Lucene search
K

25 matches found

Positive Technologies
Positive Technologies
added 2026/05/22 12:0 a.m.5 views

PT-2026-42779

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Parsing arbitrary HTML can consume excessive CPU time, which may lead to a denial of service a condition where a system becomes unavailable to its intended users...

6.5CVSS5.9AI score0.00061EPSS
Exploits0References42
OSV
OSV
added 2026/03/27 12:11 p.m.2 views

BIT-GITLAB-2025-13078 Improper Validation of Specified Quantity in Input in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an authenticated user to cause a denial of service due to excessive resource consumption when processing certain webhook configurati...

6.5CVSS5.9AI score0.00029EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/03/02 12:0 a.m.3 views

PT-2026-23002

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.7.5 Description A crafted PDF file can cause excessive processing time when accessing a stream that utilizes the /ASCIIHexDecode filter. This issue affects the pypdf library. Recommendations Update to version 6.7.5 or...

6.9CVSS5.8AI score0.00017EPSS
Exploits0References22
RedHat Linux
RedHat Linux
added 2026/02/18 12:55 p.m.2 views

golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A ...

6.5CVSS5.7AI score0.00043EPSS
Exploits1References8
NVD
NVD
added 2026/01/13 9:15 p.m.2 views

CVE-2026-0530

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana Fleet can lead to Excessive Allocation CAPEC-130 via a specially crafted request. This causes the application to perform redundant processing operations that continuously consume system resources until service degradation or...

6.5CVSS0.00077EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/13 9:3 p.m.19 views

CVE-2026-0530 Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana Fleet can lead to Excessive Allocation CAPEC-130 via a specially crafted request. This causes the application to perform redundant processing operations that continuously consume system resources until service degradation or...

6.5CVSS0.00077EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/13 9:3 p.m.2 views

CVE-2026-0530 Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana Fleet can lead to Excessive Allocation CAPEC-130 via a specially crafted request. This causes the application to perform redundant processing operations that continuously consume system resources until service degradation or...

6.5CVSS6.4AI score0.00077EPSS
Exploits0References1
CVE
CVE
added 2026/01/13 9:3 p.m.9 views

CVE-2026-0530

CVE-2026-0530 describes an issue in Kibana Fleet where an allocation of resources without limits or throttling (CWE-770) can be triggered by a specially crafted request, causing excessive resource consumption and potential service degradation or unavailability (CAPEC-130). Affected versions span ...

6.5CVSS6.4AI score0.00077EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/10/29 10:10 p.m.3 views

CVE-2025-61724 Excessive CPU consumption in Reader.ReadResponse in net/textproto

The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption...

0.00024EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/10/29 10:10 p.m.1 views

CVE-2025-61724 Excessive CPU consumption in Reader.ReadResponse in net/textproto

The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption...

6.5AI score0.00024EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-1184

Malware in sbrugna...

4.3CVSS5.2AI score0.00974EPSS
Exploits0References8
Veracode
Veracode
added 2025/03/28 10:13 a.m.9 views

Denial Of Service (DoS)

aim is vulnerable to Denial Of Service DoS. The vulnerability is due to inefficient handling of large Text object queries due to excessive processing time when multiple objects are requested simultaneously, causing the server to become unresponsive...

7.5CVSS7.1AI score0.00442EPSS
Exploits1References3Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/05 7:39 a.m.4 views

CVE-2024-23837

LibHTP is a security-aware parser for the HTTP protocol. Crafted traffic can cause excessive processing time of HTTP headers, leading to denial of service. This issue is addressed in 0.5.46...

7.5CVSS6.5AI score0.00269EPSS
Exploits1References1
OSV
OSV
added 2024/11/13 4:15 p.m.19 views

CVE-2024-8049

In Progress Telerik Document Processing Libraries, versions prior to 2024 Q4 2024.4.1106, importing a document with unsupported features can lead to excessive processing, leading to excessive use of computing resources leaving the application process unavailable...

6.5CVSS5.8AI score0.01511EPSS
Exploits0References1
CVE
CVE
added 2024/11/13 3:20 p.m.57 views

CVE-2024-8049

Progress Telerik Document Processing Libraries are affected in versions prior to 2024 Q4 (2024.4.1106). The issue arises when importing a document that uses unsupported features, triggering excessive processing that consumes resources and can render the application process unavailable. The confir...

6.5CVSS6.4AI score0.01511EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/11/13 3:20 p.m.13 views

CVE-2024-8049 Telerik Document Processing Improper Handling of Memory Resources

In Progress Telerik Document Processing Libraries, versions prior to 2024 Q4 2024.4.1106, importing a document with unsupported features can lead to excessive processing, leading to excessive use of computing resources leaving the application process unavailable...

6.5CVSS0.01511EPSS
Exploits0References1
OSV
OSV
added 2024/06/04 3:11 a.m.5 views

OPENSUSE-SU-2024:0150-1 Security update for libhtp

This update for libhtp fixes the following issues: - CVE-2024-23837: excessive processing time of HTTP headers can lead to denial of service boo1220403...

7.5CVSS6.6AI score0.00269EPSS
Exploits1References3
CNVD
CNVD
added 2024/03/14 12:0 a.m.8 views

LibHTP Denial of Service Vulnerability

LibHTP is a security-aware parser. The product is mainly used for HTTP protocols, among others. A denial of service vulnerability exists in LibHTP prior to version 0.5.46. The vulnerability stems from failure to properly process incoming error messages, which can be exploited by an attacker to...

7.5CVSS6.5AI score0.00269EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2024/02/26 4:27 p.m.21 views

CVE-2024-23837

LibHTP is a security-aware parser for the HTTP protocol. Crafted traffic can cause excessive processing time of HTTP headers, leading to denial of service. This issue is addressed in 0.5.46...

7.5CVSS7.1AI score0.00269EPSS
Exploits1References6
OSV
OSV
added 2024/02/26 4:17 p.m.11 views

CVE-2024-23837 LibHTP unbounded folded header handling leads to denial service

LibHTP is a security-aware parser for the HTTP protocol. Crafted traffic can cause excessive processing time of HTTP headers, leading to denial of service. This issue is addressed in 0.5.46...

7.5CVSS7.3AI score0.00269EPSS
Exploits1References8
Rows per page
Query Builder