Lucene search
+L

16955 matches found

osv_alpine
osv_alpine
•added 2023/09/05 8:15 a.m.•7 views

ALPINE-CVE-2023-4540

Improper Handling of Exceptional Conditions vulnerability in Daurnimator lua-http library allows Excessive Allocation and a denial of service DoS attack to be executed by sending a properly crafted request to the server. Such a request causes the program to enter an infinite loop. This issue...

7.5CVSS0.0109EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2023/09/05 8:15 a.m.•20 views

UBUNTU-CVE-2023-4540

Improper Handling of Exceptional Conditions vulnerability in Daurnimator lua-http library allows Excessive Allocation and a denial of service DoS attack to be executed by sending a properly crafted request to the server. Such a request causes the program to enter an infinite loop. This issue...

7.5CVSS7AI score0.0109EPSS
SaveExploits0References4
Mend
Mend
•added 2023/09/05 7:46 a.m.•14 views

CVE-2023-4540

Improper Handling of Exceptional Conditions vulnerability in Daurnimator lua-http library allows Excessive Allocation and a denial of service DoS attack to be executed by sending a properly crafted request to the server. Such a request causes the program to enter an infinite loop. This issue...

8.7CVSS7AI score0.0109EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2023/09/05 12:00 a.m.•16 views

Oracle Java SE JAXP DoS

The vulnerability of the JAXP software platform of Oracle Java SE and the Oracle GraalVM Enterprise Edition virtual machine is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failures...

5.3CVSS6.8AI score0.03458EPSS
SaveExploits0References16Affected Software6
Positive Technologies
Positive Technologies
•added 2023/09/05 12:00 a.m.•12 views

PT-2023-29548 · Daurnimator +1 · Lua-Http +1

Name of the Vulnerable Software and Affected Versions: lua-http versions before commit ddab283 Description: The issue is related to an Improper Handling of Exceptional Conditions vulnerability in the Daurnimator lua-http library, which allows Excessive Allocation and a denial of service DoS attac...

7.5CVSS7.1AI score0.0109EPSS
SaveExploits0References17
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/05 12:00 a.m.•4 views

CVE-2023-4540: Improper Handling of Exceptional Conditions

Improper Handling of Exceptional Conditions vulnerability in Daurnimator lua-http library allows Excessive Allocation and a denial of service DoS attack to be executed by sending a properly crafted request to the server. Such a request causes the program to enter an infinite loop. This issue...

7.5CVSS7.1AI score0.0109EPSS
SaveExploits0References3
osv_oesa
osv_oesa
•added 2023/09/02 11:06 a.m.•27 views

OESA-2023-1566 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

5.5CVSS7AI score0.00628EPSS
SaveExploits0References2
FreeBSD
FreeBSD
•added 2023/09/01 12:00 a.m.•36 views

mediawiki -- multiple vulnerabilities

Mediawikwi reports: T264765, CVE-2023-PENDING SECURITY: Users without correct permission are incorrectly shown MediaWiki:Missing-revision-permission. T333050, CVE-2023-PENDING SECURITY: Fix infinite loop for self-redirects with variants conversion. T340217, CVE-2023-PENDING SECURITY: Vector 2022:...

9CVSS7.2AI score0.0138EPSS
SaveExploits1References1
Veracode
Veracode
•added 2023/08/30 3:57 p.m.•43 views

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. The vulnerability exists due to the infinite loop in the BT SDP dissector, which allows an attacker to cause an application crash via packet injection or crafted capture file...

7.5CVSS6.6AI score0.00463EPSS
SaveExploits0References7Affected Software1
Tenable Nessus
Tenable Nessus
•added 2023/08/30 12:00 a.m.•50 views

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : elfutils vulnerabilities (USN-6322-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6322-1 advisory. It was discovered that elfutils incorrectly handled certain malformed files. If a user or automated system were tricked into...

6.5CVSS6.5AI score0.02791EPSS
SaveExploits8References11
NVD
NVD
•added 2023/08/28 12:15 p.m.•43 views

CVE-2023-36481

An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, and W920. Improper handling of PPP length parameter inconsistency can cause an infinite loop...

7.5CVSS7.6AI score0.00626EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/08/28 12:15 p.m.•13 views

CVE-2023-36481

An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, and W920. Improper handling of PPP length parameter inconsistency can cause an infinite loop...

7.5CVSS7.2AI score0.00626EPSS
SaveExploits0References2
Prion
Prion
•added 2023/08/28 12:15 p.m.•39 views

Input validation

An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, and W920. Improper handling of PPP length parameter inconsistency can cause an infinite loop...

5CVSS7.5AI score0.00626EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/08/28 12:00 a.m.•20 views

CVE-2023-36481

An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, and W920. Improper handling of PPP length parameter inconsistency can cause an infinite loop...

7.2AI score0.00626EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/08/28 12:00 a.m.•21 views

PT-2023-25587 · Samsung · Samsung Mobile Processor Exynos +1

Name of the Vulnerable Software and Affected Versions: Samsung Exynos Mobile Processor and Wearable Processor versions 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920 Description: An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor. Imprope...

7.5CVSS7.1AI score0.00626EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2023/08/28 12:00 a.m.•55 views

CVE-2023-36481

An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, and W920. Improper handling of PPP length parameter inconsistency can cause an infinite loop...

7.8AI score0.00626EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/28 12:00 a.m.•11 views

CVE-2023-36481: Buffer Copy without Checking Size of Input

An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, and W920. Improper handling of PPP length parameter inconsistency can cause an infinite loop...

7.5CVSS7.2AI score0.00626EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2023/08/25 8:15 p.m.•38 views

CVE-2022-40090

A flaw was found in the libtiff library. This issue allows an attacker who can submit a specially crafted file to an application linked with libtiff to cause an infinite loop, resulting in a denial of service. Mitigation Applications that do not parse files from untrusted or malicious sources wil...

6.5CVSS6.8AI score0.00947EPSS
SaveExploits1References3
Zero Day Initiative
Zero Day Initiative
•added 2023/08/25 12:00 a.m.•47 views

Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Samba. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of Spotlight RPC arguments. Crafted arguments can force the server into ...

5.9CVSS6.7AI score0.61199EPSS
SaveExploits0References1
Prion
Prion
•added 2023/08/24 7:15 a.m.•46 views

Design/Logic Flaw

BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file...

5CVSS7.3AI score0.00463EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder