Lucene search
+L

829 matches found

Positive Technologies
Positive Technologies
•added 2025/04/03 12:00 a.m.•18 views

PT-2025-14868

Name of the Vulnerable Software and Affected Versions gitoxide versions prior to 0.42.0 Description The issue arises from gitoxide's use of SHA-1 hash implementations without collision detection, making it vulnerable to hash collision attacks. This means two distinct Git objects with colliding...

6.8CVSS6.1AI score0.00256EPSS
SaveExploits0References32
RedhatCVE
RedhatCVE
•added 2025/04/02 7:36 p.m.•29 views

CVE-2025-29908

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

5.3CVSS7.2AI score0.00579EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/31 9:47 p.m.•22 views

GHSA-HQQC-JR88-P6X2 Netty QUIC hash collision DoS attack

An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections with colliding Source Connection IDs SCIDs. See...

5.3CVSS7.1AI score0.00579EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2025/03/31 9:47 p.m.•34 views

Netty QUIC hash collision DoS attack

An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections with colliding Source Connection IDs SCIDs. See...

5.3CVSS6.9AI score0.00579EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2025/03/31 7:15 p.m.•42 views

CVE-2025-29908

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

5.3CVSS0.00579EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/03/31 6:43 p.m.•55 views

CVE-2025-29908 Netty QUIC hash collision DoS attack

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

5.3CVSS0.00579EPSS
SaveExploits0References3
CVE
CVE
•added 2025/03/31 6:43 p.m.•97 views

CVE-2025-29908

CVE-2025-29908 affects the Netty QUIC codec (netty-incubator-codec-quic) which uses quiche. The issue is a hash collision in the hash map that manages connections, allowing a remote attacker to induce a Hash DoS by initiating connections with colliding Source Connection IDs (SCIDs), causing consi...

5.3CVSS5.2AI score0.00579EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/03/31 6:43 p.m.•10 views

CVE-2025-29908 Netty QUIC hash collision DoS attack

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

5.3CVSS7.1AI score0.00579EPSS
SaveExploits0References3
OSV
OSV
•added 2025/03/31 6:43 p.m.•22 views

CVE-2025-29908 Netty QUIC hash collision DoS attack

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

5.3CVSS6.6AI score
SaveExploits0References5
Mend
Mend
•added 2025/03/31 6:43 p.m.•3 views

CVE-2025-29908

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

6.9CVSS0.00579EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•25 views

Netty QUIC codec 安全漏洞

Netty QUIC codec is a new experimental QUIC codec for Netty open source. A security vulnerability exists in versions prior to Netty QUIC codec 0.0.71.Final, which stems from a hash collision vulnerability that could lead to excessive server CPU load...

5.3CVSS6.3AI score0.00579EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/03/20 12:32 p.m.•30 views

SageMaker Workflow component allows possibility of MD5 hash collisions

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...

5.9CVSS6.8AI score0.0026EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2025/03/20 10:15 a.m.•36 views

CVE-2025-0508

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...

5.9CVSS0.0026EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/03/20 10:11 a.m.•24 views

CVE-2025-0508 MD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdk

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...

5.9CVSS5.7AI score0.0026EPSS
SaveExploits0References2
OSV
OSV
•added 2025/03/20 10:11 a.m.•24 views

CVE-2025-0508 MD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdk

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...

5.9CVSS6.2AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2025/03/20 10:11 a.m.•52 views

CVE-2025-0508 MD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdk

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...

5.9CVSS0.0026EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/03/20 12:00 a.m.•17 views

PT-2025-12317

Name of the Vulnerable Software and Affected Versions aws/sagemaker-python-sdk affected versions not specified Description The issue concerns a problem with MD5 hash collisions in the SageMaker Workflow component. This can cause workflows to be inadvertently replaced due to the reuse of results...

5.9CVSS5.9AI score0.0026EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/20 12:00 a.m.•6 views

CVE-2025-0508: Use of Weak Hash

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...

5.9CVSS6.1AI score0.0026EPSS
SaveExploits0References1
Huntr
Huntr
•added 2025/03/07 1:35 p.m.•16 views

MD5 Hash Collision Causes Overwriting of Papers with the Same Title, Leading to Data Loss

Description The ArxivReader class in LlamaIndex is responsible for searching for papers on ArXiv, downloading them, and processing them for AI model training. The workflow of ArxivReader is as follows: 1. The user searches for a specific topic on ArXiv, retrieving a list of relevant papers. impor...

5.3CVSS6.6AI score0.00323EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2012-0840

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tables/aprhash.c in the Apache Portable Runtime APR library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions...

5CVSS7.2AI score0.42138EPSS
SaveExploits1References2
Rows per page
Query Builder