Lucene search
+L

5968 matches found

Github Security Blog
Github Security Blog
•added 2022/05/17 12:24 a.m.•27 views

Denial of service in Apache Tomcat

java/org/apache/coyote/ajp/AbstractAjpProcessor.java in Apache Tomcat 8.x before 8.0.4 allows remote attackers to cause a denial of service thread consumption by using a "Content-Length: 0" AJP request to trigger a hang in request processing...

5CVSS7.1AI score0.08494EPSS
SaveExploits0References14Affected Software2
osv_ghsa
osv_ghsa
•added 2022/05/17 12:24 a.m.•32 views

GHSA-WF5V-JHXJ-Q632 Denial of service in Apache Tomcat

java/org/apache/coyote/ajp/AbstractAjpProcessor.java in Apache Tomcat 8.x before 8.0.4 allows remote attackers to cause a denial of service thread consumption by using a "Content-Length: 0" AJP request to trigger a hang in request processing...

5CVSS5.9AI score0.08494EPSS
SaveExploits0References14
Github Security Blog
Github Security Blog
•added 2022/05/14 1:10 a.m.•50 views

Uncontrolled Resource Consumption in Apache Tomcat

Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service thread consumption via a series of aborted uploa...

7.8CVSS6.1AI score0.20183EPSS
SaveExploits0References45Affected Software1
Github Security Blog
Github Security Blog
•added 2022/05/14 12:56 a.m.•46 views

Puppet Denial of Service and Arbitrary File Write

A vulnerability in Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys to 1 cause a denial of service memory consumption via a REST request to a stream that triggers...

3.5CVSS7AI score0.02524EPSS
SaveExploits0References18Affected Software1
RubySec
RubySec
•added 2022/05/14 12:00 a.m.•64 views

Puppet Denial of Service and Arbitrary File Write

A vulnerability in Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys to 1 cause a denial of service memory consumption via a REST request to a stream that triggers...

3.5CVSS6.5AI score0.02524EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2022/05/13 3:15 p.m.•44 views

CVE-2022-29790

The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions...

7.5CVSS0.00675EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/05/13 3:15 p.m.•18 views

CVE-2022-29790

The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions...

7.5CVSS7.1AI score0.00675EPSS
SaveExploits0References3Affected Software2
osv_cve
osv_cve
•added 2022/05/13 3:15 p.m.•19 views

CVE-2022-29790

The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions...

7.5CVSS5.8AI score0.00675EPSS
SaveExploits0References2
Prion
Prion
•added 2022/05/13 3:15 p.m.•39 views

Design/Logic Flaw

The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions...

5CVSS7.4AI score0.00675EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
•added 2022/05/13 3:04 p.m.•49 views

CVE-2022-29790

The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions...

7.6AI score0.00675EPSS
SaveExploits0References2
CVE
CVE
•added 2022/05/13 3:04 p.m.•98 views

CVE-2022-29790

Huawei HarmonyOS exposes a vulnerability in the graphics acceleration service where multi-threaded access to the graphics database can lead to service exceptions. The issue is described across multiple feeds (including Red Hat and CNVD entries) as a multi-thread access flaw in the graphics compon...

7.5CVSS7.4AI score0.00675EPSS
SaveExploits0References2Affected Software1
osv_ghsa
osv_ghsa
•added 2022/05/13 1:09 a.m.•63 views

GHSA-F2WR-C4C4-XJG7 Apache Traffic Control vulnerable to Slowloris-style Denial of Service attack

The Traffic Router component of the incubating Apache Traffic Control project is vulnerable to a Slowloris style Denial of Service attack. TCP connections made on the configured DNS port will remain in the ESTABLISHED state until the client explicitly closes the connection or Traffic Router is...

7.5CVSS7.4AI score0.04671EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2022/05/13 1:09 a.m.•48 views

Apache Traffic Control vulnerable to Slowloris-style Denial of Service attack

The Traffic Router component of the incubating Apache Traffic Control project is vulnerable to a Slowloris style Denial of Service attack. TCP connections made on the configured DNS port will remain in the ESTABLISHED state until the client explicitly closes the connection or Traffic Router is...

7.5CVSS6.8AI score0.04671EPSS
SaveExploits0References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/13 12:00 a.m.•8 views

CVE-2022-29790: Undefined Security Weakness

The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions...

7.5CVSS7.2AI score0.00675EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/05/13 12:00 a.m.•9 views

PT-2022-19831

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The graphics acceleration service has a vulnerability related to multi-thread access to the database. Successful exploitation of this issue may cause...

7.5CVSS0.00675EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2022/05/09 12:00 a.m.•40 views

NewStart CGSL MAIN 6.02 : libwebp Multiple Vulnerabilities (NS-SA-2022-0065)

The remote NewStart CGSL host, running version MAIN 6.02, has libwebp packages installed that are affected by multiple vulnerabilities: - A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow was found in PutLE16. The highest threat from this vulnerability is to data...

9.8CVSS8.2AI score0.02662EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2022/05/04 12:00 a.m.•23 views

Squirrel buffer error vulnerability

squirrel is the stable version of the programming language SQUIRREL 3.2. A security vulnerability exists in squirrel version 3.2, which stems from the lack of a specific sqreservestack call to threadcall in sqbaselib.cpp. No detailed vulnerability details are currently available...

10CVSS8.2AI score0.03562EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2022/05/02 12:00 a.m.•10 views

PT-2022-20051 · Squirrel +1 · Squirrel +1

Name of the Vulnerable Software and Affected Versions: SQUIRREL version 3.2 Description: The issue is a heap-based buffer overflow in sqbaselib.cpp due to the lack of a certain sq reservestack call. This occurs in the thread call function. There is no information provided about the estimated numb...

10CVSS9.5AI score0.03562EPSS
SaveExploits1References27
Github Security Blog
Github Security Blog
•added 2022/05/01 6:42 p.m.•35 views

Robocode Arbitrary Code Execution

The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method...

6.8CVSS7.7AI score0.01871EPSS
SaveExploits0References6Affected Software1
osv_ghsa
osv_ghsa
•added 2022/05/01 6:42 p.m.•61 views

GHSA-XH22-FW58-56PP Robocode Arbitrary Code Execution

The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method...

6.8CVSS7.4AI score0.01871EPSS
SaveExploits0References6
Rows per page
Query Builder