Prototype Pollution

@backstage/plugin-catalog-backend is vulnerable to Prototype Pollution. The vulnerability is caused due to improper user input sanitization in the catalog API, which allows an attacker to interrupt the service using a specially crafted query...

Networking Windows DoS

The vulnerability of the Networking component of Windows operating systems exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

SIMATIC CP DoS

The vulnerability of the web servers of microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2024-45815 Prototype pollution in @backstage/plugin-catalog-backend

Backstage is an open framework for building developer portals. A malicious actor with authenticated access to a Backstage instance with the catalog backend plugin installed is able to interrupt the service using a specially crafted query to the catalog API. This has been fixed in the 1.26.0 relea...

CVE-2024-45815 Prototype pollution in @backstage/plugin-catalog-backend

Backstage is an open framework for building developer portals. A malicious actor with authenticated access to a Backstage instance with the catalog backend plugin installed is able to interrupt the service using a specially crafted query to the catalog API. This has been fixed in the 1.26.0 relea...

LibGD Buffer Overflow DoS

The vulnerability of the LibGD graphics library is related to reading data beyond the acceptable buffer limit. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux kernel amdgpu_vm_bo_update Pointer Dereferencing DoS

The vulnerability of the amdgpuvmboupdate function in the drivers/gpu/drm/amd/amdgpu/amdgpuvm.c file of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

OpenJPEG Buffer Overflow

The vulnerability of the color.c component in the sycc420torgb function of the OpenJPEG library, which is used for image encoding and decoding, relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...

.NET Development Platform DoS

The vulnerability of the .NET development platform used by Microsoft Visual Studio is related to the transmission of credentials in an unencrypted form. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

PAN-OS DoS

The vulnerability of the PAN-OS operating system in the Palo Alto Networks Panorama network switch management system is related to the ability to download unlimited files of a malicious nature. Exploiting this vulnerability allows a malicious actor to cause service interruptions by downloading...

Juniper Networks RPD DoS

The vulnerability of the Daemon Routing Protocols RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow a malicious actor to cause service failures...

IBM Db2 Denial of Service Vulnerability (CNVD-2024-36740)

IBM Db2 is a high-performance relational database management system RDBMS developed by IBM and designed to handle large amounts of data and complex business needs. A denial of service vulnerability exists in IBM Db2 in versions 11.1 and 11.5. The vulnerability arises due to improper memory...

Juniper Networks’ Junos OS Packet Forwarding Engine DoS

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS on SRX Series devices is related to the use of uncontrolled format strings. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Banzai Pipeline DoS

The vulnerability of Banzai Pipeline, a software platform based on Git for collaborative code development on GitLab, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

GitLab Uncontrolled Resource Consumption DoS

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service interruptions by sending specially created adoc...

MuPDF PDF Viewer Heap Buffer Overflow DoS

The vulnerability of the bmpdecompressrle4 function in the MuPDF PDF viewer software is related to division by zero. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Elasticsearch DoS

The vulnerability of Elasticsearch, a software platform based on Git for collaborative code development on GitLab, is related to an uncontrolled resource consumption during the processing of search results. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

LoLLMS WebUI Uncontrolled Resource Consumption DoS

The vulnerability in the LoLLMS WebUI web interface, which is used to launch and manage large language models in LoLLMS Lord of Large Language Multimodal Systems, involves an uncontrolled resource consumption during the processing of the end-point opencodeinvscode. Exploiting this vulnerability...

MuPDF PDF Viewer Heap Buffer Overflow DoS

The vulnerability of the fznewpixmapfromfloatdata function in the MuPDF PDF viewer software is related to division by zero. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

gf_fwrite Component GFAC Multimedia Platform DoS

The vulnerability of the gffwrite component in the GPAC multimedia platform is related to buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...