CVE-2024-41968 – WAGO: Docker Settings Manipulation in Multiple Devices
https://notcve.org/view.php?id=CVE-2024-41968
A low privileged remote attacker may modify the docker settings setup of the device, leading to a limited DoS. • https://cert.vde.com/en/advisories/VDE-2024-047 • CWE-306: Missing Authentication for Critical Function •
CVE-2024-38828 – CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter
https://notcve.org/view.php?id=CVE-2024-38828
Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack. • https://spring.io/security/cve-2024-38828 •
CVE-2019-25220
https://notcve.org/view.php?id=CVE-2019-25220
Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-difficulty header chains (aka a "Chain Width Expansion" attack) because a node does not first verify that a presented chain has enough work before committing to store it. • https://bitcoincore.org/en/2024/09/18/disclose-headers-oom https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2019-October/017354.html • CWE-770: Allocation of Resources Without Limits or Throttling •
CVE-2024-52914
https://notcve.org/view.php?id=CVE-2024-52914
In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a crafted unconfirmed transaction. • https://bitcoincore.org/en/2024/07/03/disclose-orphan-dos https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures • CWE-770: Allocation of Resources Without Limits or Throttling •
CVE-2024-52915
https://notcve.org/view.php?id=CVE-2024-52915
Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption) via a crafted INV message. • https://bitcoincore.org/en/2024/07/03/disclose-inv-buffer-blowup https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures • CWE-770: Allocation of Resources Without Limits or Throttling •