Browse CVEs

HIGH 7.5 CVE-2023-1992 RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file Wireshark 3.6.13 / 4.0.5+ Fix from $1,9502023-04-12 HIGH 7.5 CVE-2023-28217 Windows Network Address Translation (NAT) Denial of Service Vulnerability Windows 10 1507 10.0.10240.19869 / 10.0.14393.5850+ Fix from $1,9502023-04-11 HIGH 7.5 CVE-2023-24860 Microsoft Defender Denial of Service Vulnerability Malware Protection Engine 1.1.20200.4+ Fix from $1,9502023-04-11 MEDIUM 6.5 CVE-2023-29185 SAP NetWeaver AS for ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an attacker auth… Netweaver As Abap Business Server Pages Mitigation only Fix from $1,6002023-04-11 MEDIUM 6.5 CVE-2023-28763 SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker authenticated as a non-ad… Netweaver Application Server Abap Mitigation only Fix from $1,6002023-04-11 HIGH 7.5 CVE-2023-27191 An issue found in DUALSPACE Super Secuirty v.2.3.7 allows an attacker to cause a denial of service via the SharedPreference files. Super Security No fix yet Fix from $1,9502023-04-11 HIGH 7.5 CVE-2023-24534 HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service. Certai… Go 1.19.8 / 1.20.3+ Fix from $1,9502023-04-06 MEDIUM 5.3 CVE-2023-1787 An issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. A se… GitLab 15.9.4+ Fix from $1,6002023-04-05 HIGH 7.5 CVE-2023-1733 A denial of service condition exists in the Prometheus server bundled with GitLab affecting all versions from 11.10 to 15.8.5, 15.9 to 15.9.4 and 15.… GitLab 15.8.5 / 15.9.4+ Fix from $1,9502023-04-05 HIGH 7.5 CVE-2023-28342EPSS 78% Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API. Manageengine Adselfservice Plus Mitigation only Fix from $1,9502023-04-05 HIGH 7.5 CVE-2023-20051 A vulnerability in the Vector Packet Processor (VPP) of Cisco Packet Data Network Gateway (PGW) could allow an unauthenticated, remote attacker to st… Packet Data Network Gateway 21.28.0+ Fix from $1,9502023-04-05 MEDIUM 6.5 CVE-2023-0382 User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption. M Files Server 23.4.12528.1+ Fix from $1,6002023-04-05 MEDIUM 5.5 CVE-2023-27734 An issue found in Eteran edb-debugger v.1.3.0 allows a local attacker to causea denial of service via the collect_symbols function in plugins/BinaryI… Edb Debugger Patch available Fix from $1,6002023-04-04 MEDIUM 5.3 CVE-2023-26437 Denial of service vulnerability in PowerDNS Recursor allows authoritative servers to be marked unavailable.This issue affects Recursor: through 4.6.5… Recursor 4.6.6 / 4.7.5+ Fix from $1,6002023-04-04 MEDIUM 6.5 CVE-2020-19850 An issue found in Directus API v.2.2.0 allows a remote attacker to cause a denial of service via a great amount of HTTP requests. Directus Patch available Fix from $1,6002023-04-04 HIGH 7.5 CVE-2023-1580 Uncontrolled resource consumption in the logging feature in Devolutions Gateway 2023.1.1 and earlier allows an attacker to cause a denial of service … Devolutions Gateway 2023.1.2+ Fix from $1,9502023-04-02 HIGH 7.5 CVE-2023-24824 cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may… Cmark Gfm 0.29.0.gfm.10.+ Fix from $1,9502023-03-31 HIGH 7.5 CVE-2023-26485 cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may… Cmark Gfm 0.29.0.gfm.10+ Fix from $1,9502023-03-31 HIGH 7.5 CVE-2022-4899 A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun. Zstandard Patch available Fix from $1,9502023-03-31 MEDIUM 6.5 CVE-2023-29139 An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. When a user with checkuserlog permissions makes many CheckUserLog AP… Mediawiki after 1.39.3 Fix from $1,6002023-03-31 HIGH 7.5 CVE-2023-28846 Unpoly is a JavaScript framework for server-side web applications. There is a possible Denial of Service (DoS) vulnerability in the `unpoly-rails` ge… Unpoly Rails 2.7.2.2+ Fix from $1,9502023-03-30 HIGH 7.5 CVE-2023-28644 Nextcloud server is an open source home cloud implementation. In releases of the 25.0.x branch before 25.0.3 an inefficient fetch operation may impac… Nextcloud Server 25.0.3+ Fix from $1,9502023-03-30 CRITICAL 9.8 CVE-2023-28507 Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a memory… Unidata after 12.2.1 Fix from $2,3002023-03-29 HIGH 7.5 CVE-2023-28626 comrak is a CommonMark + GFM compatible Markdown parser and renderer written in rust. A range of quadratic parsing issues are present in Comrak. Thes… Comrak 0.17.0+ Fix from $1,9502023-03-28 HIGH 7.5 CVE-2022-48351 The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability. Emui No fix yet Fix from $1,9502023-03-27 HIGH 7.8 CVE-2023-1654 Denial of Service in GitHub repository gpac/gpac prior to 2.4.0. Gpac after 2.2.0 Fix from $1,9502023-03-27 HIGH 7.5 CVE-2023-21061 Product: AndroidVersions: Android kernelAndroid ID: A-229255400References: N/A Android No fix yet Fix from $1,9502023-03-24 MEDIUM 5.5 CVE-2023-21033 In addNetwork of WifiManager.java, there is a possible way to trigger a persistent DoS due to resource exhaustion. This could lead to local denial of… Android Patch available Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-20910 In add of WifiNetworkSuggestionsManager.java, there is a possible way to trigger permanent DoS due to resource exhaustion. This could lead to local d… Android Mitigation only Fix from $1,6002023-03-24 HIGH 7.8 CVE-2023-20911 In addPermission of PermissionManagerServiceImpl.java , there is a possible failure to persist permission settings due to resource exhaustion. This c… Android Patch available Fix from $1,9502023-03-24