Pillow Denial of Service by Uncontrolled Resource Consumption

Pillow before 8.1.2 allows attackers to cause a denial of service memory consumption because the reported size of a contained image is not properly checked for a BLP container, and thus an attempted memory allocation can be very large...

Pillow Denial of Service by Uncontrolled Resource Consumption

Pillow before 8.1.2 allows attackers to cause a denial of service memory consumption because the reported size of a contained image is not properly checked for an ICO container, and thus an attempted memory allocation can be very large...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1645)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17

Unsafe validation RegEx in EmailField component in com.vaadin:vaadin-text-field-flow versions 2.0.4 through 2.3.2 Vaadin 14.0.6 through 14.4.3, and 3.0.0 through 4.0.2 Vaadin 15.0.0 through 17.0.10 allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses...

EulerOS Virtualization 2.9.0 : edk2 (EulerOS-SA-2021-1668)

According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - EFI Development Kit II AARCH64 UEFI FirmwareSecurity Fixes:AuthenticodeVerify calls OpenSSLs d2iPKCS7 API to parse asn encoded signe...

NewStart CGSL CORE 5.04 / MAIN 5.04 : qt5-qtbase Multiple Vulnerabilities (NS-SA-2021-0035)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has qt5-qtbase packages installed that are affected by multiple vulnerabilities: - An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. readxbmbody in gui/image/qxbmhandler.cpp has a buffer...

EulerOS Virtualization 3.0.2.6 : curl (EulerOS-SA-2021-1410)

According to the version of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match...

CVE-2021-28040

An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in osxml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached...

CVE-2021-28040

An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in osxml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached...

Design/Logic Flaw

An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in osxml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1466)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libproxy (EulerOS-SA-2021-1530)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability in the function of the file srs2.c in the PostSRSd package allows a hacker to cause a service failure.

The vulnerability in the srs2.c file of the PostSRSd package involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause a service failure consumption of computing resources by using a tag with a time stamp in the SRS address...

The vulnerability of the SSH service on Cisco StarOS allows a hacker to trigger a service failure.

The vulnerability of the SSH service on Cisco StarOS is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of Intel Ethernet E810 series network adapter drivers allows a hacker to cause a service failure.

The vulnerability of Intel Ethernet E810 series network adapter drivers is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a attacker to cause service interruptions...

Design/Logic Flaw

Uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access...

Code injection

Uncontrolled search path in the IntelR OptaneTM DC Persistent Memory installer for Windows before version 1.00.00.3506 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-24451

Uncontrolled search path in the IntelR OptaneTM DC Persistent Memory installer for Windows before version 1.00.00.3506 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-24451

The CVE-2020-24451 issue affects Intel Optane DC Persistent Memory software for Windows prior to version 1.00.00.3506. The root cause is an uncontrolled search path in the installer, enabling an authenticated local user to potentially escalate privileges. Impact is described as high confidentiali...

CVE-2020-24504

CVE-2020-24504: Affects Intel Ethernet E810 Adapter drivers for Linux. Uncontrolled resource consumption could allow a locally-authenticated user to cause denial of service. Expected fix is upgrade to Linux driver version 1.0.4 or later (per initial description). MiracleLinux AXSA advisory corrob...