Denial of Service (DoS) - 39664 CVEs (Page 65/331)

About “Denial of Service (DoS)”

A curated feed of “Denial of Service (DoS)”-related CVEs appears below. We currently track 39664 CVEs for this tag (all time). In the last 365 days, 3231 were published. Average CVSS is 6.6 (all time; 6.6 over 365d), and 47% are rated High/Critical (all time). Top CWEs (last 365 days): CWE-400 - Uncontrolled Resource Consumption, CWE-770 - Allocation of Resources Without Limits or Throttling, CWE-476 - NULL Pointer Dereference.

In our taxonomy this topic maps to a LOW impact class. Vendor advisories and release notes are key. Verify compatibility matrices, prefer supported long term versions, and stage rollouts with monitoring. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.

CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).

CVSS ≥ 0.0

2023-06-14

High

CVE-2023-34624

An issue was discovered htmlcleaner thru = 2.28 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

CVSS: 7.5 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2023-34623

An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

CVSS: 7.5 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2023-34620

An issue was discovered hjson thru 3.0.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

CVSS: 7.5 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2023-34617

An issue was discovered genson thru 1.6 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

CVSS: 7.5 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2023-34616

An issue was discovered pbjson thru 0.4.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

CVSS: 7.5 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2023-34615

An issue was discovered JSONUtil thru 5.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

CVSS: 7.5 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2023-34614

An issue was discovered jmarsden/jsonij thru 0.5.2 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

CVSS: 7.5 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2023-34613

An issue was discovered sojo thru 1.1.1 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

CVSS: 7.5 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2023-34612

An issue was discovered ph-json thru 9.5.5 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

CVSS: 7.5 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2023-34611

An issue was discovered mjson thru 1.4.1 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

CVSS: 7.5 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2023-34610

An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

CVSS: 7.5 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2023-34609

An issue was discovered flexjson thru 3.3 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

CVSS: 7.5 CWE: CWE-787 - Out-of-bounds Write View on NVD

Low

CVE-2023-3040

A debug function in the lua-resty-json package, up to commit id 3ef9492bd3a44d9e51301d6adc3cd1789c8f534a (merged in PR #14) contained an out of bounds access bug that could have allowed an attacker t…

CVSS: 3.7 CWE: CWE-125 - Out-of-bounds Read View on NVD

Medium

CVE-2023-24937

Windows CryptoAPI Denial of Service Vulnerability

CVSS: 6.5 CWE: CWE-20 - Improper Input Validation View on NVD

Medium

CVE-2023-33129

Microsoft SharePoint Server Denial of Service Vulnerability

CVSS: 6.5 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

Medium

CVE-2023-32013

Windows Hyper-V Denial of Service Vulnerability

CVSS: 5.3 CWE: CWE-400 - Uncontrolled Resource Consumption View on NVD

High

CVE-2023-32011

Windows iSCSI Discovery Service Denial of Service Vulnerability

CVSS: 7.5 CWE: CWE-125 - Out-of-bounds Read View on NVD

Medium

CVE-2023-29369

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS: 6.5 CWE: CWE-190 - Integer Overflow or Wraparound View on NVD

Medium

CVE-2023-29353

Sysinternals Process Monitor for Windows Denial of Service Vulnerability

CVSS: 5.5 CWE: CWE-20 - Improper Input Validation View on NVD

Medium

CVE-2023-24938

Windows CryptoAPI Denial of Service Vulnerability

CVSS: 6.5 CWE: CWE-476 - NULL Pointer Dereference View on NVD

2023-06-13

High

CVE-2023-2778

A denial-of-service vulnerability exists in Rockwell Automation FactoryTalk Transaction Manager. This vulnerability can be exploited by sending a modified packet to port 400. If exploited, the applic…

CVSS: 7.5 CWE: CWE-400 - Uncontrolled Resource Consumption View on NVD

Medium

CVE-2023-34115

Buffer copy without checking size of input in Zoom Meeting SDK before 5.13.0 may allow an authenticated user to potentially enable a denial of service via local access. This issue may result in the…

CVSS: 4.3 CWE: CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') View on NVD

High

CVE-2022-31639

Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denia…

CVSS: 7.8 CWE: CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition View on NVD

High

CVE-2022-31638

CVSS: 7.8 CWE: CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition View on NVD

High

CVE-2022-31637

CVSS: 7.8 CWE: CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition View on NVD

High

CVE-2022-31636

CVSS: 7.8 CWE: CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition View on NVD

High

CVE-2022-31635

CVSS: 7.8 CWE: CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition View on NVD

Medium

CVE-2023-33305

A loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS version 7.0.0 through 7.0.10, FortiOS 6.4 all versions, FortiOS 6.2 all versions, Fo…

CVSS: 4.9 CWE: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop') View on NVD

Low

CVE-2023-33121

A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamce…

CVSS: 3.3 CWE: CWE-476 - NULL Pointer Dereference View on NVD

High

CVE-2023-22633

An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all versions 8.7.0 all versions…

CVSS: 7.5 CWE: CWE-264 View on NVD

2023-06-12

Medium

CVE-2023-3161

A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out…

CVSS: 5.5 CWE: CWE-1335 - Incorrect Bitwise Shift of Integer View on NVD

High

CVE-2022-43778

Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and informa…

CVSS: 7.8 CWE: CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition View on NVD

High

CVE-2022-43777

CVSS: 7.8 CWE: CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition View on NVD

High

CVE-2022-27541

CVSS: 7.8 CWE: CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition View on NVD

High

CVE-2022-27539

CVSS: 7.8 CWE: CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition View on NVD

High

CVE-2023-34343

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrary shell commands, which may lead to code execution, denial of service, informat…

CVSS: 7.2 CWE: CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') View on NVD

Medium

CVE-2023-34342

AMI BMC contains a vulnerability in the IPMI handler, where an attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privile…

CVSS: 6.0 CWE: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') View on NVD

High

CVE-2023-34336

AMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer overflow, which may lead to code execution, denial of service, or escalation of…

CVSS: 8.1 CWE: CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') View on NVD

High

CVE-2023-34335

AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI flash, bypassing secure boot protections. An exploitation of this vulnerability m…

CVSS: 7.7 CWE: CWE-288 - Authentication Bypass Using an Alternate Path or Channel View on NVD

High

CVE-2023-34334

CVSS: 7.2 CWE: CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') View on NVD

High

CVE-2023-34341

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write to arbitrary locations within the memory context of the IPMI server process, wh…

CVSS: 7.2 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

High

CVE-2023-35053

In JetBrains YouTrack before 2023.1.10518 a DoS attack was possible via Helpdesk forms

CVSS: 7.5 CWE: CWE-400 - Uncontrolled Resource Consumption View on NVD

Medium

CVE-2023-3206

A vulnerability classified as problematic was found in Chengdu VEC40G 3.0. Affected by this vulnerability is an unknown functionality of the file /send_order.cgi?parameter=restart. The manipulation o…

CVSS: 5.3 CWE: CWE-404 - Improper Resource Shutdown or Release View on NVD

High

CVE-2023-33290

The git-url-parse crate through 0.4.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to normalize_url in lib.rs, a similar issue to CVE-2023-32758 (Python).

CVSS: 7.5 CWE: CWE-1333 - Inefficient Regular Expression Complexity View on NVD

2023-06-09

Medium

CVE-2023-29753

An issue found in Facemoji Emoji Keyboard v.2.9.1.2 for Android allows a local attacker to cause a denial of service via the SharedPreference files.

CVSS: 5.5 CWE: CWE-346 - Origin Validation Error View on NVD

Medium

CVE-2023-29751

An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files.

CVSS: 5.5 CWE: CWE-346 - Origin Validation Error View on NVD

Medium

CVE-2023-29767

An issue found in CrossX v.1.15.3 for Android allows a local attacker to cause a persistent denial of service via the database files.

CVSS: 5.5 CWE: CWE-400 - Uncontrolled Resource Consumption View on NVD

Medium

CVE-2023-29761

An issue found in Sleep v.20230303 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files.

