Lucene search
+L

1417 matches found

Mend
Mend
•added 2018/01/25 3:00 a.m.•7 views

CVE-2018-6196

w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feedtableblocktag function in table.c does not prevent a negative indent value...

8.7CVSS0.02937EPSS
SaveExploits1References9
Debian CVE
Debian CVE
•added 2018/01/25 3:00 a.m.•74 views

CVE-2018-6196

w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feedtableblocktag function in table.c does not prevent a negative indent value...

7.5CVSS7.6AI score0.02937EPSS
SaveExploits1
CNVD
CNVD
•added 2018/01/25 12:00 a.m.•30 views

w3m infinite recursion vulnerability

w3m is an open source text-based Web browser . A security vulnerability exists in HTMLlineproc0 in w3m 0.5.3 and earlier versions, which stems from the program's failure to limit negative indentation values. An attacker can exploit this vulnerability to cause a denial of service infinite recursio...

7.5CVSS6.6AI score0.02937EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/25 12:00 a.m.•9 views

CVE-2018-6196: Loop with Unreachable Exit Condition

w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feedtableblocktag function in table.c does not prevent a negative indent value...

7.5CVSS7AI score0.02937EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2018/01/24 12:00 a.m.•12 views

UBUNTU-CVE-2018-6196

w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feedtableblocktag function in table.c does not prevent a negative indent value...

7.5CVSS6.9AI score0.02937EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2018/01/24 12:00 a.m.•41 views

CVE-2018-6196

w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feedtableblocktag function in table.c does not prevent a negative indent value...

7.5CVSS6.9AI score0.02937EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2018/01/24 12:00 a.m.•9 views

PT-2018-17401

Name of the Vulnerable Software and Affected Versions w3m versions prior to 0.5.4 Description The issue is related to an infinite recursion flaw in the HTMLlineproc0 function due to the feed table block tag function in table.c not preventing a negative indent value. Recommendations For versions...

7.5CVSS0.02937EPSS
SaveExploits1References34
CNVD
CNVD
•added 2018/01/23 12:00 a.m.•46 views

jQuery Denial of Service Vulnerability

jQuery is an American programmer John Resig developed a set of open source , cross-browser JavaScript library . The library simplifies the operation between HTML and JavaScript , and has a modular , plug-in extensions and other features . A denial of service vulnerability exists in versions of...

7.5CVSS6.6AI score0.03232EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2018/01/18 11:29 p.m.•31 views

CVE-2016-10707

jQuery 3.0.0-rc.1 is vulnerable to Denial of Service DoS due to removing a logic that lowercased attribute names. Any attribute getter using a mixed-cased name for boolean attributes goes into an infinite recursion, exceeding the stack call limit...

7.5CVSS6.8AI score0.03232EPSS
SaveExploits1References3
Mend
Mend
•added 2018/01/18 11:00 p.m.•5 views

CVE-2016-10707

jQuery 3.0.0-rc.1 is vulnerable to Denial of Service DoS due to removing a logic that lowercased attribute names. Any attribute getter using a mixed-cased name for boolean attributes goes into an infinite recursion, exceeding the stack call limit...

8.7CVSS0.03232EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2018/01/18 12:00 a.m.•12 views

PT-2018-4879 · Jquery · Jquery

Name of the Vulnerable Software and Affected Versions: jquery versions 3.0.0-rc.1 Description: The issue arises due to the removal of logic that lowercased attribute names, leading to an infinite recursion when attribute getters use mixed-cased names for boolean attributes. This results in...

7.5CVSS6.5AI score0.03232EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/18 12:00 a.m.•4 views

CVE-2016-10707: Uncontrolled Recursion

jQuery 3.0.0-rc.1 is vulnerable to Denial of Service DoS due to removing a logic that lowercased attribute names. Any attribute getter using a mixed-cased name for boolean attributes goes into an infinite recursion, exceeding the stack call limit...

7.5CVSS7.2AI score0.03232EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2017/12/01 12:00 a.m.•58 views

Debian DLA-1194-1 : libxml2 security update

CVE-2017-16931 parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name. CVE-2017-16932 parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in paramet...

9.8CVSS7.2AI score0.06452EPSS
SaveExploits0References4
Debian
Debian
•added 2017/11/30 2:05 p.m.•139 views

[SECURITY] [DLA 1194-1] libxml2 security update

Package : libxml2 Version : 2.8.0+dfsg1-7+wheezy11 CVE ID : CVE-2017-16931 CVE-2017-16932 CVE-2017-16931 parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a % character in a DTD name...

9.8CVSS7.8AI score0.06452EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2017/11/24 3:50 p.m.•46 views

CVE-2017-16932

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities...

7.5CVSS3.6AI score0.06452EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2017/11/23 9:29 p.m.•50 views

CVE-2017-16932

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities...

7.5CVSS8.8AI score
SaveExploits0References13
osv_debian
osv_debian
•added 2017/11/23 9:29 p.m.•17 views

DEBIAN-CVE-2017-16932

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities...

7.5CVSS9.5AI score0.06452EPSS
SaveExploits0References1
osv_alpine
osv_alpine
•added 2017/11/23 9:29 p.m.•12 views

ALPINE-CVE-2017-16932

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities...

7.5CVSS7AI score0.06452EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2017/11/23 9:00 p.m.•69 views

CVE-2017-16932

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities...

7.5CVSS7.2AI score0.06452EPSS
SaveExploits0
Mend
Mend
•added 2017/11/23 9:00 p.m.•6 views

CVE-2017-16932

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities...

8.7CVSS0.06452EPSS
SaveExploits0References19
Rows per page
Query Builder