3636 matches found
CVE-2022-35724
It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 previously known as avro-rs. Users should update to apache-avro version 0.14.0 which addresses this issue...
CVE-2019-18214
The VideoConverter app 0.1.0 for Nextcloud allows denial of service CPU and memory consumption via multiple concurrent conversions because many FFmpeg processes may be running at once. The workload is not queued for serial execution...
CVE-2013-6801
Microsoft Word 2003 SP2 and SP3 on Windows XP SP3 allows remote attackers to cause a denial of service CPU consumption via a malformed .doc file containing an embedded image, as demonstrated by word2003forkbomb.doc, related to a "fork bomb" issue...
CVE-1999-0449
The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service CPU consumption via a direct request to the 1 advsearch.asp, 2 query.asp, or 3 search.asp scripts...
SUSE: Security Advisory (SUSE-SU-2025:4390-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-66453
Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float poing number into the toFixed function, it might lead to high CPU consumption and a potential Denial of Service. Small...
OESA-2025-2707 golang security update
. Security Fixes: tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When...
HSEC-2023-0001 Hash flooding vulnerability in aeson
Hash flooding vulnerability in aeson aeson was vulnerable to hash flooding a.k.a. hash DoS. The issue is a consequence of the HashMap implementation from unordered-containers. It results in a denial of service through CPU consumption. This technique has been used in real-world attacks against a...
AZL-98730 CVE-2025-61725 affecting package golang 1.27.1-1
The ParseAddress function constructs domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption...
AZL-69290 CVE-2025-61725 affecting package golang 1.25.12-1
The ParseAddress function constructs domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption...
CVE-2025-61725
CVE-2025-61725 is confirmed with technical details in connected advisory: the vulnerability is in the ParseAddress function, where domain-literal components are built by repeated string concatenation, causing excessive CPU usage when parsing large domain literals. The F5 advisory specifically map...
EUVD-2006-0375
Malware in sbrugna...
EUVD-2004-0325
Malware in sbrugna...
EUVD-2015-0296
Malware in sbrugna...
EUVD-2009-1597
Malware in sbrugna...
EUVD-2016-5938
Malware in sbrugna...
EUVD-2008-1360
Malware in sbrugna...
EUVD-2007-3703
Malware in sbrugna...