CVSS: 5.5 CWE: CWE-863 - Incorrect Authorization View on NVD

Medium

CVE-2023-29759

An issue found in FlightAware v.5.8.0 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the database files.

CVSS: 5.5 CWE: CWE-863 - Incorrect Authorization View on NVD

Medium

CVE-2023-29758

An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files.

CVSS: 5.5 CWE: CWE-863 - Incorrect Authorization View on NVD

Medium

CVE-2023-29756

An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files.

CVSS: 5.5 CWE: CWE-346 - Origin Validation Error View on NVD

2023-06-08

High

CVE-2023-33657

A use-after-free vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nni_mqtt_msg_get_publish_property() in the file mqtt_msg.c. This vulnerability is ca…

CVSS: 7.5 CWE: CWE-416 - Use After Free View on NVD

High

CVE-2023-33660

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function copyn_str() in the file mqtt_parser.c. An attacker could exploit this vulnerab…

CVSS: 7.5 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2023-33658

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nni_msg_get_pub_pid() in the file message.c. An attacker could exploit this vu…

CVSS: 7.5 CWE: CWE-787 - Out-of-bounds Write View on NVD

2023-06-07

High

CVE-2023-2199

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.0 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2.…

CVSS: 7.5 CWE: CWE-1333 - Inefficient Regular Expression Complexity View on NVD

High

CVE-2023-2198

An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.7 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A…

CVSS: 7.5 CWE: CWE-1333 - Inefficient Regular Expression Complexity View on NVD

Medium

CVE-2023-0121

A denial of service issue was discovered in GitLab CE/EE affecting all versions starting from 13.2.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 b…

CVSS: 6.5 CWE: CWE-770 - Allocation of Resources Without Limits or Throttling View on NVD

High

CVE-2023-2186

On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send a specially crafted broadcast message including format string characters to the SCADA Data Gateway…

CVSS: 8.2 CWE: CWE-134 - Use of Externally-Controlled Format String View on NVD

2023-06-06

Medium

CVE-2023-2253

A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This vulnerability allow…

CVSS: 6.5 CWE: CWE-475 - Undefined Behavior for Input to API View on NVD

Medium

CVE-2023-33958

notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry and added a high number of signatures to an artifact can cause denial of servi…

CVSS: 5.4 CWE: CWE-400 - Uncontrolled Resource Consumption View on NVD

Low

CVE-2023-33957

CVSS: 2.6 CWE: CWE-400 - Uncontrolled Resource Consumption View on NVD

High

CVE-2023-34104

fast-xml-parser is an open source, pure javascript xml parser. fast-xml-parser allows special characters in entity names, which are not escaped or sanitized. Since the entity name is used for creatin…

CVSS: 7.5 CWE: CWE-400 - Uncontrolled Resource Consumption View on NVD

Medium

CVE-2023-33613

axTLS v2.1.5 was discovered to contain a heap buffer overflow in the bi_import function in axtls-code/crypto/bigint.c. This vulnerability allows attackers to cause a Denial of Service (DoS) when pars…

CVSS: 5.5 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2023-31606

A Regular Expression Denial of Service (ReDoS) issue was discovered in the sanitize_html function of redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via su…

CVSS: 7.5 CWE: CWE-1333 - Inefficient Regular Expression Complexity View on NVD

High

CVE-2023-2132

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2.…

CVSS: 7.5 CWE: CWE-1333 - Inefficient Regular Expression Complexity View on NVD

Medium

CVE-2023-20747

In vcu, there is a possible memory corruption due to type confusion. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitatio…

CVSS: 4.4 CWE: CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion') View on NVD

High

CVE-2023-33659

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nmq_subinfo_decode() in the file mqtt_parser.c. An attacker could exploit this…

CVSS: 7.5 CWE: CWE-787 - Out-of-bounds Write View on NVD

High

CVE-2023-21661

Transient DOS while parsing WLAN beacon or probe-response frame.

CVSS: 7.5 CWE: CWE-126 - Buffer Over-read View on NVD

High

CVE-2023-21660

Transient DOS in WLAN Firmware while parsing FT Information Elements.

CVSS: 7.5 CWE: CWE-126 - Buffer Over-read View on NVD

High

CVE-2023-21659

Transient DOS in WLAN Firmware while processing frames with missing header fields.

