6455 matches found
CVE-2025-43960
CVE-2025-43960 - Adminer Adminer のクラッシュが他のサービス/テナント 例: コンテナや共有プロセス にも影響を与える場合、スコープ: 変更 が適用される可能性があります: ベクター: AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H スコア: 8.6 High 追加情報 潜在的な緩和策 Adminer および Monolog 内で信頼できないデータに対して unserialize を使用しない。 PHP でメモリ制限 memorylimit を適用し、過剰なリソース消費を防ぐ。 unserialize で allowedclasse...
CVE-2007-5962
CVE-2007-5962 1. はじめに 私のツールはPythonで書かれており、CVE-2007-5962の脆弱性を悪用して、一連のディレクトリ変更を行い、FTPデーモンをクラッシュさせます。 免責事項!!! 注意: 無許可でのハッキングツールの使用は違法であり、法的問題を引き起こす可能性があります。したがって、このツールは許可を得たシステム上でのテスト目的のみに使用することが重要です。 2. この脆弱性を悪用するための条件 ファイアウォールが無効または侵害されている 攻撃者はFTPアカウントのユーザー名とパスワードを知っている必要がある...
CVE-2017-7472
CVE-2017-7472 Linuxカーネル 4.10.13より前のKEYSサブシステムでは、一連のKEYREQKEYDEFLTHREADKEYRING keyctlsetreqkeykeyring呼び出しを介して、ローカルユーザーがサービス拒否（メモリ消費）を引き起こす可能性があります。 ショートカット 脆弱な カーネル 4.10.13...
GO-RPCBOMB
説明: CVE-2017-8779 rpcbind 0.2.4 以前、LIBTIRPC 1.0.1 以前および 1.0.2-rc から 1.0.2-rc3 まで、NTIRPC 1.4.3 以前は、XDR 文字列のメモリ割り当て時に最大 RPC データサイズを考慮しません。このため、リモートの攻撃者が細工した UDP パケットをポート 111 に送信することで、サービス拒否（その後の解放を伴わないメモリ消費）を引き起こす可能性があります。別名 rpcbomb と呼ばれます。 CVE リンク https://vulners.com/cve/CVE-2017-8779 インストール手順 前提条...
CVE-2026-95512
A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...
CVE-2026-95512
A flaw exists in the FreeType library, specifically within its CID font loader . A remote attacker could exploit this by tricking a user into opening content containing a specially crafted CID-keyed font . This font can trigger repeated allocations and decryptions of subroutine data across multip...
CLEANSTART-2026-OZ83684 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption
Security vulnerability affects the consul package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption...
Linux Distros Unpatched Vulnerability : CVE-2026-95512
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening conten...
CVE-2026-95512
A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of...
pypdf: Possible large memory usage when retrieving alphabetical page labels
ImpactAn attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires accessing the page labels of a document with large alphabetical labels. PatchesThis has been fixed in pypdf==6.19.0. WorkaroundsIf you cannot upgrade yet, consider applying the...
pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)
ImpactAn attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text extraction. PatchesThis has been fixed in pypdf==6.18.1. WorkaroundsIf you cannot upgrad...
pypdf: Possible large memory usage when retrieving Roman page labels
ImpactAn attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires accessing the page labels of a document with large Roman numerals. PatchesThis has been fixed in pypdf==6.17.0. WorkaroundsIf you cannot upgrade yet, consider applying the changes...
pypdf: Possible large memory usage when retrieving alphabetical page labels
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires accessing the page labels of a document with large alphabetical labels. Patches This has been fixed in pypdf==6.19.0. Workarounds If you cannot upgrade yet, consider applying the...
EUVD-2026-90283
pypdf: Possible large memory usage when retrieving alphabetical page labels...
pypdf: Possible large memory usage when parsing font data
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the /Widths entry of a TrueType or Type1 fonts with unusually large values, for example during text extraction. Patches This has been fixed in pypdf==6.18.1. Workarounds I...
EUVD-2026-90368
pypdf: Possible large memory usage when parsing font data...
EUVD-2026-90367
pypdf: Possible large memory usage for large /ToUnicode streams Follow-up 2...
GHSA-FP3H-C4FM-7VVF pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text extraction. Patches This has been fixed in pypdf==6.18.1. Workarounds If you cannot...
pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text extraction. Patches This has been fixed in pypdf==6.18.1. Workarounds If you cannot...