Lucene search
+L

12018 matches found

OSV
OSV
added 2023/02/06 11:15 p.m.8 views

ALPINE-CVE-2022-44617

A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library...

7.5CVSS6.5AI score0.01247EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/02/06 12:00 a.m.21 views

CVE-2022-44617

A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library...

8.2AI score0.01247EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2023/02/06 12:00 a.m.11 views

CVE-2022-44617

A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library...

7AI score0.01247EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
added 2023/02/06 12:00 a.m.38 views

CVE-2022-44617

A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library...

7.5CVSS8.2AI score0.01247EPSS
SaveExploits0
Amazon
Amazon
added 2023/02/04 12:00 a.m.81 views

Medium: curl

Issue Overview: A vulnerability was found in curl. This issue occurs due to an erroneous function. A malicious server could make curl within Network Security Services NSS get stuck in a never-ending busy loop when trying to retrieve that information. This flaw allows an Infinite Loop, affecting...

7.5CVSS7.1AI score0.1654EPSS
SaveExploits3
ICS
ICS
added 2023/02/02 12:00 p.m.53 views

Mitsubishi Electric Multiple Factory Automation Products (Update D)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: GOT2000 compatible HMI software, CC-Link IE TSN Industrial Managed Switch, MELSEC iQ-R Series OPC UA Server Module Vulnerabilities: Infinite Loop, OS Command Injection 2...

10CVSS10AI score0.82612EPSS
SaveExploits7References29
Veracode
Veracode
added 2023/02/02 3:29 a.m.26 views

Denial Of Service (DoS)

openmage/magento-lts is vulnerable to Denial Of Service DoS. The vulnerability exists in the filter function of MaliciousCode.php, allowing an attacker to cause an application crash through an infinite loop by providing malicious input...

7.5CVSS7.1AI score0.00986EPSS
SaveExploits0References6Affected Software1
Prion
Prion
added 2023/02/01 3:15 a.m.17 views

Input validation

Due to insufficient length validation in the Open5GS GTP library versions prior to versions 2.4.13 and 2.5.7, when parsing extension headers in GPRS tunneling protocol GPTv1-U messages, a protocol payload with any extension header length set to zero causes an infinite loop. The affected process...

5CVSS7.4AI score0.00797EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/01 12:00 a.m.8 views

CVE-2023-23846

Due to insufficient length validation in the Open5GS GTP library versions prior to versions 2.4.13 and 2.5.7, when parsing extension headers in GPRS tunneling protocol GPTv1-U messages, a protocol payload with any extension header length set to zero causes an infinite loop. The affected process...

7.4AI score0.00797EPSS
SaveExploits0References1
OSV
OSV
added 2023/02/01 12:00 a.m.7 views

CVE-2023-23846

Due to insufficient length validation in the Open5GS GTP library versions prior to versions 2.4.13 and 2.5.7, when parsing extension headers in GPRS tunneling protocol GPTv1-U messages, a protocol payload with any extension header length set to zero causes an infinite loop. The affected process...

7.5CVSS7.1AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/01/31 12:00 a.m.17 views

PT-2023-1375 · Open5Gs · Open5Gs Gtp

Name of the Vulnerable Software and Affected Versions: Open5GS GTP versions prior to 2.4.13 Open5GS GTP versions prior to 2.5.7 Description: The issue is related to insufficient length validation in the Open5GS GTP library, which can cause an infinite loop when parsing extension headers in GPRS...

7.8CVSS7.4AI score0.00797EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2023/01/30 12:00 a.m.36 views

EulerOS Virtualization 3.0.2.2 : python (EulerOS-SA-2023-1284)

According to the versions of the python packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client...

7.5CVSS7.1AI score0.11586EPSS
SaveExploits3References5
NVD
NVD
added 2023/01/28 12:15 a.m.50 views

CVE-2023-23617

OpenMage LTS is an e-commerce platform. Versions prior to 19.4.22 and 20.0.19 contain an infinite loop in malicious code filter in certain conditions. Versions 19.4.22 and 20.0.19 have a fix for this issue. There are no known workarounds...

7.5CVSS5.9AI score0.00986EPSS
SaveExploits0References4
Prion
Prion
added 2023/01/28 12:15 a.m.20 views

Code injection

OpenMage LTS is an e-commerce platform. Versions prior to 19.4.22 and 20.0.19 contain an infinite loop in malicious code filter in certain conditions. Versions 19.4.22 and 20.0.19 have a fix for this issue. There are no known workarounds...

5CVSS7.5AI score0.00986EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2023/01/28 12:00 a.m.24 views

OpenMage Magento Lts 安全漏洞

OpenMage Magento Lts Magento is an e-commerce system organized by OpenMage. A security vulnerability exists in OpenMage LTS versions prior to 19.4.22, 20.0.19 and prior to 20.0.19, which stems from the inclusion of an infinite loop in the malicious code filter...

7.5CVSS7.3AI score0.00986EPSS
SaveExploits0References6
OSV
OSV
added 2023/01/27 11:24 p.m.28 views

CVE-2023-23617 OpenMage LTS has DoS vulnerability in MaliciousCode filter

OpenMage LTS is an e-commerce platform. Versions prior to 19.4.22 and 20.0.19 contain an infinite loop in malicious code filter in certain conditions. Versions 19.4.22 and 20.0.19 have a fix for this issue. There are no known workarounds...

4.9CVSS7.5AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2023/01/27 11:24 p.m.9 views

CVE-2023-23617 OpenMage LTS has DoS vulnerability in MaliciousCode filter

OpenMage LTS is an e-commerce platform. Versions prior to 19.4.22 and 20.0.19 contain an infinite loop in malicious code filter in certain conditions. Versions 19.4.22 and 20.0.19 have a fix for this issue. There are no known workarounds...

4.9CVSS6.5AI score0.00986EPSS
SaveExploits0References4
OSV
OSV
added 2023/01/27 12:55 a.m.85 views

GHSA-3P73-MM7V-4F6M DoS vulnerability in MaliciousCode filter

Impact Infinite loop in malicious code filter in certain conditions. Workarounds None...

4.9CVSS6.1AI score0.00986EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2023/01/27 12:55 a.m.32 views

DoS vulnerability in MaliciousCode filter

Impact Infinite loop in malicious code filter in certain conditions. Workarounds None...

7.5CVSS7.4AI score0.00986EPSS
SaveExploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/27 12:00 a.m.17 views

PT-2023-19079 · Unknown · Openmage Lts

Name of the Vulnerable Software and Affected Versions: OpenMage LTS versions prior to 19.4.22 OpenMage LTS versions prior to 20.0.19 Description: The issue is related to an infinite loop in the malicious code filter under certain conditions. There are no known workarounds for this problem...

7.5CVSS7.4AI score0.00986EPSS
SaveExploits0References9
Rows per page
Query Builder