CVSS: 7.5 CWE: CWE-126 - Buffer Over-read View on NVD

High

CVE-2023-21658

Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.

CVSS: 7.5 CWE: CWE-126 - Buffer Over-read View on NVD

High

CVE-2022-40538

Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network.

CVSS: 7.5 CWE: CWE-617 - Reachable Assertion View on NVD

High

CVE-2022-40536

Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.

CVSS: 7.5 CWE: CWE-285 - Improper Authorization View on NVD

Medium

CVE-2022-40533

Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.

CVSS: 6.2 CWE: CWE-822 - Untrusted Pointer Dereference View on NVD

High

CVE-2022-40521

Transient DOS due to improper authorization in Modem

CVSS: 7.5 CWE: CWE-285 - Improper Authorization View on NVD

Medium

CVE-2022-33303

Transient DOS due to uncontrolled resource consumption in Linux kernel when malformed messages are sent from the Gunyah Resource Manager message queue.

CVSS: 5.5 CWE: CWE-400 - Uncontrolled Resource Consumption View on NVD

High

CVE-2022-33251

Transient DOS due to reachable assertion in Modem because of invalid network configuration.

CVSS: 7.5 CWE: CWE-617 - Reachable Assertion View on NVD

Medium

CVE-2022-48448

In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-48447

In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-48446

In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-48445

In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-48444

In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-48443

In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-48442

In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-48441

In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-48440

In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Medium

CVE-2022-48439

In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

CVSS: 4.4 CWE: CWE-787 - Out-of-bounds Write View on NVD

Medium

CVE-2022-48438

In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

CVSS: 4.4 CWE: CWE-787 - Out-of-bounds Write View on NVD

Medium

CVE-2022-48391

In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

CVSS: 5.5 CWE: CWE-862 - Missing Authorization View on NVD

Low

CVE-2018-25087

A vulnerability classified as problematic was found in Arborator Server. This vulnerability affects the function start of the file project.cgi. The manipulation of the argument project leads to denia…

CVSS: 3.5 CWE: CWE-404 - Improper Resource Shutdown or Release View on NVD

2023-06-05

High

CVE-2023-31893

Telefnica Brasil Vivo Play (IPTV) Firmware: 2023.04.04.01.06.15 is vulnerable to Denial of Service (DoS) via DNS Recursion.

CVSS: 7.5 CWE: CWE-674 - Uncontrolled Recursion View on NVD

Medium

CVE-2023-33693

A buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a Denial of Service (DoS) via a crafted XML file.

CVSS: 5.5 CWE: CWE-787 - Out-of-bounds Write View on NVD

Medium

CVE-2023-27989

A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00(ABUV.8)C0 could allow a remote authenticated attacker to cause denial of service (DoS) conditi…

CVSS: 6.5 CWE: CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') View on NVD

High

CVE-2023-34411

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token (such as <!DOCTYPEs/%<!A nesting) in an XML document. The earliest affected version is 0.8.…

CVSS: 7.5 CWE: CWE-611 - Improper Restriction of XML External Entity Reference View on NVD

2023-06-03

Medium

CVE-2023-2416

The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the vcita_logout_callback function in…

CVSS: 5.4 CWE: CWE-352 - Cross-Site Request Forgery (CSRF) View on NVD

Medium

CVE-2023-2415

The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vcita_logout_callback…

CVSS: 5.4 CWE: CWE-862 - Missing Authorization View on NVD

2023-06-02

Medium

CVE-2023-1297

Consul and Consul Enterprise's cluster peering implementation contained a flaw whereby a peer cluster with service of the same name as a local service could corrupt Consul state, resulting in denial…

CVSS: 4.9 CWE: CWE-826 - Premature Release of Resource During Expected Lifetime View on NVD

Medium

CVE-2023-0616

If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up a…

CVSS: 6.5 CWE: CWE-400 - Uncontrolled Resource Consumption View on NVD

Medium

CVE-2023-29725

The BT21 x BTS Wallpaper app 12 for Android allows unauthorized applications to actively request permission to insert data into the database that records information about a user's personal preferenc…

