CVE-2024-52520 15 Nov 2024
Nextcloud Server is a self hosted personal cloud system. Due to a pre-flighted HEAD request, the link reference provider could be tricked into downloa... Read more ➔
CVE-2023-20125 (v3: 8.6) 15 Nov 2024
A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacker to exhaust system resources,... Read more ➔
CVE-2024-9409 13 Nov 2024
CWE-400: An Uncontrolled Resource Consumption vulnerability exists that could cause the device to become unresponsive resulting in communication loss... Read more ➔
CVE-2024-47535 12 Nov 2024
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clie... Read more ➔
CVE-2024-46891 (v3: 5.3) 12 Nov 2024
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly restrict the size o... Read more ➔
CVE-2024-10599 31 Oct 2024
A vulnerability, which was classified as problematic, has been found in Tongda OA 2017 up to 11.7. This issue affects some unknown processing of the f... Read more ➔
CVE-2024-7807 29 Oct 2024
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240628 allows for a Denial of Service (DOS) attack. When uploading a file, if an attacker appe... Read more ➔
CVE-2024-49767 25 Oct 2024
Werkzeug is a Web Server Gateway Interface web application library. Applications using `werkzeug.formparser.MultiPartParser` corresponding to a versio... Read more ➔
CVE-2024-50311 22 Oct 2024
A denial of service (DoS) vulnerability was found in OpenShift. This flaw allows attackers to exploit the GraphQL batching functionality. The vulnerab... Read more ➔
CVE-2024-47497 (v3: 7.5) 11 Oct 2024
An Uncontrolled Resource Consumption vulnerability in the http daemon (httpd) of Juniper Networks Junos OS on SRX Series, QFX Series, MX Series and EX... Read more ➔
CVE-2024-7294 9 Oct 2024
In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), an HTTP DoS attack is possible on anonymous endpoints without rate limiti... Read more ➔
CVE-2024-43545 (v3: 7.5) 8 Oct 2024
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability Read more ➔
CVE-2024-43789 7 Oct 2024
Discourse is an open source platform for community discussion. A user can create a post with many replies, and then attempt to fetch them all at once.... Read more ➔
CVE-2024-47554 3 Oct 2024
Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume C... Read more ➔
CVE-2024-9358 1 Oct 2024
A vulnerability has been found in ThingsBoard up to 3.7.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of... Read more ➔
CVE-2024-8451 30 Sep 2024
Certain switch models from PLANET Technology have an SSH service that improperly handles insufficiently authenticated connection requests, allowing un... Read more ➔
CVE-2024-37125 26 Sep 2024
Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x,10.5.3.x, contains an Uncontrolled Resource Consumption vulnerability. A remote... Read more ➔
CVE-2024-8939 17 Sep 2024
A vulnerability was found in the ilab model serve component, where improper handling of the best_of parameter in the vllm JSON web API can lead to a D... Read more ➔
CVE-2024-8418 4 Sep 2024
A flaw was found in Aardvark-dns versions 1.12.0 and 1.12.1. They contain a denial of service vulnerability due to serial processing of TCP DNS querie... Read more ➔