Filtered by CWE-404
Total 492 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2013-4133 2 Debian, Kde 2 Debian Linux, Kde-workspace 2024-11-21 7.5 High
kde-workspace before 4.10.5 has a memory leak in plasma desktop
CVE-2013-1055 1 Canonical 2 Ubuntu Linux, Unity-firefox-extension 2024-11-21 4.3 Medium
The unity-firefox-extension package could be tricked into dropping a C callback which was still in use, which Firefox would then free, causing Firefox to crash. This could be achieved by adding an action to the launcher and updating it with new callbacks until the libunity-webapps rate limit was hit. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 of unity-firefox-extension and in all versions of libunity-webapps by shipping an empty unity-firefox-extension package, thus disabling the extension entirely and invalidating the attack against the libunity-webapps package.
CVE-2013-1054 1 Canonical 2 Ubuntu Linux, Unity-firefox-extension 2024-11-21 4.3 Medium
The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 by shipping an empty package, thus disabling the extension entirely.
CVE-2024-11097 2 Razormist, Sourcecodester 2 Student Record Management System, Student Record Management System 2024-11-14 3.3 Low
A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Main Menu. The manipulation leads to infinite loop. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
CVE-2024-27527 1 Wasm3 Project 1 Wasm3 2024-11-13 7.5 High
wasm3 139076a is vulnerable to Denial of Service (DoS).
CVE-2024-51179 1 Open5gs 1 Open5gs 2024-11-13 7.5 High
An issue in Open 5GS v.2.7.1 allows a remote attacker to cause a denial of service via the Network Function Virtualizations (NFVs) such as the User Plane Function (UPF) and the Session Management Function (SMF), The Packet Data Unit (PDU) session establishment process.
CVE-2024-39721 1 Ollama 1 Ollama 2024-11-01 7.5 High
An issue was discovered in Ollama before 0.1.34. The CreateModelHandler function uses os.Open to read a file until completion. The req.Path parameter is user-controlled and can be set to /dev/random, which is blocking, causing the goroutine to run infinitely (even after the HTTP request is aborted by the client).
CVE-2024-45182 2 Microsoft, Wibu 2 Windows, Wibukey 2024-10-29 5.5 Medium
An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70 An improper bounds check allows specially crafted packets to cause an arbitrary address read, resulting in Denial of Service.
CVE-2024-7887 1 Limesurvey 1 Limesurvey 2024-08-19 2.7 Low
A vulnerability was found in LimeSurvey 6.3.0-231016 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php of the component File Upload. The manipulation of the argument size leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2021-47545 2024-06-13 4.1 Medium
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2021-47543 2024-06-13 4.1 Medium
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2022-3755 2023-11-07 6.5 Medium
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.