CVE-2024-21523

All versions of the package images are vulnerable to Denial of Service DoS due to providing unexpected input types to several different functions. This makes it possible to reach an assert macro, leading to a process crash. Note: By providing some specific integer values like 0 to the size...

node-speaker Security Vulnerabilities

node-speaker is a writable stream instance by Nathan Rajlich Personal Developer. It is used to receive PCM audio data and output it to a speaker. A security vulnerability exists in node-speaker that stems from vulnerability to Denial of Service DoS attacks that can cause the process to crash when...

node-images Security Vulnerabilities

node-images is a lightweight cross-platform image codec library for Node.js by the individual developer zhangyuanwei. A security vulnerability exists in node-images that stems from providing unexpected input types to multiple different functions, making it susceptible to Denial of Service DoS...

CVE-2024-6382

The CVE-2024-6382 issue affects the MongoDB Rust Driver: vulnerable in 2.0.x releases prior to 2.8.2. The root cause is incorrect handling of certain string inputs, which can cause the driver to construct unintended server commands. Impact described across sources includes unexpected application ...

Adversarial unsanitized input may cause MongoDB Rust Driver to issue unintended commands.

Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.2...

CVE-2024-32755

Under certain circumstances the web interface will accept characters unrelated to the expected input...

CVE-2024-32755

CVE-2024-32755 affects Johnson Controls Illustra Essentials Gen 4 (Illustra.Ess4.x) where the web interface improperly handles input, accepting characters unrelated to expected input. Technical sources (ICS/CISA advisory and vendor notices) confirm the vulnerability stems from improper input vali...

PT-2024-24828 · Johnson Controls · American Dynamics Illustra Essentials Gen 4 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The web interface may accept characters unrelated to the expected input under certain circumstances. Recommendations: At the moment, there is no information about a newer version that...

CVE-2024-30110 Lack of input validation vulnerability affects DRYiCE AEX v10

HCL DRYiCE AEX product is impacted by lack of input validation vulnerability in a particular web application. A malicious script can be injected into a system which can cause the system to behave in unexpected ways...

CVE-2024-30110 Lack of input validation vulnerability affects DRYiCE AEX v10

HCL DRYiCE AEX product is impacted by lack of input validation vulnerability in a particular web application. A malicious script can be injected into a system which can cause the system to behave in unexpected ways...

h2o vulnerable to unexpected POST request shutting down server

In h2oai/h2o-3 version 3.46.0, the runtool command in the rapids component allows the main function of any class under the water.tools namespace to be called. One such class, MojoConvertTool, crashes the server when invoked with an invalid argument, causing a denial of service...

CVE-2024-5535

Issue summary: Calling the OpenSSL API function SSLselectnextproto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences such as unexpected application beahviour or ...

Malicious code in unexpected-steps (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3260 Malicious code in unexpected-steps (npm)

--- -= Per source details. Do not edit below this line.=-...

Women in Tech: Remain Open to Unexpected Opportunities

Akamai CIO Kate Prouty explores the benefits of remaining open to new opportunities and salutes the bond among women in tech...

GO-2024-2917 Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik

Traefik has unexpected behavior with IPv4-mapped IPv6 addresses in github.com/traefik/traefik...

CVE-2023-46103

A flaw was found in intel-microcode. The sequence of processor instructions leads to unexpected behavior in IntelR CoreTM Ultra processors that may allow an authenticated user to enable a denial of service via local access. Mitigation Mitigation for this issue is either not available or the...

GHSA-7JMW-8259-Q9JX Traefik has unexpected behavior with IPv4-mapped IPv6 addresses

Impact There is a vulnerability in Go managing various Is methods IsPrivate, IsLoopback, etc for IPv4-mapped IPv6 addresses. They didn't work as expected returning false for addresses which would return true in their traditional IPv4 forms. References - CVE-2024-24790 Patches -...

CVE-2024-27857

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2. A remote attacker may be able to cause unexpected app termination or arbitrary code execution...

CVE-2024-27802

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, visionOS 1.2. Processing a maliciously crafted file may lead to unexpected...