Lucene search
+L

7017 matches found

BDU FSTEC
BDU FSTEC
added 2024/07/23 12:00 a.m.25 views

The vulnerability of the RubyGems.org repository, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the RubyGems.org repository for programming languages involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

4.3CVSS6.5AI score0.00494EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
added 2024/07/22 9:20 p.m.12 views

Uncontrolled Resource Consumption

dnsjava: dnsjava is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to the handling of specially crafted DNSSEC-signed zones, which can result in CPU exhaustion...

7AI score
SaveExploits0
Amazon
Amazon
added 2024/07/22 12:00 a.m.10 views

Important: tomcat9

Issue Overview: Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This led to a miscounting of active HTTP/2 streams which in turn l...

7.5CVSS7.3AI score0.04602EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/07/19 12:00 a.m.10 views

The vulnerability in the implementation of the Online Certificate Status Protocol (OCSP) on Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Online Certificate Status Protocol OCSP implementation in Windows operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS5.4AI score0.02518EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/07/19 12:00 a.m.14 views

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

8.8CVSS6.8AI score0.00392EPSS
SaveExploits0References5Affected Software2
Vulnrichment
Vulnrichment
added 2024/07/17 1:30 a.m.26 views

CVE-2024-6595 Uncontrolled Search Path Element in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 11.8 prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2 where it was possible to upload an NPM package with conflicting package data...

3CVSS6.5AI score0.00462EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2024/07/17 12:00 a.m.10 views

The vulnerability of the Windows iSCSI Service allows a hacker to trigger a service failure.

The vulnerability of the Windows iSCSI Service in Windows operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

5.3CVSS5.4AI score0.00861EPSS
SaveExploits0References2
CVE
CVE
added 2024/07/16 12:00 a.m.90 views

CVE-2019-16639

Summary: CVE-2019-16639 affects Ruijie EG-2000 series gateways, notably EG-2000SE and EG_RGOS 11.9 B11P1. The issue is a newcli.php API interface without access control, enabling an attacker who has web interface access to run TELNET commands and potentially view admin passwords via the mode_url=...

9.8CVSS7.1AI score0.00822EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2024/07/15 6:15 p.m.35 views

CVE-2024-39820

Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access...

6.6CVSS0.00156EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/15 6:15 p.m.12 views

CVE-2024-39820

Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access...

5CVSS5.8AI score0.00156EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/15 5:29 p.m.77 views

CVE-2024-39820

CVE-2024-39820 affects Zoom Workplace Desktop App for macOS prior to version 6.0.10. The issue is an uncontrolled search path element in the installer, enabling an authenticated local attacker to cause a denial of service via local access. A fixed version is 6.0.10 or later; remediation is to upg...

6.6CVSS6.1AI score0.00156EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/15 5:29 p.m.27 views

CVE-2024-39820 Zoom Workplace Desktop App for macOS - Uncontrolled Search Path Element

Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access...

6.6CVSS6.5AI score0.00156EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/15 5:29 p.m.52 views

CVE-2024-39820 Zoom Workplace Desktop App for macOS - Uncontrolled Search Path Element

Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access...

6.6CVSS0.00156EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/07/15 12:00 a.m.9 views

The vulnerability in the implementation of the Secure Boot protocol for operating systems with Windows, which allows attackers to circumvent existing security restrictions.

The vulnerability of the Secure Boot protocol for loading operating systems on Windows is related to uncontrolled recursion. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...

8.4CVSS5.5AI score0.00646EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/07/15 12:00 a.m.12 views

Zoom Workplace Security Vulnerability

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace that stems from an uncontrolled search path element in the desktop application installer that could allow an authenticated user to perform a denial of service via local access...

6.6CVSS6.2AI score0.00156EPSS
SaveExploits0References2
NVD
NVD
added 2024/07/11 5:15 p.m.29 views

CVE-2024-39551

An Uncontrolled Resource Consumption vulnerability in the H.323 ALG Application Layer Gateway of Juniper Networks Junos OS on SRX Series and MX Series with SPC3 and MS-MPC/MIC, allows an unauthenticated network-based attacker to send specific packets causing traffic loss leading to Denial of...

8.7CVSS0.00476EPSS
SaveExploits0References1
NVD
NVD
added 2024/07/11 5:15 p.m.26 views

CVE-2024-39548

An Uncontrolled Resource Consumption vulnerability in the aftmand process of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to consume memory resources, resulting in a Denial of Service DoS condition. The processes do not recover on their own and must be...

7.5CVSS0.00491EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/11 4:26 p.m.77 views

CVE-2024-39548

CVE-2024-39548 describes an Uncontrolled Resource Consumption vulnerability in the aftmand process of Juniper Networks Junos OS Evolved. An unauthenticated, network-based attacker can cause memory consumption leading to a Denial of Service; affected systems do not recover automatically and requir...

7.5CVSS7.5AI score0.00491EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/07/11 4:26 p.m.30 views

CVE-2024-39548 Junos OS Evolved: Receipt of specific packets in the aftmand process will lead to a memory leak

An Uncontrolled Resource Consumption vulnerability in the aftmand process of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to consume memory resources, resulting in a Denial of Service DoS condition. The processes do not recover on their own and must be...

7.5CVSS0.00491EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/07/11 12:00 a.m.13 views

Juniper Networks Junos OS Security Vulnerability

Juniper Networks Junos OS is a Juniper Networks USA network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that stems from the presence of an...

8.7CVSS6.8AI score0.00476EPSS
SaveExploits0References3
Rows per page
Query Builder