CVE-2022-27540
https://notcve.org/view.php?id=CVE-2022-27540
A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. • https://support.hp.com/us-en/document/ish_10810714-10810745-16/hpsbhf03948 • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition •
CVE-2024-35116 – IBM MQ denial of service
https://notcve.org/view.php?id=CVE-2024-35116
IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, and 9.3 CD is vulnerable to a denial of service attack caused by an error applying configuration changes. • https://exchange.xforce.ibmcloud.com/vulnerabilities/290335 https://www.ibm.com/support/pages/node/7157387 https://www.ibm.com/support/pages/node/7158071 • CWE-789: Memory Allocation with Excessive Size Value •
CVE-2024-31919 – IBM MQ denial of service
https://notcve.org/view.php?id=CVE-2024-31919
IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD, in certain configurations, is vulnerable to a denial of service attack caused by an error processing messages when an API Exit using MQBUFMH is used. • https://exchange.xforce.ibmcloud.com/vulnerabilities/290259 https://www.ibm.com/support/pages/node/7157979 • CWE-770: Allocation of Resources Without Limits or Throttling •
CVE-2024-22272
https://notcve.org/view.php?id=CVE-2024-22272
VMware Cloud Director contains an Improper Privilege Management vulnerability. An authenticated tenant administrator for a given organization within VMware Cloud Director may be able to accidentally disable their organization leading to a Denial of Service for active sessions within their own organization's scope. • https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24371 •
CVE-2024-6038 – ReDoS Vulnerability in gaizhenbiao/chuanhuchatgpt
https://notcve.org/view.php?id=CVE-2024-6038
A Regular Expression Denial of Service (ReDoS) vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. ... Due to the lack of sanitization or validation of the keyword parameter, an attacker can inject a specially crafted regular expression, leading to a denial of service condition. This can cause severe degradation of service performance and potential system unavailability. • https://huntr.com/bounties/d41cca0a-82bc-4cbf-a52a-928d304fb42d • CWE-625: Permissive Regular Expression •