Lucene search
+L

5714 matches found

OSV
OSV
added 2017/10/24 6:33 p.m.23 views

GHSA-9H6G-GP95-X3Q5 actionpack is vulnerable to denial of service because of a wildcard controller route

actionpack/lib/actiondispatch/routing/routeset.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service superfluous caching and memory consumption by leveraging an application's use of a wildcard controller route...

7.5CVSS7.2AI score0.06715EPSS
SaveExploits0References13
OSV
OSV
added 2017/10/24 6:33 p.m.45 views

GHSA-7CGP-C3G7-QVRW actionpack Improper Input Validation vulnerability

actionpack/lib/actionview/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during use of the :text option to the render method, which allows remote attackers to cause a denial of service memory consumption by including these strings in heade...

5CVSS6.5AI score0.06193EPSS
SaveExploits0References10
Github Security Blog
Github Security Blog
added 2017/10/24 6:33 p.m.34 views

actionpack is vulnerable to denial of service via a crafted HTTP Accept header

actionpack/lib/actiondispatch/http/mimetype.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service...

7.5CVSS4.7AI score0.09731EPSS
SaveExploits0References18Affected Software1
Prion
Prion
added 2017/10/24 5:29 p.m.14 views

Denial of service

Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU resources memory consumption via unspecified vectors, possibly triggering an infinite loop...

5CVSS5.4AI score0.04534EPSS
SaveExploits5References1Affected Software1
NVD
NVD
added 2017/10/24 5:29 p.m.15 views

CVE-2017-15223

Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU resources memory consumption via unspecified vectors, possibly triggering an infinite loop...

5.3CVSS5.4AI score0.04534EPSS
SaveExploits5References1
CVE
CVE
added 2017/10/24 5:00 p.m.62 views

CVE-2017-15223

The CVE-2017-15223 entry applies to ArGoSoft Mini Mail Server 1.0.0.2 and earlier, describing a remote denial-of-service that wastes CPU/memory resources via unspecified vectors, potentially triggering an infinite loop. Connected sources corroborate a DoS vulnerability in this software and note p...

5.3CVSS5.3AI score0.04534EPSS
SaveExploits5References1Affected Software1
Cvelist
Cvelist
added 2017/10/24 5:00 p.m.19 views

CVE-2017-15223

Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU resources memory consumption via unspecified vectors, possibly triggering an infinite loop...

5.3AI score0.04534EPSS
SaveExploits5References1
zdt
zdt
added 2017/10/23 12:00 a.m.30 views

ArGoSoft Mini Mail Server 1.0.0.2 - Denial of Service Exploit

Exploit for windows platform in category dos / poc !/usr/bin/env python coding: utf-8 Description: The vulnerability was discovered during a vulnerability research lecture. Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU...

5CVSS5.4AI score0.04534EPSS
SaveExploits5
exploitpack
exploitpack
added 2017/10/21 12:00 a.m.35 views

ArGoSoft Mini Mail Server 1.0.0.2 - Denial of Service

ArGoSoft Mini Mail Server 1.0.0.2 - Denial of Service !/usr/bin/env python coding: utf-8 Description: The vulnerability was discovered during a vulnerability research lecture. Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU...

5CVSS5.4AI score0.04534EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2017/10/21 12:00 a.m.35 views

ArGoSoft Mini Mail Server 1.0.0.2 - Denial of Service

!/usr/bin/env python coding: utf-8 Description: The vulnerability was discovered during a vulnerability research lecture. Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU resources memory consumption via unspecified vectors...

5.3CVSS5.6AI score0.04534EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
added 2017/10/20 12:00 a.m.34 views

Juniper Junos DoS Telnet Vulnerability (JSA10817)

According to its self-reported version number, the remote Junos device is affected by two vulnerabilities in the telnetd service that may allow a remote unauthenticated attacker to cause a denial of service through memory and/or CPU consumption. TRUSTED...

7.5CVSS6.1AI score0.01799EPSS
SaveExploits0References3
OSV
OSV
added 2017/10/14 10:29 p.m.40 views

CVE-2017-15298

Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service memory consumption via a crafted repository, aka a Git bomb. This can also have an impact of disk consumption; however, an affected process typically would not survive its attempt to...

5.5CVSS7AI score
SaveExploits0References4
Prion
Prion
added 2017/10/14 10:29 p.m.30 views

Code injection

Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service memory consumption via a crafted repository, aka a Git bomb. This can also have an impact of disk consumption; however, an affected process typically would not survive its attempt to...

4.3CVSS5.4AI score0.01641EPSS
SaveExploits1References4Affected Software2
Debian CVE
Debian CVE
added 2017/10/14 7:00 p.m.35 views

CVE-2017-15298

Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service memory consumption via a crafted repository, aka a Git bomb. This can also have an impact of disk consumption; however, an affected process typically would not survive its attempt to...

5.5CVSS5.6AI score0.01641EPSS
SaveExploits1
Cvelist
Cvelist
added 2017/10/14 7:00 p.m.28 views

CVE-2017-15298

Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service memory consumption via a crafted repository, aka a Git bomb. This can also have an impact of disk consumption; however, an affected process typically would not survive its attempt to...

5.5AI score0.01641EPSS
SaveExploits1References4
CVE
CVE
added 2017/10/14 7:00 p.m.216 views

CVE-2017-15298

CVE-2017-15298 is linked to Git up to version 2.14.2, where a vulnerability in how layers of tree objects are handled can allow a remote attacker to cause a denial of service via a crafted repository, with potential disk impact. The issue arises from memory data structure construction that may ex...

5.5CVSS5.3AI score0.01641EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
added 2017/10/14 12:00 a.m.35 views

CVE-2017-15298

Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service memory consumption via a crafted repository, aka a Git bomb. This can also have an impact of disk consumption; however, an affected process typically would not survive its attempt to...

5.5CVSS6.5AI score0.01641EPSS
SaveExploits1References5
OSV
OSV
added 2017/10/14 12:00 a.m.6 views

UBUNTU-CVE-2017-15298

Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service memory consumption via a crafted repository, aka a Git bomb. This can also have an impact of disk consumption; however, an affected process typically would not survive its attempt to...

5.5CVSS5.9AI score0.01641EPSS
SaveExploits1References6
Prion
Prion
added 2017/10/13 5:29 p.m.22 views

Design/Logic Flaw

A vulnerability in telnetd service on Junos OS allows a remote attacker to cause a limited memory and/or CPU consumption denial of service attack. This issue was found during internal product security testing. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D45; 12.3X48...

5CVSS7.4AI score0.01714EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2017/10/13 5:29 p.m.30 views

CVE-2017-10614

A vulnerability in telnetd service on Junos OS allows a remote attacker to cause a limited memory and/or CPU consumption denial of service attack. This issue was found during internal product security testing. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D45; 12.3X48...

7.5CVSS6.2AI score0.01714EPSS
SaveExploits0References1
Rows per page
Query Builder