Lucene search
+L

420 matches found

Github Security Blog
Github Security Blog
added 2025/10/28 9:30 p.m.19 views

Consul key/value endpoint is vulnerable to denial of service

Consul and Consul Enterprise’s “Consul” key/value endpoint is vulnerable to denial of service DoS due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...

6.5CVSS6.7AI score0.00396EPSS
SaveExploits0References7Affected Software1
Snyk
Snyk
added 2025/10/28 9:30 p.m.5 views

Allocation of Resources Without Limits or Throttling

Overview github.com/hashicorp/consul/agent is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling...

7.1CVSS6.6AI score0.00396EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/28 9:15 p.m.1 views

DEBIAN-CVE-2025-11374

Consul and Consul Enterprise’s “Consul” key/value endpoint is vulnerable to denial of service DoS due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...

6.5CVSS5.2AI score0.00396EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/28 9:15 p.m.6 views

CVE-2025-11374

Consul and Consul Enterprise’s “Consul” key/value endpoint is vulnerable to denial of service DoS due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...

6.5CVSS0.00396EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/28 9:15 p.m.5 views

UBUNTU-CVE-2025-11374

Consul and Consul Enterprise’s “Consul” key/value endpoint is vulnerable to denial of service DoS due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...

6.5CVSS5.8AI score0.00396EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/10/28 8:19 p.m.19 views

CVE-2025-11374 Consul's KV endpoint is vulnerable to denial of service

Consul and Consul Enterprise’s “Consul” key/value endpoint is vulnerable to denial of service DoS due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...

6.5CVSS0.00396EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/28 8:19 p.m.4 views

CVE-2025-11374 Consul's KV endpoint is vulnerable to denial of service

Consul and Consul Enterprise’s “Consul” key/value endpoint is vulnerable to denial of service DoS due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...

6.5CVSS6.6AI score
SaveExploits0References4
CVE
CVE
added 2025/10/28 8:19 p.m.32 views

CVE-2025-11374

CVE-2025-11374 affects HashiCorp Consul and Consul Enterprise, specifically the key/value endpoint, due to incorrect Content Length header validation leading to DoS. IBM’s security bulletin documents affected versions: Consul Community Edition 0.0.1–1.21.5 and Consul Enterprise 1.21.0–1.21.51.20....

6.5CVSS6.3AI score0.00396EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2025/10/28 8:19 p.m.9 views

CVE-2025-11374

Consul and Consul Enterprise’s “Consul” key/value endpoint is vulnerable to denial of service DoS due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...

6.5CVSS5.2AI score0.00396EPSS
SaveExploits0
Fedora
Fedora
added 2025/10/25 9:17 p.m.11 views

[SECURITY] Fedora 43 Update: valkey-8.1.4-2.fc43

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

9.9CVSS7.1AI score0.86767EPSS
SaveExploits15
EUVD
EUVD
added 2025/10/15 1:23 a.m.9 views

EUVD-2017-18920

Valve's Source SDK source-sdk-2013's ragdoll model parsing logic contains a stack-based buffer overflow vulnerability.The tokenizer function nexttoken copies characters from an input string into a fixed-size stack buffer without performing bounds checks. When ParseKeyValue processes a collisionpa...

9.2CVSS8AI score0.00646EPSS
SaveExploits0References4
Fedora
Fedora
added 2025/10/13 2:4 a.m.12 views

[SECURITY] Fedora 41 Update: valkey-8.0.6-1.fc41

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

9.9CVSS7.1AI score0.86767EPSS
SaveExploits15
Fedora
Fedora
added 2025/10/13 12:42 a.m.11 views

[SECURITY] Fedora 42 Update: valkey-8.0.6-1.fc42

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

9.9CVSS7.1AI score0.86767EPSS
SaveExploits15
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2018-1004

Malware in sbrugna...

9.8CVSS8.6AI score0.02174EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2019-11493

Malware in sbrugna...

5.3CVSS5.3AI score0.01216EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2014-3170

Malware in sbrugna...

7.5CVSS9.3AI score0.0197EPSS
SaveExploits0References16
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-6320

Malware in sbrugna...

7.5CVSS7.7AI score0.01271EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2023-1807

Malicious code in bioql PyPI...

5.4CVSS5.1AI score0.00417EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2022-47485

Malicious code in bioql PyPI...

9.8CVSS9AI score0.0115EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2023-1459

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00744EPSS
SaveExploits0References6
Rows per page
Query Builder