Lucene search
+L

1170 matches found

Positive Technologies
Positive Technologies
added 2018/01/18 12:0 a.m.8 views

PT-2018-4879 · Jquery · Jquery

Name of the Vulnerable Software and Affected Versions: jquery versions 3.0.0-rc.1 Description: The issue arises due to the removal of logic that lowercased attribute names, leading to an infinite recursion when attribute getters use mixed-cased names for boolean attributes. This results in...

7.5CVSS6.5AI score0.02886EPSS
SaveExploits1References12
Tenable Nessus
Tenable Nessus
added 2017/12/01 12:0 a.m.39 views

Debian DLA-1194-1 : libxml2 security update

CVE-2017-16931 parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name. CVE-2017-16932 parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in paramet...

9.8CVSS7.2AI score0.05928EPSS
SaveExploits0References4
Debian
Debian
added 2017/11/30 2:5 p.m.103 views

[SECURITY] [DLA 1194-1] libxml2 security update

Package : libxml2 Version : 2.8.0+dfsg1-7+wheezy11 CVE ID : CVE-2017-16931 CVE-2017-16932 CVE-2017-16931 parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a % character in a DTD name...

9.8CVSS7.8AI score0.05928EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2017/11/24 3:50 p.m.43 views

CVE-2017-16932

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities...

7.5CVSS3.6AI score0.05928EPSS
SaveExploits0References1
OSV
OSV
added 2017/11/23 9:29 p.m.7 views

DEBIAN-CVE-2017-16932

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities...

7.5CVSS9.5AI score0.05928EPSS
SaveExploits0References1
OSV
OSV
added 2017/11/23 9:29 p.m.4 views

ALPINE-CVE-2017-16932

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities...

7.5CVSS7AI score0.05928EPSS
SaveExploits0References1
OSV
OSV
added 2017/11/23 9:29 p.m.28 views

CVE-2017-16932

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities...

7.5CVSS8.8AI score
SaveExploits0References12
Vulnrichment
Vulnrichment
added 2017/11/23 9:0 p.m.1 views

CVE-2017-16932

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities...

6.5AI score0.05928EPSS
SaveExploits0References10
Debian CVE
Debian CVE
added 2017/11/23 9:0 p.m.42 views

CVE-2017-16932

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities...

7.5CVSS7.2AI score0.05928EPSS
SaveExploits0
Cvelist
Cvelist
added 2017/11/23 9:0 p.m.31 views

CVE-2017-16932

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities...

6.8AI score0.05928EPSS
SaveExploits0References10
AlpineLinux
AlpineLinux
added 2017/11/23 9:0 p.m.57 views

CVE-2017-16932

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities...

7.5CVSS7.1AI score0.05928EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2017/11/23 12:0 a.m.43 views

CVE-2017-16932

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities...

7.5CVSS6.8AI score0.05928EPSS
SaveExploits0References5
OSV
OSV
added 2017/11/23 12:0 a.m.8 views

UBUNTU-CVE-2017-16932

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities...

7.5CVSS6.8AI score0.05928EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2017/11/02 8:8 p.m.7 views

thrift: Infinite recursion via vectors involving the skip function

A vulnerability was discovered in Apache Thrift client libraries that allows remote, authenticated attackers to cause an infinite recursion via vectors involving the skip function; resulting in a denial of service DoS condition...

6.5CVSS6.7AI score0.05335EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2017/10/05 1:29 a.m.34 views

CVE-2017-15024

findabstractinstancename in dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service infinite recursion and application crash via a crafted ELF file...

5.5CVSS6.8AI score0.01595EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2017/10/04 7:0 a.m.60 views

CVE-2017-15024

findabstractinstancename in dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service infinite recursion and application crash via a crafted ELF file...

5.5CVSS6.9AI score0.01595EPSS
SaveExploits0
OSV
OSV
added 2017/08/29 10:29 p.m.9 views

DEBIAN-CVE-2017-13756

In The Sleuth Kit TSK 4.4.2, opening a crafted disk image triggers infinite recursion in dosloadexttable in tsk/vs/dos.c in libtskvs.a, as demonstrated by mmls...

5.5CVSS6.5AI score0.00703EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2017/08/29 10:29 p.m.44 views

CVE-2017-13756

In The Sleuth Kit TSK 4.4.2, opening a crafted disk image triggers infinite recursion in dosloadexttable in tsk/vs/dos.c in libtskvs.a, as demonstrated by mmls...

5.5CVSS6.8AI score0.00703EPSS
SaveExploits0References2
OSV
OSV
added 2017/08/29 10:29 p.m.30 views

CVE-2017-13756

In The Sleuth Kit TSK 4.4.2, opening a crafted disk image triggers infinite recursion in dosloadexttable in tsk/vs/dos.c in libtskvs.a, as demonstrated by mmls...

5.5CVSS6.6AI score
SaveExploits0References2
Prion
Prion
added 2017/08/29 10:29 p.m.28 views

Code injection

In The Sleuth Kit TSK 4.4.2, opening a crafted disk image triggers infinite recursion in dosloadexttable in tsk/vs/dos.c in libtskvs.a, as demonstrated by mmls...

4.3CVSS5.6AI score0.00703EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder