Page 39 of 37886 results (0.007 seconds)

CVSS: 6.5EPSS: 0%CPEs: -EXPL: 1

An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change function. • https://github.com/njmbb8/CVE-2024-42849 http://silverpeas.com https://github.com/njmbb8/CVE-2024-42849/tree/main • CWE-400: Uncontrolled Resource Consumption •

CVSS: -EPSS: 0%CPEs: 1EXPL: 0

This could lead to local denial of service with no additional execution privileges needed. • https://android.googlesource.com/platform/frameworks/base/+/688e5c3012eb0a4ea88361588cf5026c10e4a42c https://source.android.com/security/bulletin/2024-08-01 •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

This could be used to create a Denial Of Service attack in applications that run arbitrary ECMAScript code provided by an external user. • https://github.com/boa-dev/boa/security/advisories/GHSA-f67q-wr6w-23jq https://github.com/tc39/ecma262/security/advisories/GHSA-g38c-wh3c-5h9r https://github.com/boa-dev/boa/commit/69ea2f52ed976934bff588d6b566bae01be313f7 • CWE-248: Uncaught Exception •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0

IBM InfoSphere Information Server could allow an authenticated user to consume file space resources due to unrestricted file uploads. IBM X-Force ID: 298279. • https://www.ibm.com/support/pages/node/7160855 https://exchange.xforce.ibmcloud.com/vulnerabilities/298279 • CWE-405: Asymmetric Resource Consumption (Amplification) •

CVSS: 5.3EPSS: 0%CPEs: -EXPL: 0

* Unprotected privileged mode access through UDS session in the Blind Spot Detection Sensor ECU firmware in Nissan Altima (2022) allows attackers to trigger denial-of-service (DoS) by unauthorized access to the ECU's programming session. * No preconditions implemented for ECU management functionality through UDS session in the Blind Spot Detection Sensor ECU in Nissan Altima (2022) allows attackers to disrupt normal ECU operations by triggering a control command without authentication. • https://asrg.io/security-advisories/CVE-2024-6347 • CWE-285: Improper Authorization CWE-306: Missing Authentication for Critical Function •