CVE-2022-30780

Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service CPU consumption from stuck connections because connectionreadheadermore in connections.c has a typo that disrupts use of multiple read operations on large headers...

PT-2022-7123

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 3.9.0 Description The issue is related to the execution of parse content stream which can lead to an infinite loop if a crafted PDF is used. This can occur, for example, when a user extracts text from such a PDF. The...

adbyby denial of service vulnerability

adbyby is a very powerful ad filtering software. It can filter pop-ups and video headers from all major websites to eliminate malicious ads. adbyby version 2.7 has a denial-of-service vulnerability. The vulnerability stems from allowing an external user to establish a connection via port 8118. Th...

CVE-2022-29767

adbyby v2.7 allows external users to make connections via port 8118. This can cause a program logic error and lead to a Denial of Service DoS via high CPU usage due to a large number of connections...

CVE-2022-29767

adbyby v2.7 allows external users to make connections via port 8118. This can cause a program logic error and lead to a Denial of Service DoS via high CPU usage due to a large number of connections...

CVE-2022-29767

CVE-2022-29767 affects adbyby v2.7. The vulnerability arises from allowing external users to establish connections via port 8118, causing a program logic error and enabling Denial of Service through high CPU usage when many connections are created. The available connected sources confirm the same...

CVE-2022-29767: Allocation of Resources Without Limits or Throttling

adbyby v2.7 allows external users to make connections via port 8118. This can cause a program logic error and lead to a Denial of Service DoS via high CPU usage due to a large number of connections...

PT-2022-19820

Name of the Vulnerable Software and Affected Versions adbyby version 2.7 Description The issue allows external users to make connections via port 8118, causing a program logic error. This can lead to a Denial of Service DoS due to high CPU usage resulting from a large number of connections...

Nginx Plus R1 < R15-P2 / R16 < R16-P1 Multiple Vulnerabilities

According to its self reported version, the installed version of Nginx Plus is R1 built on Open Source version 1.5.3-1 prior to R15-P2 or R16 built on Open Source version 1.15.2 prior to R16-P1. It is, therefore, affected by the following issues : - An unspecified error exists related to the modu...

Deserialization of Untrusted Data in Spring AMQP

In Spring AMQP versions 2.2.0 - 2.2.18 and 2.3.0 - 2.3.10, the Spring AMQP Message object, in its toString method, will deserialize a body for a message with content type application/x-java-serialized-object. It is possible to construct a malicious java.util.Dictionary object that can cause 100%...

Infinite loop

Overview std/crypto/elliptic is a Go standard library package std/crypto/elliptic Affected versions of this package are vulnerable to Infinite loop. Go Vulnerability Report: via the crypto/elliptic process. An attacker can cause excessive CPU consumption or potentially recover private keys by...

Regular Expression Denial Of Service (ReDoS)

urlregex is vulnerable to regular expression denial of service. The vulnerability exists due to a lack of sanitization which allows an attacker to cause an application crash via cpu usage...

GHSA-HG3W-7HJ9-M3F7 Regular expression denial of service in url_regex

All versions of package url-regex are vulnerable to Regular Expression Denial of Service ReDoS which can cause the CPU usage to crash...

Regular expression denial of service in url_regex

All versions of package url-regex are vulnerable to Regular Expression Denial of Service ReDoS which can cause the CPU usage to crash...

CVE-2021-41039

In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of performance and possible denial of service...

CVE-2022-21195

All versions of package url-regex are vulnerable to Regular Expression Denial of Service ReDoS which can cause the CPU usage to crash...

CVE-2022-21195

All versions of package url-regex are vulnerable to Regular Expression Denial of Service ReDoS which can cause the CPU usage to crash...

Code injection

All versions of package url-regex are vulnerable to Regular Expression Denial of Service ReDoS which can cause the CPU usage to crash...

CVE-2022-21195 Regular Expression Denial of Service (ReDoS)

All versions of package url-regex are vulnerable to Regular Expression Denial of Service ReDoS which can cause the CPU usage to crash...

CVE-2022-21195

CVE-2022-21195 concerns the Python package url_regex (url-regex); all versions are reported as vulnerable to Regular Expression Denial of Service (ReDoS) due to catastrophic backtracking in regex matching. Exploitation would cause high CPU usage, potentially crashing affected applications. Public...