Lucene search
+L

16660 matches found

Cvelist
Cvelist
•added 2024/11/18 9:07 a.m.•49 views

CVE-2024-42392 Improper Neutralization of Delimiters in Mongoose Web Server library

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite loop bug if the input string contains unexpected characters...

4CVSS0.00243EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/18 9:07 a.m.•16 views

CVE-2024-42392 Improper Neutralization of Delimiters in Mongoose Web Server library

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite loop bug if the input string contains unexpected characters...

4CVSS5.9AI score0.00243EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/11/18 9:07 a.m.•31 views

CVE-2024-42392 Improper Neutralization of Delimiters in Mongoose Web Server library

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite loop bug if the input string contains unexpected characters...

4CVSS5.9AI score
SaveExploits0References5
CVE
CVE
•added 2024/11/18 9:07 a.m.•96 views

CVE-2024-42392

CVE-2024-42392 affects Cesanta Mongoose Web Server library (v7.14 and possibly earlier) with an Improper Neutralization of Delimiters flaw that can trigger an infinite loop when input strings contain unexpected characters. The NVD/NVD-derived note and Red Hat and CVE records describe this vulnera...

7.5CVSS5.9AI score0.00243EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/11/18 12:00 a.m.•33 views

CVE-2024-52917

Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received over the network, e.g., large M-SEARCH replies from a fake UPnP device...

0.00279EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/18 12:00 a.m.•97 views

CVE-2024-52917

Bitcoin Core versions prior to 22.0 are vulnerable to an infinite loop within the miniupnp component. The root cause is the allocation of memory based on random data received over the network, such as large M-SEARCH replies from a fake UPnP device. This vulnerability can lead to a Denial of Servi...

6.5CVSS5.9AI score0.00279EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2024/11/18 12:00 a.m.•17 views

CVE-2024-52917

Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received over the network, e.g., large M-SEARCH replies from a fake UPnP device...

6.5CVSS6.8AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/18 12:00 a.m.•11 views

CVE-2024-42392: Improper Neutralization of Delimiters

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite loop bug if the input string contains unexpected characters...

7.5CVSS5.9AI score0.00243EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/11/18 12:00 a.m.•8 views

PT-2024-29919

Name of the Vulnerable Software and Affected Versions Cesanta Mongoose Web Server version 7.14 Description The issue involves improper neutralization of delimiters, which can trigger an infinite loop bug if the input string contains unexpected characters. This is due to the improper handling of...

7.5CVSS5.7AI score0.00243EPSS
SaveExploits0References8
Mend
Mend
•added 2024/11/18 12:00 a.m.•7 views

CVE-2024-52917

Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received over the network, e.g., large M-SEARCH replies from a fake UPnP device...

7.1CVSS5.9AI score0.00279EPSS
SaveExploits0References4
Mend
Mend
•added 2024/11/18 12:00 a.m.•7 views

CVE-2024-52920

Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service infinite loop via a malformed GETDATA message...

8.7CVSS5.8AI score0.00633EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/11/18 12:00 a.m.•23 views

Cesanta Mongoose Web Server security vulnerability

Cesanta Mongoose Web Server is a cross-platform embedded server and web library written in C by Cesanta Ireland. A security vulnerability exists in Cesanta Mongoose Web Server version v7.14, which stems from an improper delimiter neutralization that causes an infinite loop error to be triggered...

7.5CVSS5.8AI score0.00243EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/18 12:00 a.m.•21 views

PT-2024-35485 · Unknown · Bitcoin Core

Name of the Vulnerable Software and Affected Versions: Bitcoin Core versions prior to 22.0 Description: The issue is related to an infinite loop in the miniupnp component, where memory is allocated based on random data received over the network, such as large M-SEARCH replies from a fake UPnP...

6.5CVSS5.9AI score0.00279EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2024/11/18 12:00 a.m.•14 views

CVE-2024-52917

Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received over the network, e.g., large M-SEARCH replies from a fake UPnP device...

5.9AI score0.00279EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/18 12:00 a.m.•5 views

CVE-2024-52920: Allocation of Resources Without Limits or Throttling

Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service infinite loop via a malformed GETDATA message...

7.5CVSS5.8AI score0.00633EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/11/15 10:15 p.m.•15 views

CVE-2017-13313

In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible infinite loop leading to resource exhaustion due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for...

6.5CVSS7.3AI score0.00241EPSS
SaveExploits0References1
Mend
Mend
•added 2024/11/15 10:00 p.m.•6 views

CVE-2017-13313

In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible infinite loop leading to resource exhaustion due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for...

8.7CVSS7.3AI score0.00241EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/15 12:00 a.m.•7 views

CVE-2017-13313: Loop with Unreachable Exit Condition

In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible infinite loop leading to resource exhaustion due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for...

7.5CVSS7.4AI score0.00241EPSS
SaveExploits0References1
Redos
Redos
•added 2024/11/15 12:00 a.m.•40 views

ROS-20241115-02

A vulnerability in the octeontx2-pf component of the Linux kernel is related to a memory leak in the function otx2qosreadtxschqcfgtl in drivers/net/ethernet/marvell/octeontx2/nic/qos.c. Exploitation of the of the vulnerability could allow an attacker to cause a denial of service A vulnerability i...

8.4CVSS6AI score0.00229EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/11/15 12:00 a.m.•22 views

PT-2024-10585 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to an incorrect bounds check in the dequeueAccessUnitMPEG4Video function of ESQueue.cpp, which can lead to an infinite loop and...

7.5CVSS7.3AI score0.00241EPSS
SaveExploits0References5
Rows per page
Query Builder