Lucene search
+L

419 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:16 p.m.•10 views

Malicious code in azure-schema-registry-avro-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7be5db41cd9eca80f1d91e2e6ea0b4a802d8e5cebf16e171df76f068617568d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2022/01/19 6:22 p.m.•44 views

CVE-2021-43045

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions. Users should update to version 1.11.0 which addresses this...

7.5CVSS5.6AI score0.0296EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2022/01/08 12:39 a.m.•25 views

GHSA-868X-RG4C-CJQG Allocation of Resources Without Limits or Throttling in Apache Avro

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions. Users should update to version 1.11.0 which addresses this...

7.5CVSS7.4AI score0.0296EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2022/01/08 12:39 a.m.•67 views

Allocation of Resources Without Limits or Throttling in Apache Avro

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions. Users should update to version 1.11.0 which addresses this...

7.5CVSS5.3AI score0.0296EPSS
SaveExploits0References7Affected Software1
CNVD
CNVD
•added 2022/01/08 12:00 a.m.•91 views

Apache Avro Resource Management Error Vulnerability

Apache Avro is a data serialization system from the Apache Foundation, Inc. A resource management error vulnerability exists in Apache Avro, which stems from the product's .net SDK component not effectively limiting the amount of allocated resources. An attacker could allocate too many resources ...

7.5CVSS3.8AI score0.0296EPSS
SaveExploits0References1
NVD
NVD
•added 2022/01/06 6:15 p.m.•36 views

CVE-2021-43045

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions. Users should update to version 1.11.0 which addresses this...

7.5CVSS0.0296EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/01/06 6:15 p.m.•14 views

CVE-2021-43045

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions. Users should update to version 1.11.0 which addresses this...

7.5CVSS7AI score0.0296EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2022/01/06 6:15 p.m.•9 views

CVE-2021-43045

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions. Users should update to version 1.11.0 which addresses this...

7.5CVSS6.7AI score
SaveExploits0References2
Prion
Prion
•added 2022/01/06 6:15 p.m.•26 views

Design/Logic Flaw

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions. Users should update to version 1.11.0 which addresses this...

5CVSS7.4AI score0.0296EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/01/06 6:00 p.m.•151 views

CVE-2021-43045

CVE-2021-43045: A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service. Affected are .NET applications using Apache Avro 1.10.2 and earlier. Remediation per sources is to upgrade to Avro 1.11.0. Some advisory cont...

7.5CVSS7.4AI score0.0296EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/01/06 6:00 p.m.•58 views

CVE-2021-43045 Possible DOS vulnerabilities in C# Avro SDK

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions. Users should update to version 1.11.0 which addresses this...

7.8AI score0.0296EPSS
SaveExploits0References2
Mend
Mend
•added 2022/01/06 6:00 p.m.•5 views

CVE-2021-43045

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions. Users should update to version 1.11.0 which addresses this...

8.7CVSS0.0296EPSS
SaveExploits0References7
GitLab Advisory Database
GitLab Advisory Database
•added 2022/01/06 12:00 a.m.•51 views

Allocation of Resources Without Limits or Throttling in Apache Avro

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro and prior versions. Users should update to which addresses this issue...

7.5CVSS5.4AI score0.0296EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2022/01/06 12:00 a.m.•28 views

Apache Avro 资源管理错误漏洞

Apache Avro is a data serialization system from the Apache Foundation, Inc. A resource management error vulnerability exists in Apache Avro, which stems from the product's .net SDK component not effectively limiting the amount of allocated resources. An attacker could allocate too many resources ...

7.5CVSS5.6AI score0.0296EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/01/06 12:00 a.m.•15 views

PT-2022-11763

Name of the Vulnerable Software and Affected Versions Apache Avro versions 1.10.2 and prior versions Description A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. Recommendations For Apache Avro...

7.5CVSS7.3AI score0.0296EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/06 12:00 a.m.•5 views

CVE-2021-43045: Allocation of Resources Without Limits or Throttling

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions. Users should update to version 1.11.0 which addresses this...

7.5CVSS5.8AI score0.0296EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/02/10 10:15 p.m.•13 views

CVE-2021-27186

Fluent Bit 1.6.10 has a NULL pointer dereference when an flbmalloc return value is not validated by flbavro.c or httpserver/api/v1/metrics.c...

7.5CVSS7.3AI score0.01987EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2021/02/10 12:00 a.m.•21 views

PT-2021-17305 · Unknown · Fluent-Bit

Name of the Vulnerable Software and Affected Versions: Fluent Bit version 1.6.10 Description: The issue is related to a NULL pointer dereference that occurs when the return value of flb malloc is not validated by flb avro.c or http server/api/v1/metrics.c. This can lead to a crash or potentially...

7.5CVSS7.6AI score0.01987EPSS
SaveExploits1References8
vulnersOsv
vulnersOsv
•added 2020/01/21 9:18 p.m.•1 views

com.github.dexecutor:dexecutor-infinispan (>=0.0.1, <=1.0.0), org.apache.camel:camel-infinispan (>=2.16.0, <=2.16.5) +39 more potentially affected by CVE-2019-10158 via org.infinispan:infinispan-core (7.2.5.final)

org.infinispan:infinispan-core MAVEN version 7.2.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - com.github.dexecutor:dexecutor-infinispan =0.0.1, =2.16.0, =0.7, =5.0.0, =5.0.9.final,...

9.8CVSS0.01957EPSS
SaveExploits0
Rows per page
Query Builder