Denial Of Service (DoS)

Tornado is vulnerable to a Denial Of Service DoS. The vulnerability is due to Tornado’s multipart/form-data parser continuing to process data after encountering errors, allows an attacker to generate excessive synchronous logging...

PT-2025-21576

Name of the Vulnerable Software and Affected Versions: Tornado versions prior to 6.5.0 Description: The issue allows remote attackers to generate a high volume of logs, constituting a denial-of-service DoS attack, by exploiting Tornado's multipart/form-data parser when it encounters certain error...

GHSA-GJCC-JVGW-WVWJ Litestar allows unbounded resource consumption (DoS vulnerability)

Summary Litestar offers multiple methods to return a parsed representation of the request body, as well as extractors that rely on those parsers to map request content to structured data types. Multiple of those parsers do not have size limits when reading the request body into memory, which allo...

Malicious code in interasdasdnal-data-parser (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2abe44e01cf210338171b5fbd85494df086f85ce231b21c53c5b741dd960d355 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-6525 Malicious code in interasdasdnal-data-parser (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2abe44e01cf210338171b5fbd85494df086f85ce231b21c53c5b741dd960d355 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

GHSA-QV64-W99C-QCR9 Jenkins temporary uploaded file created with insecure permissions

In Jenkins 2.423 and earlier, LTS 2.414.1 and earlier, uploaded files processed via the Stapler web framework and the Jenkins API MultipartFormDataParser create temporary files in the system temporary directory with the default permissions for newly created files. If these permissions are overly...

CVE-2022-46527

ELSYS ERS 1.5 Sound v2.3.8 was discovered to contain a buffer overflow via the NFC data parser...

CVE-2022-46527

ELSYS ERS 1.5 Sound v2.3.8 was discovered to contain a buffer overflow via the NFC data parser...

CVE-2022-46527

ELSYS ERS 1.5 Sound v2.3.8 was discovered to contain a buffer overflow via the NFC data parser...

Buffer overflow

ELSYS ERS 1.5 Sound v2.3.8 was discovered to contain a buffer overflow via the NFC data parser...

ELSYS ERS Security Vulnerability

ELSYS ERS is a smart, professional LoRaWAN sensor from ELSYS. It is used for indoor climate measurements. A security vulnerability exists in ELSYS ERS version 1.5 Sound v2.3.8, which stems from a buffer overflow vulnerability in the NFC data parser...

CVE-2022-46527

ELSYS ERS 1.5 Sound v2.3.8 contains a buffer overflow in the NFC data parser. The CVE details indicate an impact to availability (CVSS: 7.5, high), with network attack vector and no user interaction. Product/component: ELSYS ERS 1.5 Sound, affected version 2.3.8. Root cause: buffer overflow in NF...

CVE-2022-46527

ELSYS ERS 1.5 Sound v2.3.8 was discovered to contain a buffer overflow via the NFC data parser...

CVE-2022-46527

ELSYS ERS 1.5 Sound v2.3.8 was discovered to contain a buffer overflow via the NFC data parser...

PT-2023-14955 · Elsys · Elsys Ers 1.5 Sound

Name of the Vulnerable Software and Affected Versions: ELSYS ERS 1.5 Sound version 2.3.8 Description: A buffer overflow issue was discovered in the NFC data parser. Recommendations: For version 2.3.8, at the moment, there is no information about a newer version that contains a fix for this issue...

Jenkins: Denial of Service attack

A flaw was found in Jenkins. Affected versions of Jenkins use the Apache Commons FileUpload library without specifying limits for the number of request parts introduced in version 1.5 for CVE-2023-24998 in hudson.util.MultipartFormDataParser, allowing attackers to trigger a denial of service...

Dell System Update has an unspecified vulnerability

Dell System Update is an application package from Dell, Inc. that provides application updates. A security vulnerability exists in Dell System Update version 2.0.0 and prior versions, which stems from the inclusion of incorrect certificate validation in the data parser module. No details of the...

CVE-2022-34404

Dell System Update, version 2.0.0 and earlier, contains an Improper Certificate Validation in data parser module. A local attacker with high privileges could potentially exploit this vulnerability, leading to credential theft and/or denial of service...

CVE-2022-34404

Dell System Update, version 2.0.0 and earlier, contains an Improper Certificate Validation in data parser module. A local attacker with high privileges could potentially exploit this vulnerability, leading to credential theft and/or denial of service...

Input validation

Dell System Update, version 2.0.0 and earlier, contains an Improper Certificate Validation in data parser module. A local attacker with high privileges could potentially exploit this vulnerability, leading to credential theft and/or denial of service...