CVE-2022-28541

CVE-2022-28541 describes an Uncontrolled search path element vulnerability in Samsung Update, affecting versions prior to 3.0.77.0. The flaw allows local attackers with Samsung Update permission to execute arbitrary code. No exploit details, affected platforms, nor fixed versions are provided bey...

Samsung Update 代码问题漏洞

Samsung Update Samsung Update Manager is a special upgrade tool for Samsung computers launched by Samsung Samsung in South Korea. The software is mainly used for the installation and upgrade of Samsung-related software, drivers and firmware. A security vulnerability exists in Samsung Update...

Samsung Android USB Driver 代码问题漏洞

Samsung Android USB Driver is a Samsung USB driver from Samsung South Korea. A security vulnerability exists in Samsung Android USB Driver versions prior to 1.7.50, which originates from an uncontrolled search path element vulnerability in the windows installer program. An attacker could exploit...

Denial of Service (DoS) in Nokogiri on JRuby

Summary Nokogiri v1.13.4 updates the vendored org.cyberneko.html library to 1.9.22.noko2 which addresses CVE-2022-24839. That CVE is rated 7.5 High Severity. See GHSA-9849-p7jc-9rmv for more information. Please note that this advisory only applies to the JRuby implementation of Nokogiri = 1.13.4...

The vulnerability of Xen hypervisors, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of Xen hypervisors is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a attacker to cause service failures...

Pepperl+Fuchs WirelessHART-Gateway

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Pepperl+Fuchs Equipment: WirelessHART-Gateway Vulnerabilities: Use of Hard-coded Credentials, Uncontrolled Resource Consumption, Reliance on Reverse DNS Resolution for a Security-critical Action, Path...

CVE-2021-32957 MDT AutoSave Uncontrolled Search Path Element

A function in MDT AutoSave versions prior to v6.02.06 is used to retrieve system information for a specific process, and this information collection executes multiple commands and summarizes the information into an XML. This function and subsequent process gives full path to the executable and is...

CVE-2021-43662

totolink EX300v2, ver V4.0.3c.140B20210429 and A720R ,ver V4.1.5cu.470B20200911 have an issue which causes uncontrolled resource consumption...

CVE-2021-43662

totolink EX300v2, ver V4.0.3c.140B20210429 and A720R ,ver V4.1.5cu.470B20200911 have an issue which causes uncontrolled resource consumption...

CVE-2021-43662

totolink EX300v2, ver V4.0.3c.140B20210429 and A720R ,ver V4.1.5cu.470B20200911 have an issue which causes uncontrolled resource consumption...

Input validation

totolink EX300v2, ver V4.0.3c.140B20210429 and A720R ,ver V4.1.5cu.470B20200911 have an issue which causes uncontrolled resource consumption...

Uncontrolled Resource Consumption in Apache DolphinScheduler

Apache DolphinScheduler user registration is vulnerable to Regular express Denial of Service ReDoS attacks. Apache DolphinScheduler users should upgrade to version 2.0.5 or higher...

GHSA-QG5X-66HP-CW5P Uncontrolled Resource Consumption in Apache DolphinScheduler

Apache DolphinScheduler user registration is vulnerable to Regular express Denial of Service ReDoS attacks. Apache DolphinScheduler users should upgrade to version 2.0.5 or higher...

Hitachi Energy e-mesh EMS

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: e-mesh EMS Vulnerabilities: Improper Restriction of Operations Within the Bounds of a Memory Buffer, Use After Free, Uncontrolled Resource Consumption 2. RISK EVALUATION...

CVE-2021-43662

totolink EX300v2, ver V4.0.3c.140B20210429 and A720R ,ver V4.1.5cu.470B20200911 have an issue which causes uncontrolled resource consumption...

The vulnerability of the Polkit library, related to uncontrolled resource allocation, allows a perpetrator to trigger a service failure.

The vulnerability of the Polkit library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

Denial Of Service (DoS)

HashiCorp Nomad and Nomad Enterprise is vulnerable to denial of service due to an Uncontrolled Resource Consumption...

Schneider Electric Modicon Uncontrolled Resource Consumption (CVE-2022-22724)

A CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service on ports 80 HTTP and 502 Modbus, when sending a large number of TCP RST or FIN packets to any open TCP port of the PLC. Affected Product: Modicon M340 CPUs: BMXP34 All Versions This plugin only...

CVE-2020-25182 Rockwell Automation ISaGRAF5 Runtime Uncontrolled Search Path Element

Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x searches for and loads DLLs as dynamic libraries. Uncontrolled loading of dynamic libraries could allow a local, unauthenticated attacker to execute arbitrary code. This vulnerability only affects ISaGRAF Runtime when running on Microsoft...

Uncontrolled Resource Consumption in jboss-remoting

A flaw was found in jboss-remoting in versions before 5.0.20.SP1-redhat-00001. A malicious attacker could cause threads to hold up forever in the EJB server by writing a sequence of bytes corresponding to the expected messages of a successful EJB client request, but omitting the ACK messages, or...