Lucene search
K

63 matches found

Snyk
Snyk
added 2026/05/28 4:50 p.m.10 views

Excessive Iteration

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Excessive Iteration via the processing of cross-reference streams containing /W values set to 0 0 0 and large /Size values. An...

5.1CVSS5.8AI score0.00124EPSS
Exploits0References2
Redos
Redos
added 2026/04/17 12:0 a.m.4 views

ROS-20260417-73-0015

Vulnerability in python-PyPDF2 related to excessive iteration. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

6.9CVSS5.8AI score0.00168EPSS
Exploits0
Redos
Redos
added 2026/04/17 12:0 a.m.4 views

ROS-20260417-73-0023

Vulnerability in python-PyPDF2 related to excessive iteration. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

8.7CVSS7.1AI score0.00402EPSS
Exploits0
Snyk
Snyk
added 2026/04/16 9:30 p.m.3 views

Excessive Iteration

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Excessive Iteration in the incremental mode for PDF processing. An attacker can cause excessive resource consumption and...

6.5CVSS5.7AI score0.00214EPSS
Exploits0References2
Snyk
Snyk
added 2026/04/16 9:30 p.m.5 views

Excessive Iteration

Overview PyPDF2 is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Excessive Iteration in the incremental mode for PDF processing. An attacker can cause excessive resource consumption and...

6.5CVSS5.7AI score0.00214EPSS
Exploits0References2
Snyk
Snyk
added 2026/04/15 7:45 p.m.7 views

Excessive Iteration

Overview python-multipart is an A streaming multipart parser for Python Affected versions of this package are vulnerable to Excessive Iteration in the parsing performed by multipart.py. An attacker can degrade performance by sending multipart requests with very large preamble or epilogue sections...

6.9CVSS5.8AI score0.00351EPSS
Exploits0References2
Redos
Redos
added 2026/04/08 12:0 a.m.6 views

ROS-20260408-73-0009

A vulnerability in the kmemleakdocleanup function of the mm/kmemleak.c component of the Linux operating system kernel is related to excessive iteration. Exploitation of the vulnerability allows an attacker to cause a denial of service...

5.5CVSS6.1AI score0.00159EPSS
Exploits0
Snyk
Snyk
added 2026/03/24 10:13 p.m.6 views

Allocation of Resources Without Limits or Throttling

Overview Scriban is a Scriban is a fast, powerful, safe and lightweight scripting language and engine for .NET, which was primarily developed for text templating with a compatibility mode for parsing liquid templates. Today, not only Scriban can be used in text templating scenarios, but also can ...

8.7CVSS5.9AI score
Exploits0References2
Snyk
Snyk
added 2026/03/18 8:16 p.m.5 views

Excessive Iteration

Overview Affected versions of this package are vulnerable to Excessive Iteration via the decryptKey function when processing attacker-controlled JWE headers using PBES2 algorithms. An attacker can cause excessive CPU consumption and exhaust server resources by supplying a JWE with a very large p2...

8.7CVSS5.8AI score0.00481EPSS
Exploits1References2
Snyk
Snyk
added 2026/02/18 10:41 p.m.2 views

Excessive Iteration

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Excessive Iteration in the parsebfrange function in cmap.py. An attacker can cause excessive resource consumption by supplying a...

6.9CVSS5.6AI score0.00168EPSS
Exploits0References2
Snyk
Snyk
added 2025/12/12 6:52 a.m.4 views

Excessive Iteration

Overview tornado is a Python web framework and asynchronous networking library, originally developed at FriendFeed. Affected versions of this package are vulnerable to Excessive Iteration in the parseparam function. An attacker can cause the server to become unresponsive and consume excessive CPU...

8.7CVSS6.8AI score0.00371EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-4548

Malware in sbrugna...

5.5CVSS6AI score0.02596EPSS
Exploits0References16
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2018-20733

Malware in sbrugna...

6.5CVSS7.8AI score0.03277EPSS
Exploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2018-18110

Malware in sbrugna...

5.5CVSS5.7AI score0.01041EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-18363

Malware in sbrugna...

5.5CVSS6AI score0.01745EPSS
Exploits1References11
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2019-12973

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a...

5.5CVSS6.7AI score0.02596EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/28 12:0 a.m.6 views

The vulnerability of the MongoDB database management system’s server allows a hacker to cause a service failure.

The vulnerability of the MongoDB database management system server is related to excessive iteration. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

7.8CVSS5.5AI score0.00307EPSS
Exploits0References3Affected Software2
RedhatCVE
RedhatCVE
added 2025/05/23 4:38 a.m.11 views

CVE-2023-26513

Excessive Iteration vulnerability in Apache Software Foundation Apache Sling Resource Merger.This issue affects Apache Sling Resource Merger: from 1.2.0 before 1.4.2...

7.5CVSS6.8AI score0.01464EPSS
Exploits0References1
OSV
OSV
added 2025/04/08 2:15 p.m.2 views

CVE-2023-37930

Multiple issues including the use of uninitialized ressources CWE-908 and excessive iteration CWE-834 vulnerabilities vulnerability in Fortinet allows a VPN user to corrupt memory potentially leading to code or commands execution via specifically crafted requests...

8.8CVSS5.9AI score0.00481EPSS
Exploits0References1
CVE
CVE
added 2025/04/08 2:3 p.m.72 views

CVE-2023-37930

CVE-2023-37930 affects Fortinet FortiOS/FortiProxy/FortiManager products. It involves use of uninitialized resources (CWE-908) and excessive iteration (CWE-834) that can cause memory corruption and potentially allow code or commands execution via specially crafted requests. The issue is addressed...

8.8CVSS7AI score0.00481EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder