Lucene search
+L

7387 matches found

osv_ubuntu
osv_ubuntu
•added 2024/02/29 8:15 p.m.•10 views

UBUNTU-CVE-2024-24246

Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::sharedcount function at /bits/sharedptrbase.h...

5.5CVSS5.8AI score0.00436EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2024/02/29 9:03 a.m.•37 views

CVE-2023-51775

A flaw was found in the jose.4.j jose4j library. The JWE key management algorithms based on PBKDF2 require a JOSE Header Parameter called p2c PBES2 Count. This parameter dictates the number of PBKDF2 iterations needed to derive a CEK wrapping key. Its primary purpose is to intentionally slow down...

7.5CVSS6.8AI score0.00871EPSS
SaveExploits1References3
Microsoft CVE
Microsoft CVE
•added 2024/02/29 8:00 a.m.•12 views

The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.

...

7.5CVSS7.3AI score0.00824EPSS
SaveExploits0
Github Security Blog
Github Security Blog
•added 2024/02/29 3:33 a.m.•39 views

jose2go vulnerable to denial of service via large p2c value

The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service CPU consumption via a large p2c aka PBES2 Count value...

7.5CVSS7AI score0.00824EPSS
SaveExploits0References7Affected Software1
Github Security Blog
Github Security Blog
•added 2024/02/29 3:33 a.m.•61 views

jose4j denial of service via specifically crafted JWE

The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service CPU consumption via a large p2c aka PBES2 Count value...

6.5CVSS6.7AI score0.00871EPSS
SaveExploits1References5Affected Software1
osv_ghsa
osv_ghsa
•added 2024/02/29 3:33 a.m.•35 views

GHSA-6294-6RGP-FR7R jose2go vulnerable to denial of service via large p2c value

The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service CPU consumption via a large p2c aka PBES2 Count value...

5.3CVSS7.1AI score0.00824EPSS
SaveExploits0References7
osv_ghsa
osv_ghsa
•added 2024/02/29 3:33 a.m.•28 views

GHSA-6QVW-249J-H44C jose4j denial of service via specifically crafted JWE

The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service CPU consumption via a large p2c aka PBES2 Count value...

6.5CVSS6.8AI score0.00871EPSS
SaveExploits1References4
NVD
NVD
•added 2024/02/29 1:42 a.m.•26 views

CVE-2023-51775

The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service CPU consumption via a large p2c aka PBES2 Count value...

6.5CVSS6.8AI score0.00871EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2024/02/29 1:42 a.m.•40 views

CVE-2023-51775

The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service CPU consumption via a large p2c aka PBES2 Count value...

6.5CVSS7AI score
SaveExploits0References2
osv_debian
osv_debian
•added 2024/02/29 1:42 a.m.•9 views

DEBIAN-CVE-2023-51775

The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service CPU consumption via a large p2c aka PBES2 Count value...

6.5CVSS6.8AI score0.00871EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2024/02/29 1:42 a.m.•11 views

CVE-2023-50658

The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service CPU consumption via a large p2c aka PBES2 Count value...

7.5CVSS5.8AI score0.00824EPSS
SaveExploits0References3
osv_azl
osv_azl
•added 2024/02/29 1:42 a.m.•19 views

AZL-35422 CVE-2023-50658 affecting package telegraf for versions less than 1.29.4-1

The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service CPU consumption via a large p2c aka PBES2 Count value...

7.5CVSS7.1AI score0.00824EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/29 1:42 a.m.•21 views

CVE-2023-50658

The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service CPU consumption via a large p2c aka PBES2 Count value...

7.5CVSS6.3AI score0.00824EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2024/02/29 1:42 a.m.•10 views

DEBIAN-CVE-2023-50658

The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service CPU consumption via a large p2c aka PBES2 Count value...

7.5CVSS7.2AI score0.00824EPSS
SaveExploits0References1
Prion
Prion
•added 2024/02/29 1:42 a.m.•21 views

Input validation

The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service CPU consumption via a large p2c aka PBES2 Count value...

7AI score0.00824EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2024/02/29 1:42 a.m.•21 views

CVE-2023-50658

The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service CPU consumption via a large p2c aka PBES2 Count value...

7.5CVSS7.1AI score0.00824EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2024/02/29 1:42 a.m.•7 views

UBUNTU-CVE-2023-51775

The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service CPU consumption via a large p2c aka PBES2 Count value...

6.5CVSS6.8AI score0.00871EPSS
SaveExploits1References3
osv_ubuntu
osv_ubuntu
•added 2024/02/29 1:42 a.m.•18 views

UBUNTU-CVE-2023-50658

The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service CPU consumption via a large p2c aka PBES2 Count value...

7.5CVSS5.8AI score0.00824EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/29 12:00 a.m.•4 views

CVE-2021-47054: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bus: qcom: Put child node before return Put child node before return to fix potential reference count leak. Generally, the reference count of child is incremented and decremented automatically in the macro...

5.5CVSS5.8AI score0.00238EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/02/29 12:00 a.m.•8 views

Linux kernel security vulnerabilities

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from a potential reference count leak...

5.5CVSS6.2AI score0.00238EPSS
SaveExploits0References2
Rows per page
Query Builder