulnerability has been identified in syngo Dynamics All versions VA40G HF01. syngo Dynamics application server hosts a web service using an operation with improper read access control that could allow files to be retrieved from any folder accessible to the account assigned to the website’s...

[ADM Service]"failed with error Unable to set capacity" when allocate ADC licence in Cloud

The newly built ADC VPX could successfully onboarding to Cloud ADM Service. However, when allocate ADC VPX Instance and Bandwidth license to VPX in ADM service GUI page, opeartion failied with below error prompt: "Failed to set capacity. Reason:Command failed on ... Request to ... failed with err...

CVE-2022-36018 `CHECK` fail in `RaggedTensorToVariant` in TensorFlow

TensorFlow is an open source platform for machine learning. If RaggedTensorToVariant is given a rtnestedsplits list that contains tensors of ranks other than one, it results in a CHECK fail that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

PT-2022-19288 · F Secure +1 · F-Secure +1

Name of the Vulnerable Software and Affected Versions: F-Secure & WithSecure products affected versions not specified Description: A Denial-of-Service DoS issue was found, where the aerdl unpack function crashes, potentially leading to a scanning engine crash. This can be triggered remotely by an...