EulerOS Virtualization 3.0.6.0 : vim (EulerOS-SA-2022-2594)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Out-of-bounds Read CVE-2021-4166, CVE-2021-4193 - vim is vulnerable to Use After Free CVE-2021-4192 - vim is...

WAGO Series 750-88x and 750-352 Uncontrolled Resource Consumption (CVE-2020-12516)

Older firmware versions FW1 up to FW10 of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack. - Older firmware versions FW1 up to FW10 of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack. CVE-2020-12516 This...

The vulnerability of the implementation of executable files of the IntelliJ IDEA software installer allows a perpetrator to execute arbitrary code.

The vulnerability of the executable file installation mechanism of the IntelliJ IDEA integrated development environment is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to execute arbitrary code...

The vulnerability of the SPICE remote virtual desktop rendering system, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.

The vulnerability of the SPICE remote virtual desktop rendering system is related to significantly lower resource consumption on the client side compared to the server when establishing a new SSL connection. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

EulerOS Virtualization 2.9.0 : vim (EulerOS-SA-2022-2405)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428. CVE-2022-0696 - Use after free in utfptr2char in GitHub...

PT-2022-6462 · Esr-20 · Esr-20

Name of the Vulnerable Software and Affected Versions: ESR-20 affected versions not specified Description: The issue is related to an uncontrolled resource consumption in the ESR-20 service router's firmware. Exploitation of this issue may allow an attacker to cause a denial of service...

PT-2022-6072 · Apache · Apache Kafka

Name of the Vulnerable Software and Affected Versions: Apache Kafka versions 2.8.0 through 3.2.2 Apache Kafka versions 2.8.0 through 3.1.1 Apache Kafka versions 2.8.0 through 3.0.1 Apache Kafka versions 2.8.0 through 2.8.1 Description: A security issue in Apache Kafka is related to uncontrolled...

CVE-2022-2333 Honeywell SoftMaster Uncontrolled Search Path Element

If an attacker manages to trick a valid user into loading a malicious DLL, the attacker may be able to achieve code execution in Honeywell SoftMaster version 4.51 application’s context and permissions...

CVE-2022-3222

Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV...

DEBIAN-CVE-2022-3222

Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV...

Information disclosure

Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV...

CVE-2022-3222 Uncontrolled Recursion in gpac/gpac

Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV...

CVE-2022-3222

Removed by vendor...

CVE-2022-3222

GPAC (gpac/gpac) vulnerability CVE-2022-3222 affects versions prior to 2.1.0-DEV due to an Uncontrolled Recursion issue. The CVSS data indicates high impact on availability (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). No exploitation details are provided in the sources. Remediation is to upgrade gpac p...

The vulnerability of Ruby programming language date parsing methods, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of Ruby programming language date parsing methods is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service failures...

EulerOS 2.0 SP9 : vim (EulerOS-SA-2022-2336)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software,...

EulerOS 2.0 SP9 : vim (EulerOS-SA-2022-2307)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software,...

Siemens SINEC INS

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Siemens Equipment: SINEC INS Vulnerabilities: Improper Input Validation, Integer Overflow or Wraparound, Uncontrolled Resource Consumption, Command Injection, Inadequate Encryption Strength, Missing...

Siemens RUGGEDCOM ROS

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

The vulnerability of the eepro100 i8255x hardware emulation software by QEMU allows a hacker to induce a service failure.

The vulnerability of the eepro100 i8255x hardware emulation software by QEMU is related to an uncontrolled recursion. Exploiting this vulnerability could allow a perpetrator to cause a system failure...