Lucene search
+L

12245 matches found

OSV
OSV
added 2021/05/14 7:45 a.m.15 views

SUSE-SU-2021:1605-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36312: Fixed an issue within virt/kvm/kvmmain.c that had a kvmiobusunregisterdev memory leak upon a kmalloc failure bnc1184509. - CVE-2021-29650: Fix...

5.5CVSS7.7AI score0.01071EPSS
SaveExploits0References75
Github Security Blog
Github Security Blog
added 2021/05/13 8:23 p.m.62 views

Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic

Impact Passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Patches Pydantic is be patched with fixes available in the following versions: v1.8.2 v1.7.4 v1.6.2 All these versions are available...

7.5CVSS7.2AI score0.00967EPSS
SaveExploits0References11Affected Software1
OSV
OSV
added 2021/05/13 8:23 p.m.12 views

GHSA-5JQP-QGF6-3PVH Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic

Impact Passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Patches Pydantic is be patched with fixes available in the following versions: v1.8.2 v1.7.4 v1.6.2 All these versions are available...

5.3CVSS7.2AI score0.00967EPSS
SaveExploits0References11
Cvelist
Cvelist
added 2021/05/13 6:55 p.m.90 views

CVE-2021-29510 Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic

Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Pydantic has been patched with fixes...

3.3CVSS7.6AI score0.00967EPSS
SaveExploits0References5
OSV
OSV
added 2021/05/13 11:12 a.m.6 views

SUSE-SU-2021:1595-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36312: Fixed an issue within virt/kvm/kvmmain.c that had a kvmiobusunregisterdev memory leak upon a kmalloc failure bnc1184509. - CVE-2021-29650: Fixed ...

7.8CVSS7.7AI score0.01071EPSS
SaveExploits0References77
Vulnrichment
Vulnrichment
added 2021/05/12 1:18 p.m.11 views

CVE-2021-27385

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7" & 15" incl. SIPLUS variants All versions V15.1 Update 6, SIMATIC HMI Comfort Outdoor Panels V16 7" & 15" incl. SIPLUS variants All versions V16 Update 4, SIMATIC HMI Comfort Panels V15 4" - 22" incl. SIPLUS...

7AI score0.02555EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2021/05/11 8:55 p.m.44 views

CVE-2021-28676

A flaw was found in python-pillow. FliDecode.c did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load. This issue dates to the PIL fork. The highest threat from this vulnerability is to system availability. Mitigation To mitigate this feature o...

7.5CVSS1.5AI score0.02521EPSS
SaveExploits0References4
OSV
OSV
added 2021/05/10 3:23 p.m.48 views

GHSA-567X-M4WM-87V8 Infinite loop in Apache Tika

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

5.5CVSS5.5AI score0.02752EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2021/05/10 3:23 p.m.60 views

Infinite loop in Apache Tika

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

5.5CVSS3.1AI score0.02752EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2021/05/10 12:00 a.m.8 views

UBUNTU-CVE-2021-28676

An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load...

7.5CVSS6.8AI score0.02521EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2021/05/10 12:00 a.m.30 views

CVE-2021-28676

An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load...

7.5CVSS6.8AI score0.02521EPSS
SaveExploits0References4
OSV
OSV
added 2021/05/09 6:05 p.m.9 views

OPENSUSE-SU-2021:0694-1 Security update for avahi

This update for avahi fixes the following issues: - CVE-2021-3468: avoid infinite loop by handling HUP event in clientwork bsc1184521. This update was imported from the SUSE:SLE-15-SP1:Update update project...

5.5CVSS5.9AI score0.00443EPSS
SaveExploits0References3
OSV
OSV
added 2021/05/07 3:54 p.m.34 views

GHSA-3264-3FM9-FG44 Infinite Loop in Apache Tika

A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23...

5.5CVSS5.5AI score0.02905EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2021/05/07 12:00 a.m.50 views

Debian DLA-2652-1 : unbound1.9 security update

Several security vulnerabilities have been discovered in Unbound, a validating, recursive, caching DNS resolver, by security researchers of X41 D-SEC located in Aachen, Germany. Integer overflows, assertion failures, an out-of-bound write and an infinite loop vulnerability may lead to a denial of...

9.8CVSS7.3AI score0.02179EPSS
SaveExploits0References15
Tenable Nessus
Tenable Nessus
added 2021/05/05 12:00 a.m.28 views

SUSE SLES12 Security Update : avahi (SUSE-SU-2021:1494-1)

This update for avahi fixes the following issues : CVE-2021-3468: avoid infinite loop by handling HUP event in clientwork bsc1184521. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

5.5CVSS7.1AI score0.00443EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/05/05 12:00 a.m.2 views

Avahi 安全漏洞

Avahi is a set of native service discovery tools for Linux. a security vulnerability exists in Avahi that could be exploited to trigger an infinite loop...

5.5CVSS5.5AI score0.00443EPSS
SaveExploits0References10
Github Security Blog
Github Security Blog
added 2021/05/04 5:43 p.m.336 views

cumulative-distribution-function Infinite Loop vulnerability

Impact Apps using this library on improper data may crash or go into an infinite-loop In the case of a nodejs server-app using this library to act on invalid non-numeric data, the nodejs server may crash. This may affect other users of this server and/or require the server to be rebooted for prop...

7.5CVSS0.3AI score0.01979EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2021/05/04 5:43 p.m.88 views

GHSA-58QP-5328-V7MH cumulative-distribution-function Infinite Loop vulnerability

Impact Apps using this library on improper data may crash or go into an infinite-loop In the case of a nodejs server-app using this library to act on invalid non-numeric data, the nodejs server may crash. This may affect other users of this server and/or require the server to be rebooted for prop...

7.5CVSS7.5AI score0.01979EPSS
SaveExploits1References5
OSV
OSV
added 2021/05/04 3:21 p.m.6 views

SUSE-SU-2021:1500-1 Security update for python-Pygments

This update for python-Pygments fixes the following issues: - CVE-2021-20270: Fixed an infinite loop in SML lexer which may lead to DoS bsc1183169...

7.5CVSS7.5AI score0.02759EPSS
SaveExploits0References3
OSV
OSV
added 2021/05/04 3:14 p.m.6 views

SUSE-SU-2021:1494-1 Security update for avahi

This update for avahi fixes the following issues: - CVE-2021-3468: avoid infinite loop by handling HUP event in clientwork bsc1184521...

5.5CVSS5.7AI score0.00443EPSS
SaveExploits0References3
Rows per page
Query Builder