Lucene search
+L

3552 matches found

CVE
CVE
added 2008/08/27 8:00 p.m.115 views

CVE-2008-3281

libxml2 up to version 2.6.32 is affected by CVE-2008-3281 due to improper detection of recursion during entity expansion in an attribute value, enabling a denial-of-service via crafted XML (memory and CPU consumption). The Gentoo GLSA confirms this, and recommends upgrading to libxml2 >= 2.7.2...

6.5CVSS6.3AI score0.02507EPSS
SaveExploits1References42Affected Software1
Debian CVE
Debian CVE
added 2008/08/27 8:00 p.m.40 views

CVE-2008-3281

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document...

6.5CVSS6AI score0.02507EPSS
SaveExploits1
Cvelist
Cvelist
added 2008/08/27 8:00 p.m.34 views

CVE-2008-3790

The REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72, and 1.9 allows context-dependent attackers to cause a denial of service CPU consumption via an XML document with recursively nested entities, aka an "XML entity explosion."...

6.5AI score0.15197EPSS
SaveExploits2References35
UbuntuCve
UbuntuCve
added 2008/08/27 12:00 a.m.35 views

CVE-2008-3790

The REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72, and 1.9 allows context-dependent attackers to cause a denial of service CPU consumption via an XML document with recursively nested entities, aka an "XML entity explosion."...

5CVSS7.1AI score0.15197EPSS
SaveExploits2References4
CVE
CVE
added 2008/08/13 1:00 a.m.110 views

CVE-2008-3656

The CVE-2008-3656 issue is a denial-of-service in WEBrick’s HTTP header handling: WEBrick::HTTPUtils.split_header_value in WEBrick::DefaultFileHandler backed by a backtracking regex causes CPU exhaustion when processing crafted HTTP requests. Affected Ruby versions include 1.8.5 and earlier, 1.8....

7.8CVSS6.5AI score0.70202EPSS
SaveExploits4References30Affected Software1
RubySec
RubySec
added 2008/08/12 12:00 a.m.49 views

Algorithmic complexity vulnerability in the WEBrick

Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.splitheadervalue function in WEBrick::HTTP::DefaultFileHandler in WEBrick in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows context-dependent attackers to cause a denial of...

7.8CVSS7.1AI score0.70202EPSS
SaveExploits4References1Affected Software1
CVE
CVE
added 2008/08/06 6:00 p.m.51 views

CVE-2008-3502

CVE-2008-3502 affects Best Practical Solutions RT versions 3.0.0 through 3.6.6. The vulnerability is described as an unspecified issue related to the Perl Devel::StackTrace module that allows remote authenticated users to cause a denial of service via unspecified vectors, potentially consuming CP...

4CVSS6.3AI score0.01116EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2008/07/24 3:18 p.m.45 views

CVE-2008-3269

The CVE-2008-3269 issue affects WRPCServer.exe in WinSoftMagic WinRemotePC (WRPC) Lite 2008 and WRPC Full 2008. A crafted packet sent to TCP port 4321 can cause a denial of service by driving high CPU usage. The core vulnerability is exposure to remote input that leads to resource exhaustion on t...

5CVSS6.6AI score0.10818EPSS
SaveExploits1References6Affected Software2
Prion
Prion
added 2008/07/22 11:41 p.m.22 views

Design/Logic Flaw

The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote attackers to cause a...

7.8CVSS6.7AI score0.28EPSS
SaveExploits2References12Affected Software1
Cvelist
Cvelist
added 2008/07/22 11:00 p.m.36 views

CVE-2008-3263

The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote attackers to cause a...

6.2AI score0.28EPSS
SaveExploits2References12
Debian CVE
Debian CVE
added 2008/07/22 11:00 p.m.51 views

CVE-2008-3263

The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote attackers to cause a...

7.8CVSS6.1AI score0.28EPSS
SaveExploits2
Positive Technologies
Positive Technologies
added 2008/07/22 12:00 a.m.8 views

PT-2008-4679 · Sony Ericsson +1 · S800I +4

Name of the Vulnerable Software and Affected Versions: Asterisk Open Source versions 1.0.x through 1.2.x before 1.2.30 Asterisk Open Source versions 1.4.x before 1.4.21.2 Asterisk Business Edition A.x.x Asterisk Business Edition B.x.x before B.2.5.4 Asterisk Business Edition C.x.x before C.1.10.3...

7.8CVSS6.8AI score0.28EPSS
SaveExploits2References18
seebug.org
seebug.org
added 2008/07/16 12:00 a.m.20 views

WinRemotePC Full+Lite 2008 r.2server Denial of Service Exploit

No description provided by source. include stdio.h include stdlib.h include sys/socket.h include sys/types.h include netinet/in.h include string.h include malloc.h include sys/stat.h include fcntl.h define size 30000 define tests 35 / WinRemotePC Full+Lite 2008 r.2server DOSmemory+cpu consumption...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2008/07/15 12:00 a.m.22 views

winremote-dos.txt

include include include include include include include include include define size 30000 define tests 35 / WinRemotePC Full+Lite 2008 r.2server DOSmemory+cpu consumption vulnerability poc A vulnerability exists in WinRemotePC Full+Lite 2008 r.2+server in the way it handles recieved packets becau...

7.4AI score
SaveExploits0
exploitpack
exploitpack
added 2008/07/15 12:00 a.m.14 views

WinRemotePC Full+Lite 2008 r.2server - Denial of Service

WinRemotePC Full+Lite 2008 r.2server - Denial of Service include include include include include include include include include define size 30000 define tests 35 / WinRemotePC Full+Lite 2008 r.2server DOSmemory+cpu consumption vulnerability poc A vulnerability exists in WinRemotePC Full+Lite 200...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/07/15 12:00 a.m.36 views

WinRemotePC Full+Lite 2008 r.2server - Denial of Service

include include include include include include include include include define size 30000 define tests 35 / WinRemotePC Full+Lite 2008 r.2server DOSmemory+cpu consumption vulnerability poc A vulnerability exists in WinRemotePC Full+Lite 2008 r.2+server in the way it handles recieved packets becau...

5CVSS5.8AI score0.10818EPSS
SaveExploits1
Prion
Prion
added 2008/07/10 11:41 p.m.20 views

Code injection

Soldner Secret Wars 33724 and earlier allows remote attackers to cause a denial of service CPU consumption via a packet with a large numeric value in a 0x80 data block...

7.8CVSS7.1AI score0.01916EPSS
SaveExploits0References6
NVD
NVD
added 2008/07/10 11:41 p.m.30 views

CVE-2008-3135

Soldner Secret Wars 33724 and earlier allows remote attackers to cause a denial of service CPU consumption via a packet with a large numeric value in a 0x80 data block...

7.8CVSS6.6AI score0.01916EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2008/07/10 11:00 p.m.31 views

CVE-2008-3135

Soldner Secret Wars 33724 and earlier allows remote attackers to cause a denial of service CPU consumption via a packet with a large numeric value in a 0x80 data block...

6.6AI score0.01916EPSS
SaveExploits0References6
CVE
CVE
added 2008/07/10 11:00 p.m.45 views

CVE-2008-3135

CVE-2008-3135 affects Soldner Secret Wars (33724 and earlier). The issue allows remote attackers to cause a denial of service through a packet containing a large numeric value in a 0x80 data block, consuming CPU. The provided sources describe the vulnerability and impact but do not include concre...

7.8CVSS6.6AI score0.01916EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder