Lucene search
+L

192 matches found

NVD
NVD
added 2021/03/17 1:15 p.m.30 views

CVE-2020-28873

Fluxbb 1.5.11 is affected by a denial of service DoS vulnerability by sending an extremely long password via the user login form. When a long password is sent, the password hashing process will result in CPU and memory exhaustion on the server...

7.8CVSS0.00851EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/03/17 12:31 p.m.34 views

CVE-2020-28873

Fluxbb 1.5.11 is affected by a denial of service DoS vulnerability by sending an extremely long password via the user login form. When a long password is sent, the password hashing process will result in CPU and memory exhaustion on the server...

7.6AI score0.00851EPSS
SaveExploits0References1
CVE
CVE
added 2021/03/17 12:31 p.m.59 views

CVE-2020-28873

CVE-2020-28873 affects FluxBB 1.5.11. A DoS vulnerability arises when an extremely long password is submitted to the user login form, causing CPU and memory exhaustion during password hashing. The available connected documents confirm the condition and impact but do not provide any patch versions...

7.8CVSS7.5AI score0.00851EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/03/17 12:00 a.m.8 views

Fluxbb 安全漏洞

FluxBB is an open source forum application. A denial of service vulnerability exists in Fluxbb 1.5.11. The vulnerability can be exploited to cause a denial of service by sending a very long password via the user login form to exhaust CPU and memory resources on the server...

7.8CVSS5.7AI score0.00851EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2020/11/17 12:00 a.m.21 views

Samba Buffer Overflow Vulnerability (CVE-1999-0182)

Samba is prone to a buffer overflow vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

10CVSS7.5AI score0.09694EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2020/09/29 9:12 p.m.9 views

ipa: No password length restriction leads to denial of service

A flaw was found in IPA. When sending a very long password = 1,000,000 characters to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability...

5.4CVSS6.3AI score0.01055EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2020/09/04 12:00 a.m.18 views

Huawei EulerOS: Security Advisory for ipa (EulerOS-SA-2020-1918)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.4CVSS5.4AI score0.01055EPSS
SaveExploits0References2
Hacker One
Hacker One
added 2020/08/02 1:45 p.m.18 views

Nextcloud: DoS attack against the client when entering a long password

Hi team, My report like this 840598 entering a long password the denial a service attack on the server please fix it .. Step .. 1. Create account on https://nextcloud.com/signup/ 2. enter password any password and login . 3. after you login go to your settings . 4. go to here...

7.2AI score
SaveExploits0
NVD
NVD
added 2020/07/30 1:15 p.m.28 views

CVE-2020-8202

Improper check of inputs in Nextcloud Preferred Providers app v1.6.0 allowed to perform a denial of service attack when using a very long password...

5.3CVSS5.2AI score0.01316EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2020/07/30 1:15 p.m.8 views

CVE-2020-8202

Improper check of inputs in Nextcloud Preferred Providers app v1.6.0 allowed to perform a denial of service attack when using a very long password...

5.3CVSS5.7AI score0.01316EPSS
SaveExploits1References4
Prion
Prion
added 2020/07/30 1:15 p.m.24 views

Input validation

Improper check of inputs in Nextcloud Preferred Providers app v1.6.0 allowed to perform a denial of service attack when using a very long password...

5CVSS5.2AI score0.01316EPSS
SaveExploits1References2Affected Software1
Nextcloud
Nextcloud
added 2020/06/16 12:00 a.m.36 views

Possible denial of service when entering a long password (NC-SA-2020-028)

Improper check of inputs in Preferred providers app 1.6.0 allowed to perform a denial of service attack when using a very long password...

5CVSS4.1AI score0.01316EPSS
SaveExploits1Affected Software1
Hacker One
Hacker One
added 2020/01/25 9:40 p.m.82 views

Localize: The password limit is not set, [DoS].

Summary: You can create a very long password until you get the last user to put and aries or DoS. Normally passwords have 8-10-24 digits Impact DoS...

7AI score
SaveExploits0
OSV
OSV
added 2019/10/25 3:15 p.m.4 views

CVE-2016-2356

Milesight IP security cameras through 2016-11-14 have a buffer overflow in a web application via a long username or password...

9.8CVSS6.1AI score0.03206EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2019/10/25 12:46 p.m.32 views

CVE-2016-2356

Milesight IP security cameras through 2016-11-14 have a buffer overflow in a web application via a long username or password...

9.8AI score0.03206EPSS
SaveExploits1References3
OSV
OSV
added 2019/03/21 4:00 p.m.7 views

CVE-2018-19524

An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal G/EPON+IPTV SDOTBGN1, DT721-cb SDOTBGN1, and DT741-cb SDOTBGN1 devices. A long password to the Webpasswd function allows remote attackers to cause a denial of service segmentation fault or achieve unauthenticated...

9.8CVSS6.3AI score0.37134EPSS
SaveExploits5References6
RedHat Linux
RedHat Linux
added 2018/11/13 8:36 a.m.11 views

curl: NTLM buffer overflow via integer overflow

The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service integer overflow and resultant buffer overflow, and application crash or possibly have unspecified other impact via vectors involving long user and password fields...

9.8CVSS7.7AI score0.07802EPSS
SaveExploits0References5
OSV
OSV
added 2018/09/20 3:29 p.m.9 views

CVE-2018-3864

An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy overflows the destination buffer, which has a size of 40 bytes. An attacker can send an arbitrarily long...

8.8CVSS6.1AI score0.01804EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2018/09/20 12:00 a.m.11 views

PT-2018-16258 · Samsung · Samsung Smartthings Hub

Name of the Vulnerable Software and Affected Versions: Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17 Description: A buffer overflow issue exists in the Samsung WifiScan handler of the video-core's HTTP server. The strcpy function overflows a destination buffer with a size of 40...

9.9CVSS9.4AI score0.01804EPSS
SaveExploits2References2
CNVD
CNVD
added 2018/09/18 12:00 a.m.6 views

D-Link DIR-816 A2 Buffer Overflow Vulnerability (CNVD-2018-19261)

D-Link DIR-816 A2 is a wireless router product from AUO D-Link. A stack buffer overflow vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which can be exploited by an attacker to overwrite the returned address by sending a long password to /goform/formLogin...

10CVSS9.9AI score0.01717EPSS
SaveExploits1References1
Rows per page
Query Builder