CVSS: 7.5EPSS: 0%CPEs: -EXPL: 0CVE-2024-44331
https://notcve.org/view.php?id=CVE-2024-44331
Incorrect Access Control in GStreamer RTSP server 1.25.0 in gst-rtsp-server/rtsp-media.c allows remote attackers to cause a denial of service via a series of specially crafted hexstream requests. • https://gist.github.com/dqp10515/c6a8879bebe92d8c74f7c52667fd3400 https://github.com/dqp10515/security/tree/main/gst-rtsp-server_bug/bug1 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: -EPSS: 0%CPEs: 3EXPL: 0CVE-2024-49974 – NFSD: Limit the number of concurrent async COPY operations
https://notcve.org/view.php?id=CVE-2024-49974
In the Linux kernel, the following vulnerability has been resolved: NFSD: Limit the number of concurrent async COPY operations Nothing appears to limit the number of concurrent async COPY operations that clients can start. In addition, AFAICT each async COPY can copy an unlimited number of 4MB chunks, so can run for a long time. Thus IMO async COPY can become a DoS vector. Add a restriction mechanism that bounds the number of concurrent background COPY operations. • https://git.kernel.org/stable/c/b4e21431a0db4854b5023cd5af001be557e6c3db https://git.kernel.org/stable/c/6a488ad7745b8f64625c6d3a24ce7e448e83f11b https://git.kernel.org/stable/c/aadc3bbea163b6caaaebfdd2b6c4667fbc726752 •
CVSS: 5.5EPSS: 0%CPEs: -EXPL: 0CVE-2024-31007
https://notcve.org/view.php?id=CVE-2024-31007
Buffer Overflow vulnerability in IrfanView 32bit v.4.66 allows a local attacker to cause a denial of service via a crafted file. • https://github.com/kirito999/IrfanViewBug https://www.fosshub.com/IrfanView.html?dwl=iview466_setup.exe https://www.fosshub.com/IrfanView.html?dwl=iview466_plugins.zip https://mediaside.net/irfanview-italia/2024/04/12/4-67-data-di-rilascio-5-aprile-2024 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 7.5EPSS: 0%CPEs: -EXPL: 0CVE-2024-21536 – http-proxy-middleware: Denial of Service
https://notcve.org/view.php?id=CVE-2024-21536
Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an UnhandledPromiseRejection error thrown by micromatch. ... Affected versions of this package are vulnerable to denial of service (DoS) due to an UnhandledPromiseRejection error thrown by micromatch. • https://gist.github.com/mhassan1/28be67266d82a53708ed59ce5dc3c94a https://github.com/chimurai/http-proxy-middleware/commit/0b4274e8cc9e9a2c5a06f35fbf456ccfcebc55a5 https://github.com/chimurai/http-proxy-middleware/commit/788b21e4aff38332d6319557d4a5b1b13b1f9a22 https://security.snyk.io/vuln/SNYK-JS-HTTPPROXYMIDDLEWARE-8229906 https://access.redhat.com/security/cve/CVE-2024-21536 https://bugzilla.redhat.com/show_bug.cgi?id=2319884 • CWE-400: Uncontrolled Resource Consumption •
CVSS: 5.9EPSS: 0%CPEs: -EXPL: 0CVE-2024-7316 – Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series
https://notcve.org/view.php?id=CVE-2024-7316
Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition on the product by sending specially crafted packets to TCP port 683, causing an emergency stop. • https://jvn.jp/vu/JVNVU92054409/index.html https://www.cisa.gov/news-events/ics-advisories/icsa-24-291-03 https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-007_en.pdf • CWE-1284: Improper Validation of Specified Quantity in Input •