Lucene search
+L

4520 matches found

RedhatCVE
RedhatCVE
added 2024/10/03 12:25 p.m.28 views

CVE-2024-47554

A vulnerability was found in the Apache Commons IO component in the org.apache.commons.io.input.XmlStreamReader class. Excessive CPU resource consumption can lead to a denial of service when an untrusted input is processed...

4.3CVSS6.3AI score0.01241EPSS
SaveExploits0References4
NVD
NVD
added 2024/10/03 12:15 p.m.39 views

CVE-2024-47554

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgra...

4.3CVSS0.01241EPSS
SaveExploits0References3
OSV
OSV
added 2024/10/03 12:15 p.m.13 views

AZL-50031 CVE-2024-47554 affecting package apache-commons-io for versions less than 2.14.0-1

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgra...

4.3CVSS6.6AI score0.01241EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/03 12:15 p.m.2 views

DEBIAN-CVE-2024-47554

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgra...

4.3CVSS6.2AI score0.01241EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/03 12:15 p.m.19 views

AZL-50019 CVE-2024-47554 affecting package apache-commons-io for versions less than 2.14.0-1

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgra...

4.3CVSS6.6AI score0.01241EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/03 12:15 p.m.11 views

UBUNTU-CVE-2024-47554

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgra...

4.3CVSS6.7AI score0.01241EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/10/03 11:32 a.m.28 views

CVE-2024-47554 Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgra...

6.9AI score0.01241EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2024/10/03 11:32 a.m.25 views

CVE-2024-47554

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgra...

4.3CVSS6.2AI score0.01241EPSS
SaveExploits0
CVE
CVE
added 2024/10/03 11:32 a.m.435 views

CVE-2024-47554

CVE-2024-47554 affects Apache Commons IO. An Uncontrolled Resource Consumption issue in XmlStreamReader may cause high CPU use when processing malicious input. Vulnerable version range: 2.0 <= v

4.3CVSS6.5AI score0.01241EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2024/10/03 11:32 a.m.43 views

CVE-2024-47554 Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgra...

0.01241EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/03 11:32 a.m.39 views

CVE-2024-47554 Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgra...

4.3CVSS6.7AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/10/03 12:00 a.m.10 views

PT-2024-32653

Name of the Vulnerable Software and Affected Versions Apache Commons IO versions 2.0 through 2.13.x Description The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO from version...

8.7CVSS6.6AI score0.01241EPSS
SaveExploits0References333
CNNVD
CNNVD
added 2024/10/03 12:00 a.m.4 views

Apache Commons IO 资源管理错误漏洞

Apache Commons IO is an application of the Apache USA Foundation. It provides a help to develop IO functionality. A resource management error vulnerability exists in Apache Commons IO version 2.0 up to and including 2.14.0, which stems from uncontrolled CPU resource consumption...

4.3CVSS6.7AI score0.01241EPSS
SaveExploits0References8
IBM Security Bulletins
IBM Security Bulletins
added 2024/10/02 10:41 p.m.28 views

Security Bulletin: IBM Master Data Management is vulnerable to denial of service from Apache Commons Compress used in IBM Business Workflow Automation

Summary IBM Master Data Management v14.0 is vulnerable to denial of service from Apache commons compress used in IBM Business Workflow Automation. Apache Commons Compress is vulnerable to a denial of service, caused by an infinite loop flaw. By persuading a victim to open a specially crafted DUMP...

8.1CVSS6.8AI score0.00898EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2024/09/29 5:05 p.m.31 views

RHSA-2015:2671 Red Hat Security Advisory: jakarta-commons-collections security update

Bulletin has no description...

10CVSS7.4AI score0.85562EPSS
SaveExploits8References9
OSV
OSV
added 2024/09/29 5:04 p.m.34 views

RHSA-2020:4274 Red Hat Security Advisory: rh-maven35-apache-commons-collections4 security update

Bulletin has no description...

7.5CVSS7.4AI score0.85562EPSS
SaveExploits8References9
OSV
OSV
added 2024/09/29 5:04 p.m.27 views

RHSA-2015:2523 Red Hat Security Advisory: rh-java-common-apache-commons-collections security update

Bulletin has no description...

7.5CVSS7.4AI score0.85562EPSS
SaveExploits8References9
OSV
OSV
added 2024/09/29 5:04 p.m.21 views

RHSA-2015:2522 Red Hat Security Advisory: apache-commons-collections security update

Bulletin has no description...

10CVSS7.4AI score0.85562EPSS
SaveExploits8References9
OSV
OSV
added 2024/09/29 5:04 p.m.27 views

RHSA-2015:2521 Red Hat Security Advisory: jakarta-commons-collections security update

Bulletin has no description...

10CVSS7.4AI score0.85562EPSS
SaveExploits8References9
Veracode
Veracode
added 2024/09/26 7:10 a.m.14 views

Weak Random String Generation

org.apache.linkis, linkis-engineplugin-spark is vulnerable to weak random string generation. The vulnerability is due to insecure random string generation via Commons Lang's RandomStringUtils, which allows an attacker to predict the generated token, potentially enabling unauthorized access or...

7.5CVSS6.7AI score0.00579EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder