828 matches found
Code injection
mono 2.10.x ASP.NET Web Form Hash collision DoS...
CVE-2012-3543
Technical details about CVE-2012-3543 are not publicly provided in the supplied documents. Monitor for updates from vendors or vulnerability trackers for affected software, impact, and fixed versions.
CVE-2012-3543
mono 2.10.x ASP.NET Web Form Hash collision DoS...
CVE-2012-3543
mono 2.10.x ASP.NET Web Form Hash collision DoS...
CVE-2012-3543
mono 2.10.x ASP.NET Web Form Hash collision DoS...
CVE-2012-3543: Improper Input Validation
mono 2.10.x ASP.NET Web Form Hash collision DoS...
CVE-2011-4967
tog-Pegasus has a package hash collision DoS vulnerability...
Design/Logic Flaw
tog-Pegasus has a package hash collision DoS vulnerability...
CVE-2011-4967
tog-Pegasus has a package hash collision DoS vulnerability...
CVE-2011-4967: Improper Input Validation
tog-Pegasus has a package hash collision DoS vulnerability...
PT-2019-6713
Name of the Vulnerable Software and Affected Versions tog-Pegasus affected versions not specified Description The issue is related to a package hash collision Denial of Service DoS vulnerability. Recommendations At the moment, there is no information about a newer version that contains a fix for...
CVE-2019-10638: Inadequate Encryption Strength
In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols e.g., UDP and ICMP. When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions of indices to the counter...
CVE-2019-10638
In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols e.g., UDP and ICMP. When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions of indices to the counter...
Debian DLA-1834-1 : python2.7 security update
Multiple vulnerabilities were discovered in Python, an interactive high-level object-oriented language, including CVE-2018-14647 Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against...
CVE-2017-18106
The identifierhash for a session token in Atlassian Crowd before version 2.9.1 could potentially collide with an identifierhash for another user or a user in a different directory, this allows remote attackers who can authenticate to Crowd or an application using Crowd for authentication to gain...
PT-2019-8255
Name of the Vulnerable Software and Affected Versions Atlassian Crowd versions prior to 2.9.1 Description The issue allows remote attackers who can authenticate to gain access to another user's session by making their identifier hash collide with another user's session identifier hash. This...
Denial Of Service (DoS)
.NET Core is vulnerable to denial of service DoS. This is due to the way .NET Core handles requests which could cause a hash collision that results in a denial of service condition...
Hash Collision Attack
The SBLIM CIM Client is susceptible to hash collision attack. Since it uses HashMap to parse XML inputs, it allows the attacker to predict hashes and input malicious CIM-XML message from a WBEM Web-Based Enterprise Management server, causing high CPU consumption...
GHSA-Q8XJ-8XG3-W432 Uncontrolled Resource Consumption in spray-json
Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service resource consumption because of Algorithmic Complexity during the parsing of many JSON object fields with keys that have the same hash code...
Internet Bug Bounty: XML hash collision DoS vulnerability in Python's xml.etree module
Python's standard library uses libexpat to parse XML. Internally the expat library has a hash table implementation to efficiently store and lookup DTD elements like entities, elements, attributes, etc. Hash tables are potentially vulnerable to hash collision Denial-of-Service attacks, which turns...