CVE-2024-5013 – WhatsUp Gold InstallController Denial-of-Service Vulnerability
https://notcve.org/view.php?id=CVE-2024-5013
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Denial of Service vulnerability was identified. ... This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Progress Software WhatsUp Gold. ... An attacker can leverage this vulnerability to create a denial-of-service condition on the system. • https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024 https://www.progress.com/network-monitoring • CWE-400: Uncontrolled Resource Consumption •
CVE-2024-5011 – WhatsUp Gold TestController Chart denial of service vulnerability
https://notcve.org/view.php?id=CVE-2024-5011
A specially crafted unauthenticated HTTP request to the TestController Chart functionality can lead to denial of service. • https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024 https://www.progress.com/network-monitoring https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1934 • CWE-400: Uncontrolled Resource Consumption •
CVE-2024-37894 – Squid vulnerable to heap corruption in ESI assign
https://notcve.org/view.php?id=CVE-2024-37894
This error can lead to a Denial of Service attack. ... This flaw allows a trusted server to crash Squid while processing an ESI response content, resulting in a denial of service. • https://github.com/squid-cache/squid/commit/f411fe7d75197852f0e5ee85027a06d58dd8df4c.patch https://github.com/squid-cache/squid/security/advisories/GHSA-wgvf-q977-9xjg https://security.netapp.com/advisory/ntap-20240719-0001 https://access.redhat.com/security/cve/CVE-2024-37894 https://bugzilla.redhat.com/show_bug.cgi?id=2294353 • CWE-787: Out-of-bounds Write •
CVE-2024-5990 – ThinManager® ThinServerâ„¢ Improper Input Validation Vulnerability
https://notcve.org/view.php?id=CVE-2024-5990
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread within Rockwell Automation ThinServerâ„¢ and cause a denial-of-service condition on the affected device. • https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1677.html • CWE-20: Improper Input Validation •
CVE-2024-37086
https://notcve.org/view.php?id=CVE-2024-37086
A malicious actor with local administrative privileges on a virtual machine with an existing snapshot may trigger an out-of-bounds read leading to a denial-of-service condition of the host. • https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505 • CWE-125: Out-of-bounds Read •