Lucene search
K

1145 matches found

Microsoft CVE
Microsoft CVE
added 2024/06/30 2:0 p.m.6 views

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.

...

5.5CVSS7.5AI score0.00566EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/06/28 12:0 a.m.5 views

The vulnerability of the pdf_mark_list_push component in the MuPDF PDF viewing software allows a hacker to trigger a service failure.

The vulnerability of the pdfmarklistpush component in the MuPDF PDF viewing software is related to an infinite recursion. Exploiting this vulnerability could allow a attacker to cause a service failure...

5.5CVSS5.9AI score0.00233EPSS
Exploits0References3Affected Software2
Redos
Redos
added 2024/06/26 12:0 a.m.19 views

ROS-20240625-03

A vulnerability in the GlutAddSubMenu function of the MuPDF PDF viewer is related to a memory leak via the MenuEntry variable. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service A vulnerability in the GlutAddMenuEntry function of the MuPDF PDF...

7.5CVSS6.6AI score0.01147EPSS
Exploits2
Veracode
Veracode
added 2024/06/11 8:54 a.m.22 views

Denial Of Service (DoS)

langchain is vulnerable to a Denial-of-Service DoS. The vulnerability is due to infinite recursion in the parsesitemap method, which results in an infinite loop that exceeds the maximum recursion depth in Python...

4.7CVSS6.7AI score0.00301EPSS
Exploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2024/06/06 9:30 p.m.58 views

Denial of service in langchain-community

Denial of service in SitemapLoader Document Loader in the langchain-community package, affecting versions below 0.2.5. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the current sitemap...

4.7CVSS4.3AI score0.00301EPSS
Exploits1References7Affected Software2
OSV
OSV
added 2024/06/06 9:30 p.m.2 views

GHSA-3HJH-JH2H-VRG6 Denial of service in langchain-community

Denial of service in SitemapLoader Document Loader in the langchain-community package, affecting versions below 0.2.5. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the current sitemap...

4.2CVSS5.8AI score0.00301EPSS
Exploits1References7
NVD
NVD
added 2024/06/06 7:15 p.m.32 views

CVE-2024-2965

A Denial-of-Service DoS vulnerability exists in the SitemapLoader class of the langchain-ai/langchain repository, affecting all versions. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the...

4.7CVSS0.00301EPSS
Exploits1References2
OSV
OSV
added 2024/06/06 7:15 p.m.8 views

CVE-2024-2965

A Denial-of-Service DoS vulnerability exists in the SitemapLoader class of the langchain-ai/langchain repository, affecting all versions. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the...

4.7CVSS4.7AI score
Exploits0References2
OSV
OSV
added 2024/06/06 7:15 p.m.12 views

PYSEC-2024-118

A Denial-of-Service DoS vulnerability exists in the SitemapLoader class of the langchain-ai/langchain repository, affecting all versions. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the...

4.7CVSS5.8AI score0.00301EPSS
Exploits1References4
PyPA
PyPA
added 2024/06/06 7:15 p.m.6 views

PYSEC-2024-118

A Denial-of-Service DoS vulnerability exists in the SitemapLoader class of the langchain-ai/langchain repository, affecting all versions. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the...

4.7CVSS6.9AI score0.00301EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2024/06/06 6:52 p.m.77 views

CVE-2024-2965

CVE-2024-2965 affects the LangChain SitemapLoader in langchain-ai/langchain. The parse_sitemap function lacks a guard against self-referential sitemap recursion, enabling an infinite recursion loop that can exhaust server resources and crash the Python process. Multiple trusted sources (NVD, Red ...

4.7CVSS4.3AI score0.00301EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2024/06/06 6:52 p.m.29 views

CVE-2024-2965 Denial-of-Service in LangChain SitemapLoader in langchain-ai/langchain

A Denial-of-Service DoS vulnerability exists in the SitemapLoader class of the langchain-ai/langchain repository, affecting all versions. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the...

4.2CVSS0.00301EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/06/06 12:0 a.m.4 views

PT-2024-22949 · Langchain Ai · Langchain

Name of the Vulnerable Software and Affected Versions: langchain-ai/langchain versions prior to 0.2.5 langchain-community versions prior to 0.2.5 Description: A Denial-of-Service DoS issue exists in the SitemapLoader class due to the parse sitemap method lacking a mechanism to prevent infinite...

4.7CVSS5AI score0.00301EPSS
Exploits1References14
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.44 views

RHEL 9 : log4j (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies CVE-2023-26049 -...

7.5CVSS7.5AI score0.0326EPSS
Exploits0References3
Oracle linux
Oracle linux
added 2024/05/23 12:0 a.m.388 views

libXpm security update

3.5.12-11 - Drop hardening patches from previous version to keep ABI compatibility 3.5.12-10 - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in PutSubImage - CVE-2023-43787 libX11: integer overflow in XCreateImage leading to a heap overflow - CVE-2023-43788 libXpm: out of bounds...

5.5CVSS6.9AI score0.00461EPSS
Exploits1
RedHat Linux
RedHat Linux
added 2024/05/22 9:42 a.m.35 views

Moderate: Red Hat Security Advisory: libX11 security update

An update for libX11 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

7.8CVSS6.8AI score0.00633EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2024/05/20 12:14 p.m.28 views

CVE-2024-35886

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix infinite recursion in fib6dumpdone. syzkaller reported infinite recursive calls of fib6dumpdone during netlink socket destruction. 1 From the log, syzkaller sent an AFUNSPEC RTMGETROUTE message, and then the response wa...

5.5CVSS6.6AI score0.00282EPSS
Exploits0References4
OSV
OSV
added 2024/05/19 9:15 a.m.1 views

DEBIAN-CVE-2024-35886

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix infinite recursion in fib6dumpdone. syzkaller reported infinite recursive calls of fib6dumpdone during netlink socket destruction. 1 From the log, syzkaller sent an AFUNSPEC RTMGETROUTE message, and then the response wa...

7.8CVSS5.7AI score0.00282EPSS
Exploits0References1
OSV
OSV
added 2024/05/19 9:15 a.m.0 views

UBUNTU-CVE-2024-35886

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix infinite recursion in fib6dumpdone. syzkaller reported infinite recursive calls of fib6dumpdone during netlink socket destruction. 1 From the log, syzkaller sent an AFUNSPEC RTMGETROUTE message, and then the response wa...

7.8CVSS6.2AI score0.00282EPSS
Exploits0References32
CNNVD
CNNVD
added 2024/05/19 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from the presence of infinite recursion...

7.8CVSS6.4AI score0.00282EPSS
Exploits0References10
Rows per page
Query Builder