Design/Logic Flaw

An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks JUNOS OS allows an unauthenticated network based attacker to cause 100% CPU load and the device to become unresponsive by sending a flood of traffic to the out-of-band management ethernet port. Continued receipte...

CVE-2021-31368

CVE-2021-31368 (Juniper JUNOS OS) affects EX2300, EX3400, and ACX710 devices. An unauthenticated network attacker can cause 100% CPU load and a DoS by flooding the out-of-band management port, leading to the device becoming unresponsive; system recovery occurs after the flood stops. The vulnerabi...

CVE-2021-31368 Junos OS: EX2300 Series, EX3400 Series, and ACX710 might become unresponsive if the out-of-band management port receives a flood of traffic

An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks JUNOS OS allows an unauthenticated network based attacker to cause 100% CPU load and the device to become unresponsive by sending a flood of traffic to the out-of-band management ethernet port. Continued receipte...

CVE-2021-31365

CVE-2021-31365 describes an Uncontrolled Resource Consumption vulnerability in Juniper Networks Junos OS on the EX2300, EX3400 and EX4300 Series. An adjacent attacker sending a stream of specific Layer 2 frames can cause an Aggregated Ethernet (AE) interface to go down, resulting in a Denial of S...

CVE-2021-41142

Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments. There is a cross-site scripting vulnerability in Tuleap Community Edition prior to 12.11.99.25 and Tuleap Enterprise Edition 12.11-2. A malicious user with the capability to add and...

CVE-2021-41142

Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments. There is a cross-site scripting vulnerability in Tuleap Community Edition prior to 12.11.99.25 and Tuleap Enterprise Edition 12.11-2. A malicious user with the capability to add and...

Cross site scripting

Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments. There is a cross-site scripting vulnerability in Tuleap Community Edition prior to 12.11.99.25 and Tuleap Enterprise Edition 12.11-2. A malicious user with the capability to add and...

CVE-2021-41142 XSS via the name of a deleted attachment

Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments. There is a cross-site scripting vulnerability in Tuleap Community Edition prior to 12.11.99.25 and Tuleap Enterprise Edition 12.11-2. A malicious user with the capability to add and...

Juniper Junos OS Vulnerability (JSA11230)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11230 advisory. - An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks JUNOS OS allows an unauthenticated network based attacker to cause 100% CPU load and t...

Siemens RUGGEDCOM ROX Devices

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: RUGGEDCOM ROX Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated attacker to cause a...

CVE-2021-20600

Uncontrolled resource consumption in Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V Firmware Versions "16" and prior allows a remote unauthenticated attacker to cause a denial-of-service DoS condition by sending a large number of packets in a short time while the module...

CVE-2021-20600

Uncontrolled resource consumption in Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V Firmware Versions "16" and prior allows a remote unauthenticated attacker to cause a denial-of-service DoS condition by sending a large number of packets in a short time while the module...

CVE-2021-20600

Summary: CVE-2021-20600 affects Mitsubishi Electric MELSEC iQ-R Series C Controller Module R12CCPU-V (firmware version 16 and earlier). An attacker can remotely trigger a DoS by sending a high volume of packets during startup, potentially preventing the module from starting and requiring a system...

Mitsubishi Electric MELSEC iQ-R Series C Controller Module (Update B)

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Equipment: MELSEC iQ-R Series C Controller Module R12CCPU-V Vulnerability: Uncontrolled Resource Consumption 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled...

CVE-2021-39877

A vulnerability was discovered in GitLab starting with version 12.2 that allows an attacker to cause uncontrolled resource consumption with a specially crafted file...

CVE-2021-39877

A vulnerability was discovered in GitLab starting with version 12.2 that allows an attacker to cause uncontrolled resource consumption with a specially crafted file...

GitLab 资源管理错误漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to view a project's file contents, commit history, bug lists, and more. A resource management error vulnerability exists in GitLab,...

The vulnerability of the cross-platform hypervisor Xen kernel in the Linux operating system, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure for dom0 or domain drivers.

The vulnerability of the cross-platform hypervisor Xen in the Linux operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow an attacker to cause a failure in the dom0 service or the domain driver...

The vulnerability of the intel_pmu_drain_pebs_nhm function (arch/x86/events/intel/ds.c) in the Linux operating system’s kernel, which involves uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the intelpmudrainpebsnhm function arch/x86/events/intel/ds.c in the Linux operating system’s kernel is related to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2021-35982

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by an Uncontrolled Search Path Element vulnerability. A local attacker with non-administrative privileges can plant a malicious DLL to achieve arbitrary code execution in...