Certain HP and Samsung printer software - Potential elevation of privileges

Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element. Update the printer software...

Moxa NPort 5210 5230 5232 Uncontrolled Resource Consumption (CVE-2018-10632)

In Moxa NPort 5210, 5230, and 5232 versions 2.9 build 17030709 and prior, the amount of resources requested by a malicious actor are not restricted, allowing for a denial-of-service condition. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mor...

Moxa EDS Ethernet Switches Uncontrolled Resource Consumption (CVE-2019-19707)

On Moxa EDS-G508E, EDS-G512E, and EDS-G516E devices with firmware through 6.0, denial of service can occur via PROFINET DCE-RPC endpoint discovery packets. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

The vulnerability of the microprogrammed software of Wi-Fi routers ASUS RT-AC86U and RT-AX56U allows a hacker to execute arbitrary code.

The vulnerability of ASUS’ Wi-Fi router software, RT-AC86U and RT-AX56U, is related to the use of uncontrolled format strings. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Moxa NPort 5110, 5130, and 5150 Uncontrolled Resource Consumption (CVE-2017-14028)

A Resource Exhaustion issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to exhaust memory resources by sending a large amount ...

Moxa Industrial Managed Switch Uncontrolled Resource Consumption (CVE-2015-6465)

The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause a denial of service reboot via a crafted URL. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

CVE-2023-0632 Inefficient Regular Expression Complexity in GitLab

An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A Regular Expression Denial of Service was possible by using crafted payloads to search Harbor Registry...

CVE-2023-3825

PTC’s KEPServerEX Versions 6.0 to 6.14.263 are vulnerable to being made to read a recursively defined object that leads to uncontrolled resource consumption. KEPServerEX uses OPC UA, a protocol which defines various object types that can be nested to create complex arrays. It does not implement a...

CVE-2023-3825

CVE-2023-3825 affects PTC KEPServerEX (Versions 6.0–6.14.263). The root cause is the OPC UA message decoder not validating recursively defined objects, enabling an attacker to trigger uncontrolled resource consumption, potentially causing stack overflow and device crash (DoS). Public sources cons...

Synology Router Manager (SRM) 1.3.x < 1.3.1-9346-6 Multiple Vulnerabilities (Synology-SA-23:10) - Unreliable Remote Version Check

Synology Router Manager SRM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2023-35929

Tuleap is a free and open source suite to improve management of software development and collaboration. Prior to version 14.10.99.4 of Tuleap Community Edition and prior to versions 14.10-2 and 14.9-5 of Tuleap Enterprise Edition, content displayed in the "card fields" visible in the kanban and P...

CVE-2023-3637

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significa...

The vulnerability of the Mongoose library, related to uncontrolled changes to object prototype attributes, allows attackers to execute a “prototype pollution” attack.

The vulnerability of the Mongoose library is related to uncontrolled changes to object prototypes’ attributes. Exploiting this vulnerability could allow a remote attacker to execute a “prototype pollution” attack...

The vulnerability of Rockwell Automation’s FactoryTalk Transaction Manager software, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.

The vulnerability of Rockwell Automation’s FactoryTalk Transaction Manager software-related manufacturing process management systems is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the `ksmbd_verify_smb_message()` function in the `fs/smb/server/smb_common.c` file of the KSMBD file system of the Linux operating system allows a attacker to access protected information or cause service failures.

The vulnerability of the ksmbdverifysmbmessage function in the fs/smb/server/smbcommon.c file of the KSMBD file system in the Linux operating system is related to the lack of control over the request identifier. Exploiting this vulnerability could allow a remote attacker to access protected...

The vulnerability of the libqpdf/QPDWriter.cc utility for command-line processing of PDF documents allows a malicious actor to cause service interruptions.

The vulnerability of the libqpdf/QPDWriter.cc command-line utility for converting PDF documents is related to an uncontrolled recursion. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using a specially created PDF file...

Juniper Junos OS Vulnerability (JSA70196)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70196 advisory. - An Uncontrolled Resource Consumption vulnerability in the PFE management daemon evo-pfemand of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based...

The vulnerability of the Python programming language interpreter, related to uncontrolled resource consumption, allows attackers to trigger service failures.

The vulnerability of the Python programming language interpreter is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service failures...

The vulnerability of the ezxml_ent_ok function in the XML document syntax analysis library ezXML allows a attacker to cause a service failure.

The vulnerability of the ezxmlentok function in the XML document syntax analysis library ezXML is related to an uncontrolled recursion. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially created XML file...

The vulnerability of the d_count_templates_scopes function in the libiberty/cp-demangle.c component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the dcounttemplatesscopes function in the libiberty/cp-demangle.c component of the GNU Binutils development environment is related to an uncontrolled recursion. Exploiting this vulnerability allows a remote attacker to cause service interruptions...