Lucene search
+L

1409 matches found

Debian CVE
Debian CVE
•added 2024/08/15 7:50 p.m.•67 views

CVE-2024-7866

In Xpdf 4.05 and earlier, a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow...

5.5CVSS5.3AI score0.00217EPSS
SaveExploits0
Mend
Mend
•added 2024/08/15 7:50 p.m.•5 views

CVE-2024-7866

In Xpdf 4.05 and earlier, a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow...

5.5CVSS0.00217EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2024/08/15 7:50 p.m.•110 views

CVE-2024-7866

In Xpdf 4.05 and earlier, a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow...

5.5CVSS7AI score0.00217EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/15 12:00 a.m.•18 views

PT-2024-38643

Name of the Vulnerable Software and Affected Versions Xpdf versions 4.05 and earlier Description The issue is caused by a PDF object loop in a pattern resource, leading to infinite recursion and a stack overflow. This could allow attackers to crash the system or expose data. Recommendations For...

8.2CVSS4.5AI score0.00391EPSS
SaveExploits2References27
Tenable Nessus
Tenable Nessus
•added 2024/08/13 12:00 a.m.•33 views

Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS : Libcroco vulnerabilities (USN-6958-1)

The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6958-1 advisory. It was discovered that Libcroco was incorrectly accessing data structures when reading bytes from memory, which could cause a hea...

7.1CVSS6.9AI score0.1294EPSS
SaveExploits7References5
osv_clsa
osv_clsa
•added 2024/07/22 2:39 p.m.•36 views

CLSA-2024-1721659158 Fix of 66 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-26810 - vfio/pci: Lock external INTx masking ops CVE-url: https://ubuntu.com/security/CVE-2024-38587 - speakup: Fix sizeof vs ARRAYSIZE bug CVE-url: https://ubuntu.com/security/CVE-2024-39493 - crypto: qat - Fix ADFDEVRESETSYNC memory leak CVE-url:...

9.8CVSS6.7AI score0.00974EPSS
SaveExploits1References1
Microsoft CVE
Microsoft CVE
•added 2024/06/30 2:00 p.m.•21 views

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.

...

5.5CVSS7.5AI score0.00566EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/06/28 12:00 a.m.•20 views

MuPDF PDF Viewing DoS

The vulnerability of the pdfmarklistpush component in the MuPDF PDF viewing software is related to an infinite recursion. Exploiting this vulnerability could allow a attacker to cause a service failure...

5.5CVSS5.9AI score0.00233EPSS
SaveExploits0References3Affected Software2
Redos
Redos
•added 2024/06/26 12:00 a.m.•27 views

ROS-20240625-03

A vulnerability in the GlutAddSubMenu function of the MuPDF PDF viewer is related to a memory leak via the MenuEntry variable. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service A vulnerability in the GlutAddMenuEntry function of the MuPDF PDF...

7.5CVSS6.6AI score0.01147EPSS
SaveExploits2
Veracode
Veracode
•added 2024/06/11 8:54 a.m.•61 views

Denial Of Service (DoS)

langchain is vulnerable to a Denial-of-Service DoS. The vulnerability is due to infinite recursion in the parsesitemap method, which results in an infinite loop that exceeds the maximum recursion depth in Python...

4.7CVSS6.7AI score0.00304EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/06 9:30 p.m.•109 views

Denial of service in langchain-community

Denial of service in SitemapLoader Document Loader in the langchain-community package, affecting versions below 0.2.5. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the current sitemap...

4.7CVSS4.3AI score0.00304EPSS
SaveExploits1References7Affected Software2
osv_ghsa
osv_ghsa
•added 2024/06/06 9:30 p.m.•88 views

GHSA-3HJH-JH2H-VRG6 Denial of service in langchain-community

Denial of service in SitemapLoader Document Loader in the langchain-community package, affecting versions below 0.2.5. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the current sitemap...

4.2CVSS5.8AI score0.00304EPSS
SaveExploits1References7
NVD
NVD
•added 2024/06/06 7:15 p.m.•58 views

CVE-2024-2965

A Denial-of-Service DoS vulnerability exists in the SitemapLoader class of the langchain-ai/langchain repository, affecting all versions. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the...

4.7CVSS0.00304EPSS
SaveExploits1References2
osv_pysec
osv_pysec
•added 2024/06/06 7:15 p.m.•47 views

PYSEC-2024-118

A Denial-of-Service DoS vulnerability exists in the SitemapLoader class of the langchain-ai/langchain repository, affecting all versions. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the...

4.7CVSS5.8AI score0.00304EPSS
SaveExploits1References4
PyPA
PyPA
•added 2024/06/06 7:15 p.m.•19 views

PYSEC-2024-118

A Denial-of-Service DoS vulnerability exists in the SitemapLoader class of the langchain-ai/langchain repository, affecting all versions. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the...

4.7CVSS6.9AI score0.00304EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2024/06/06 6:52 p.m.•147 views

CVE-2024-2965

CVE-2024-2965 affects the LangChain SitemapLoader in langchain-ai/langchain. The parse_sitemap function lacks a guard against self-referential sitemap recursion, enabling an infinite recursion loop that can exhaust server resources and crash the Python process. Multiple trusted sources (NVD, Red ...

4.7CVSS5.6AI score0.00304EPSS
SaveExploits1References2Affected Software1
osv_cve
osv_cve
•added 2024/06/06 6:52 p.m.•22 views

CVE-2024-2965 Denial-of-Service in LangChain SitemapLoader in langchain-ai/langchain

A Denial-of-Service DoS vulnerability exists in the SitemapLoader class of the langchain-ai/langchain repository, affecting all versions. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the...

4.2CVSS5.9AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2024/06/06 6:52 p.m.•53 views

CVE-2024-2965 Denial-of-Service in LangChain SitemapLoader in langchain-ai/langchain

A Denial-of-Service DoS vulnerability exists in the SitemapLoader class of the langchain-ai/langchain repository, affecting all versions. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the...

4.2CVSS0.00304EPSS
SaveExploits1References2
Mend
Mend
•added 2024/06/06 6:52 p.m.•18 views

CVE-2024-2965

A Denial-of-Service DoS vulnerability exists in the SitemapLoader class of the langchain-ai/langchain repository, affecting all versions. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the...

4.7CVSS0.00304EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2024/06/06 12:00 a.m.•22 views

PT-2024-22949

Name of the Vulnerable Software and Affected Versions langchain-ai/langchain versions prior to 0.2.5 langchain-community versions prior to 0.2.5 Description A Denial-of-Service DoS issue exists in the SitemapLoader class due to the parse sitemap method lacking a mechanism to prevent infinite...

4.7CVSS6.1AI score0.00304EPSS
SaveExploits1References18
Rows per page
Query Builder