Lucene search
+L

16622 matches found

GitLab Advisory Database
GitLab Advisory Database
•added 2025/04/21 12:00 a.m.•36 views

Infinite loop condition in Amazon.IonDotnet

Amazon.IonDotnet ion-dotnet is a .NET library with an implementation of the Ion data serialization format. An issue exists in Amazon.IonDotnet and the RawBinaryReader class where, under certain conditions, an actor could trigger an infinite loop condition...

8.7CVSS5.9AI score0.00622EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2025/04/18 12:00 a.m.•37 views

Azure Linux 3.0 Security Update: qemu (CVE-2023-3255)

The version of qemu installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3255 advisory. - A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit conditio...

6.5CVSS7AI score0.01891EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/04/17 3:26 p.m.•23 views

CVE-2025-32947

This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" endpoint when receiving crafted ActivityPub activities...

7.5CVSS5.9AI score0.00759EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/16 12:00 a.m.•5 views

CVE-2024-58097: Loop with Unreachable Exit Condition

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix RCU stall while reaping monitor destination ring While processing the monitor destination ring, MSDUs are reaped from the link descriptor based on the corresponding bufid. However, sometimes the driver cannot...

5.5CVSS6AI score0.00212EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•23 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an infinite loop in the ath11kdprxmondestprocess function, which could cause the kernel to crash...

5.5CVSS6.2AI score0.00212EPSS
SaveExploits0References2
NVD
NVD
•added 2025/04/15 3:16 p.m.•34 views

CVE-2025-32947

This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" endpoint when receiving crafted ActivityPub activities...

7.5CVSS0.00759EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2025/04/15 2:45 p.m.•17 views

CVE-2025-32947 PeerTube ActivityPub Crawl Infinite Loop DoS

This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" endpoint when receiving crafted ActivityPub activities...

7.5CVSS5.9AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2025/04/15 2:45 p.m.•47 views

CVE-2025-32947 PeerTube ActivityPub Crawl Infinite Loop DoS

This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" endpoint when receiving crafted ActivityPub activities...

7.5CVSS0.00759EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/04/15 2:45 p.m.•23 views

CVE-2025-32947 PeerTube ActivityPub Crawl Infinite Loop DoS

This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" endpoint when receiving crafted ActivityPub activities...

7.5CVSS5.8AI score0.00759EPSS
SaveExploits1References3
CVE
CVE
•added 2025/04/15 2:45 p.m.•90 views

CVE-2025-32947

CVE-2025-32947 concerns PeerTube. The connected documents describe a DoS via an infinite loop in the "+inbox+" endpoint triggered by crafted ActivityPub activities, causing the PeerTube server to stop responding to requests. Affected software is PeerTube; the root cause is an infinite loop in han...

7.5CVSS5.8AI score0.00759EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2025/04/15 2:45 p.m.•12 views

CVE-2025-32947

This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" endpoint when receiving crafted ActivityPub activities...

8.7CVSS5.8AI score0.00759EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2025/04/15 12:50 p.m.•19 views

CVE-2025-32944 PeerTube User Import Authenticated Persistent Denial of Service

The vulnerability allows any authenticated user to cause the PeerTube server to stop functioning in a persistent manner. If user import is enabled which is the default setting, any registered user can upload an archive for importing. The code uses the yauzl library for reading the archive. If the...

6.5CVSS6AI score
SaveExploits0References5
Veracode
Veracode
•added 2025/04/15 6:26 a.m.•19 views

Denial Of Service (DoS)

@apeleghq/asn1-der is vulnerable to Denial of ServiceDoS. The vulnerability is due to incorrect arithmetic in the numBitLen function due to the use of the operator causing negative results for values between 2³¹ and 2³²-1, and attackers can exploit this to trigger an infinite loop and cause a...

6.9CVSS6AI score0.00234EPSS
SaveExploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/04/15 3:15 a.m.•73 views

Security Bulletin: IBM Cognos Controller is affected by vulnerabilities

Summary There are vulnerabilities in IBM® Java™, IBM® Websphere Application Server Liberty and Open-Source Software OSS components used by IBM Cognos Controller. Please refer to the table in the Related Information section for vulnerability impact. This Security Bulletin relates only to the direc...

9.8CVSS7.3AI score0.21952EPSS
SaveExploits3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•5 views

CVE-2025-32947: Loop with Unreachable Exit Condition

This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" endpoint when receiving crafted ActivityPub activities...

7.5CVSS5.9AI score0.00759EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/04/15 12:00 a.m.•22 views

PeerTube security vulnerability

PeerTube is a decentralized video sharing service platform open-sourced by Chocobozzz. It is used to create video projects. PeerTube suffers from a security vulnerability that stems from an infinite loop that could cause the server to stop responding...

7.5CVSS5.8AI score0.00759EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/04/15 12:00 a.m.•23 views

PT-2025-16344

Name of the Vulnerable Software and Affected Versions PeerTube affected versions not specified Description This issue allows an attacker to cause the PeerTube server to become unresponsive due to an infinite loop in the "inbox" endpoint when receiving crafted ActivityPub activities. The estimated...

7.5CVSS5.8AI score0.00759EPSS
SaveExploits1References14
IBM Security Bulletins
IBM Security Bulletins
•added 2025/04/14 2:59 p.m.•28 views

Security Bulletin: Vulnerabilities in dependencies affect IBM Voice Gateway

Summary Security Vulnerabilities in dependencies affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-24970 DESCRIPTION: Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and...

8.1CVSS6.4AI score0.02192EPSS
SaveExploits1Affected Software1
osv_bit
osv_bit
•added 2025/04/14 11:34 a.m.•89 views

BIT-PYTHON-2024-8088 Infinite loop when iterating over zip archive entry names from zipfile.Path

There is a HIGH severity vulnerability affecting the CPython "zipfile" module affecting "zipfile.Path". Note that the more common API "zipfile.ZipFile" class is unaffected. When iterating over names of entries in a zip archive for example, methods of "zipfile.Path" like "namelist", "iterdir", etc...

8.7CVSS6.8AI score0.01275EPSS
SaveExploits0References23
osv_bit
osv_bit
•added 2025/04/14 11:34 a.m.•44 views

BIT-PYTHON-MIN-2024-8088 Infinite loop when iterating over zip archive entry names from zipfile.Path

There is a HIGH severity vulnerability affecting the CPython "zipfile" module affecting "zipfile.Path". Note that the more common API "zipfile.ZipFile" class is unaffected. When iterating over names of entries in a zip archive for example, methods of "zipfile.Path" like "namelist", "iterdir", etc...

8.7CVSS6.8AI score0.01275EPSS
SaveExploits0References23
Rows per page
Query Builder