Lucene search
+L

12094 matches found

OSV
OSV
added 2022/01/14 8:15 p.m.11 views

CVE-2021-23567

The package colors after 1.4.0 are vulnerable to Denial of Service DoS that was introduced through an infinite loop in the americanFlag module. Unfortunately this appears to have been a purposeful attempt by a maintainer of colors to make the package unusable, other maintainers' controls over thi...

7.5CVSS7.1AI score0.01733EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2022/01/14 8:15 p.m.16 views

CVE-2021-45775

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

5.9AI score
SaveExploits0References2
Debian CVE
Debian CVE
added 2022/01/14 8:05 p.m.56 views

CVE-2021-23567

The package colors after 1.4.0 are vulnerable to Denial of Service DoS that was introduced through an infinite loop in the americanFlag module. Unfortunately this appears to have been a purposeful attempt by a maintainer of colors to make the package unusable, other maintainers' controls over thi...

7.5CVSS7.6AI score0.01733EPSS
SaveExploits1
ATTACKERKB
ATTACKERKB
added 2022/01/14 8:00 p.m.7 views

CVE-2021-23567

The package colors after 1.4.0 are vulnerable to Denial of Service DoS that was introduced through an infinite loop in the americanFlag module. Unfortunately this appears to have been a purposeful attempt by a maintainer of colors to make the package unusable, other maintainers' controls over thi...

7.5CVSS7.1AI score0.01733EPSS
SaveExploits1References6
Debian CVE
Debian CVE
added 2022/01/14 7:13 p.m.19 views

CVE-2021-45775

Removed by vendor...

7AI score
SaveExploits0
CNNVD
CNNVD
added 2022/01/14 12:00 a.m.8 views

colors.js 安全漏洞

Colors.js is a project by Marak, an individual developer in the United States, to fetch colors in the Node.js console. A security vulnerability exists in colors.js. An attacker can introduce a Denial of Service DoS attack via an infinite loop in the AmericanFlag module...

7.5CVSS7.3AI score0.01733EPSS
SaveExploits1References6
OSV
OSV
added 2022/01/12 6:15 p.m.8 views

CVE-2021-45445

Unisys ClearPath MCP TCP/IP Networking Services 59.1, 60.0, and 62.0 has an Infinite Loop...

7.5CVSS7.1AI score0.0097EPSS
SaveExploits0References2
NVD
NVD
added 2022/01/12 6:15 p.m.27 views

CVE-2021-45445

Unisys ClearPath MCP TCP/IP Networking Services 59.1, 60.0, and 62.0 has an Infinite Loop...

7.5CVSS0.0097EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/01/12 6:15 p.m.5 views

CVE-2021-45445

Unisys ClearPath MCP TCP/IP Networking Services 59.1, 60.0, and 62.0 has an Infinite Loop...

7.5CVSS7.1AI score0.0097EPSS
SaveExploits0References3
Prion
Prion
added 2022/01/12 6:15 p.m.21 views

Design/Logic Flaw

Unisys ClearPath MCP TCP/IP Networking Services 59.1, 60.0, and 62.0 has an Infinite Loop...

5CVSS7.6AI score0.0097EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/01/12 5:44 p.m.35 views

CVE-2021-45445

Unisys ClearPath MCP TCP/IP Networking Services 59.1, 60.0, and 62.0 has an Infinite Loop...

7.8AI score0.0097EPSS
SaveExploits0References2
CVE
CVE
added 2022/01/12 5:44 p.m.52 views

CVE-2021-45445

CVE-2021-45445 affects Unisys ClearPath MCP TCP/IP Networking Services versions 59.1, 60.0 and 62.0. The connected documents describe a vulnerability that triggers an infinite loop in the networking services component, leading to denial of service (availability impact). The CVSS data in the initi...

7.5CVSS7.5AI score0.0097EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/01/12 12:00 a.m.7 views

Unisys ClearPath MCP 代码问题漏洞

Unisys ClearPath MCP is an operating system from Unisys, Inc. A code issue vulnerability exists in Unisys ClearPath MCP TCP IP Networking Services that stems from an infinite loop error in the product. An attacker could cause a denial of service via this vulnerability. The following products and...

7.5CVSS7.5AI score0.0097EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2022/01/10 7:04 p.m.29 views

CVE-2021-4190

An infinite-loop flaw was found in Wireshark. This flaw allows an attacker with local network access to pass specially crafted capture files, causing an application to halt, crash, or go into an infinite loop...

7.5CVSS2.3AI score0.031EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2022/01/10 6:26 p.m.29 views

CVE-2021-4182

A parser infinite-loop flaw was found in wireshark. An attacker with local network access could pass specially crafted capture files causing an application to halt, crash, or infinite loop...

7.5CVSS2.8AI score0.03296EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2022/01/10 6:25 p.m.31 views

CVE-2021-4184

An infinite-loop flaw was found in Wireshark's DHT dissector module. This flaw allows an attacker with local network access to pass specially crafted capture files, causing an application to halt, crash or go into an infinite loop...

7.5CVSS2AI score0.03879EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2022/01/10 6:25 p.m.28 views

CVE-2021-4185

An infinite-loop flaw was found in Wireshark RTMPT. This flaw allows an attacker with local network access to pass specially crafted capture files, causing an application to halt, crash, or go into an infinite loop...

7.5CVSS2.3AI score0.03879EPSS
SaveExploits1References4
OSV
OSV
added 2022/01/10 5:29 p.m.13 views

GHSA-5RQG-JM4F-CQX7 Infinite loop causing Denial of Service in colors

colors is a library for including colored text in node.js consoles. Between 07 and 09 January 2022, colors versions 1.4.1, 1.4.2, and 1.4.44-liberty-2 were published including malicious code that caused a Denial of Service due to an infinite loop. Software dependent on these versions experienced...

7.3AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2022/01/10 5:29 p.m.448 views

Infinite loop causing Denial of Service in colors

colors is a library for including colored text in node.js consoles. Between 07 and 09 January 2022, colors versions 1.4.1, 1.4.2, and 1.4.44-liberty-2 were published including malicious code that caused a Denial of Service due to an infinite loop. Software dependent on these versions experienced...

2.6AI score
SaveExploits0References4Affected Software1
Snyk
Snyk
added 2022/01/09 9:24 a.m.4 views

Denial of Service (DoS)

Overview colors is a color manipulation library. Affected versions of this package are vulnerable to Denial of Service DoS that was introduced through an infinite loop in the americanFlag module. Unfortunately this appears to have been a purposeful attempt by a maintainer of colors to make the...

7.5CVSS6.9AI score0.01733EPSS
SaveExploits1References2
Rows per page
Query Builder