Lucene search
K

62 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:2 p.m.3 views

CVE-2026-32933

AutoMapper is a convention-based object-object mapper in .NET. Versions prior to 15.1.1 and 16.1.1 are vulnerable to a Denial of Service DoS attack. When mapping deeply nested object graphs, the library uses recursive method calls without enforcing a default maximum depth limit. This allows an...

7.5CVSS5.8AI score0.00027EPSS
Exploits1References1
NVD
NVD
added 2026/03/20 3:16 a.m.0 views

CVE-2026-32933

AutoMapper is a convention-based object-object mapper in .NET. Versions prior to 15.1.1 and 16.1.1 are vulnerable to a Denial of Service DoS attack. When mapping deeply nested object graphs, the library uses recursive method calls without enforcing a default maximum depth limit. This allows an...

7.5CVSS0.00027EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/03/20 2:38 a.m.2 views

CVE-2026-32933

AutoMapper is a convention-based object-object mapper in .NET. Versions prior to 15.1.1 and 16.1.1 are vulnerable to a Denial of Service DoS attack. When mapping deeply nested object graphs, the library uses recursive method calls without enforcing a default maximum depth limit. This allows an...

7.5CVSS5.8AI score0.00027EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2026/03/20 2:38 a.m.19 views

CVE-2026-32933 AutoMapper Vulnerable to Denial of Service (DoS) via Uncontrolled Recursion

AutoMapper is a convention-based object-object mapper in .NET. Versions prior to 15.1.1 and 16.1.1 are vulnerable to a Denial of Service DoS attack. When mapping deeply nested object graphs, the library uses recursive method calls without enforcing a default maximum depth limit. This allows an...

7.5CVSS0.00027EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/03/20 2:38 a.m.3 views

CVE-2026-32933 AutoMapper Vulnerable to Denial of Service (DoS) via Uncontrolled Recursion

AutoMapper is a convention-based object-object mapper in .NET. Versions prior to 15.1.1 and 16.1.1 are vulnerable to a Denial of Service DoS attack. When mapping deeply nested object graphs, the library uses recursive method calls without enforcing a default maximum depth limit. This allows an...

7.5CVSS5.8AI score0.00027EPSS
Exploits1References4
EUVD
EUVD
added 2026/03/20 2:38 a.m.1 views

EUVD-2026-13505

AutoMapper is a convention-based object-object mapper in .NET. Versions prior to 15.1.1 and 16.1.1 are vulnerable to a Denial of Service DoS attack. When mapping deeply nested object graphs, the library uses recursive method calls without enforcing a default maximum depth limit. This allows an...

7.5CVSS5.8AI score0.00027EPSS
Exploits1References4
OSV
OSV
added 2026/03/20 2:38 a.m.1 views

CVE-2026-32933 AutoMapper Vulnerable to Denial of Service (DoS) via Uncontrolled Recursion

AutoMapper is a convention-based object-object mapper in .NET. Versions prior to 15.1.1 and 16.1.1 are vulnerable to a Denial of Service DoS attack. When mapping deeply nested object graphs, the library uses recursive method calls without enforcing a default maximum depth limit. This allows an...

7.5CVSS5.9AI score0.00027EPSS
Exploits1References6
OSV
OSV
added 2025/10/15 2:15 a.m.1 views

CVE-2025-54278

Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that ...

5.5CVSS5.7AI score
Exploits0References1
OSV
OSV
added 2025/10/15 2:15 a.m.1 views

CVE-2025-54268

Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.3AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/15 1:7 a.m.1 views

CVE-2025-54268 Bridge | Heap-based Buffer Overflow (CWE-122)

Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.4AI score0.00031EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/15 12:0 a.m.2 views

PT-2025-42223

Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.00031EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/15 12:0 a.m.2 views

PT-2025-42224

Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that ...

5.5CVSS6.1AI score0.00025EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-30508

Malware in sbrugna...

7.8CVSS7.4AI score0.03883EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-34509

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00216EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/12/19 12:0 a.m.2 views

PT-2024-10209

Name of the Vulnerable Software and Affected Versions Next.js versions 13.0.0 through 13.5.7 Next.js versions 14.0.0 through 14.2.20 Next.js versions 15.0.0 through 15.1.1 Description The issue is related to an unbounded resource allocation in Next.js, which can be exploited to cause a denial of...

5.3CVSS7.2AI score0.00424EPSS
Exploits0References19
CVE
CVE
added 2024/11/19 11:43 p.m.263 views

CVE-2024-44309

CVE-2024-44309 concerns a cookie management issue in Apple environments. The root cause is improper state management that can enable cross-site scripting when processing malicious web content. Affected products/versions include Safari 18.1.1, iOS 17.7.2, iPadOS 17.7.2, macOS Sequoia 15.1.1, iOS 1...

6.3CVSS6.6AI score0.00941EPSS
In wildExploits0References8Affected Software1
Debian CVE
Debian CVE
added 2024/11/19 11:43 p.m.8 views

CVE-2024-44309

A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site scripting attack. App...

6.3CVSS7AI score0.00941EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2024/11/19 12:0 a.m.3 views

PT-2024-8648 · Apple +9 · Ios +14

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 18.1.1 iOS versions prior to 17.7.2 and 18.1.1 iPadOS versions prior to 17.7.2 and 18.1.1 macOS Sequoia versions prior to 15.1.1 visionOS versions prior to 2.1.1 Description: The issue is related to a cookie managemen...

9.8CVSS6.5AI score0.07766EPSS
Exploits2References205
OSV
OSV
added 2024/03/06 11:15 a.m.18 views

BIT-GITLAB-2022-2230

A Stored Cross-Site Scripting vulnerability in the project settings page in GitLab CE/EE affecting all versions from 14.4 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows an attacker to execute arbitrary JavaScript code in GitLab on a victim's behalf...

8.1CVSS5.6AI score0.01759EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2023/11/02 12:0 a.m.21 views

F5 Networks BIG-IP : CGNAT LSN vulnerability (K04048104)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.3.1 / 15.1.1 / 16.0.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K04048104 advisory. - On BIG-IP LTM/CGNAT version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5...

7.5CVSS7.4AI score0.00896EPSS
Exploits0References2
Rows per page
Query Builder