CVSS: 5.5 CWE: N/A View on NVD

2023-06-01

High

CVE-2023-29723

The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized applications to actively request permission to insert data into the database that records information about a user's per…

CVSS: 7.5 CWE: N/A View on NVD

Medium

CVE-2023-32716

In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, an attacker can exploit a vulnerability in the {{dump}} SPL command to cause a de…

CVSS: 6.5 CWE: CWE-754 - Improper Check for Unusual or Exceptional Conditions View on NVD

High

CVE-2023-32706

On Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, an unauthenticated attacker can send specially-crafted messages to the XML parser within SAML authentication to cause a denial of servic…

CVSS: 7.7 CWE: CWE-611 - Improper Restriction of XML External Entity Reference View on NVD

High

CVE-2023-32324

OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service (DoS) attack. A buff…

CVSS: 7.5 CWE: CWE-122 - Heap-based Buffer Overflow View on NVD

Medium

CVE-2023-33546

Janino 3.1.9 and earlier are subject to denial of service (DOS) attacks when using the expression evaluator.guess parameter name method. If the parser runs on user-supplied input, an attacker could s…

CVSS: 5.5 CWE: CWE-787 - Out-of-bounds Write View on NVD

Low

CVE-2023-32181

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2.

CVSS: 3.3 CWE: CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') View on NVD

Low

CVE-2023-22652

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2.

CVSS: 3.3 CWE: CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') View on NVD

High

CVE-2023-29748

Story Saver for Instragram - Video Downloader 1.0.6 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a l…

CVSS: 7.5 CWE: N/A View on NVD

High

CVE-2022-35742

Microsoft Outlook Denial of Service Vulnerability

CVSS: 7.5 CWE: N/A View on NVD

Medium

CVE-2023-2985

A use after free flaw was found in hfsplus_put_super in fs/hfsplus/super.c in the Linux Kernel. This flaw could allow a local user to cause a denial of service problem.

CVSS: 5.5 CWE: CWE-416 - Use After Free View on NVD

2023-05-31

Medium

CVE-2022-35759

Windows Local Security Authority (LSA) Denial of Service Vulnerability

CVSS: 6.5 CWE: N/A View on NVD

High

CVE-2022-35748

HTTP.sys Denial of Service Vulnerability

CVSS: 7.5 CWE: N/A View on NVD

Medium

CVE-2022-35747

Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability

CVSS: 5.9 CWE: N/A View on NVD

Low

CVE-2023-2758

A denial of service vulnerability exists in Contec CONPROSYS HMI System versions 3.5.2 and prior. When there is a time-zone mismatch in certain configuration files, a remote, unauthenticated attacker…

CVSS: 3.7 CWE: CWE-799 - Improper Control of Interaction Frequency View on NVD

Medium

CVE-2023-2612

Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when handling inode locking in some situations. A local attacker could use this to c…

CVSS: 4.4 CWE: CWE-667 - Improper Locking View on NVD

High

CVE-2023-29745

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating the database.

CVSS: 7.1 CWE: CWE-346 - Origin Validation Error View on NVD

2023-05-30

Medium

CVE-2023-2952

XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file

CVSS: 5.3 CWE: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop') View on NVD

High

CVE-2023-29743

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating the database.

CVSS: 7.5 CWE: CWE-346 - Origin Validation Error View on NVD

High

CVE-2023-29740

An issue found in Alarm Clock for Heavy Sleepers v.5.3.2 for Android allows unauthorized apps to cause a denial of service attack by manipulating the database.

CVSS: 7.5 CWE: N/A View on NVD

High

CVE-2023-29726

The Call Blocker application 6.6.3 for Android incorrectly opens a key component that an attacker can use to inject large amounts of dirty data into the application's database. When the application s…

CVSS: 7.5 CWE: CWE-404 - Improper Resource Shutdown or Release View on NVD

Medium

CVE-2023-29735

An issue found in edjing Mix v.7.09.01 for Android allows a local attacker to cause a denial of service via the database files.

CVSS: 5.5 CWE: CWE-400 - Uncontrolled Resource Consumption View on NVD