Lucene search
+L

5761 matches found

Github Security Blog
Github Security Blog
added 2022/05/03 3:47 a.m.47 views

tkvideo has a memory issue in playing videos

Huge memory consumption even when playing small files. This issue has been patched in 2.0.0. Please upgrade to version 2.0.0 or above...

4.3CVSS2.8AI score0.00531EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2022/05/03 3:15 a.m.101 views

CVE-2022-20751

Cisco Firepower Threat Defense (FTD) Software uses Snort integration that is vulnerable to unlimited memory consumption via crafted IP packets, leading to DoS. Affected component: Snort detection engine integration in FTD; root cause: insufficient memory management for certain Snort events, enabl...

8.6CVSS8AI score0.01325EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/05/03 3:15 a.m.34 views

CVE-2022-20751 Cisco Firepower Threat Defense Software Snort Out of Memory Denial of Service Vulnerability

A vulnerability in the Snort detection engine integration for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause unlimited memory consumption, which could lead to a denial of service DoS condition on an affected device. This vulnerability is due t...

8.6CVSS8.7AI score0.01325EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/05/03 3:15 a.m.17 views

CVE-2022-20751 Cisco Firepower Threat Defense Software Snort Out of Memory Denial of Service Vulnerability

A vulnerability in the Snort detection engine integration for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause unlimited memory consumption, which could lead to a denial of service DoS condition on an affected device. This vulnerability is due t...

8.6CVSS7.1AI score0.01325EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2022/05/02 12:00 a.m.56 views

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-014)

The version of kernel installed on the remote host is prior to 5.4.58-27.104. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-014 advisory. A flaw was found in the AMD Cryptographic Co-processor driver in the Linux kernel. An attacker, able to send...

7.8CVSS6.7AI score0.05271EPSS
SaveExploits0References16
Github Security Blog
Github Security Blog
added 2022/05/01 6:36 p.m.24 views

Django vulnerable to Denial of Service via i18n middleware component

The internationalization i18n framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USEI18N option and the i18n component are enabled, allows remote attackers to cause a denial of service memory consumption via many HTTP requests with large...

2.6CVSS6.7AI score0.01814EPSS
SaveExploits0References16Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2022/05/01 12:00 a.m.20 views

Django vulnerable to Denial of Service via i18n middleware component

The internationalization i18n framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USEI18N option and the i18n component are enabled, allows remote attackers to cause a denial of service memory consumption via many HTTP requests with large...

2.6CVSS6.7AI score0.01814EPSS
SaveExploits0References14Affected Software1
OSV
OSV
added 2022/04/29 3:01 a.m.51 views

GHSA-92J7-34X9-F3JW Apache James Denial of Service

Spooler in Apache Foundation James before 2.2.0 allows local users to cause a denial of service memory consumption by triggering various error conditions in the retrieve function, which prevents a lock from being released and causes a memory leak...

4.9CVSS6.1AI score0.00561EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2022/04/29 3:01 a.m.32 views

Apache James Denial of Service

Spooler in Apache Foundation James before 2.2.0 allows local users to cause a denial of service memory consumption by triggering various error conditions in the retrieve function, which prevents a lock from being released and causes a memory leak...

4.9CVSS6.3AI score0.00561EPSS
SaveExploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/04/29 12:00 a.m.57 views

Amazon Linux AMI : golang (ALAS-2022-1583)

The version of golang installed on the remote host is prior to 1.16.15-1.37. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1583 advisory. 2024-01-03: CVE-2021-27919 was added to this advisory. An out of bounds read vulnerability was found in golang. When...

9.8CVSS7AI score0.10874EPSS
SaveExploits0References14
Github Security Blog
Github Security Blog
added 2022/04/26 9:14 p.m.31 views

OutOfMemory Exception by specifically crafted processing instruction in NekoHtml Parser

Impact NekoHtml Parser suffers from a denial of service vulnerability on versions 2.60.0 and below. A specifically crafted input regarding the parsing of processing instructions leads to heap memory consumption. Please update to version 2.61.0. For more information If you have any questions or...

7.5CVSS7.2AI score0.01231EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/04/26 9:14 p.m.29 views

GHSA-6JMM-MP6W-4RRG OutOfMemory Exception by specifically crafted processing instruction in NekoHtml Parser

Impact NekoHtml Parser suffers from a denial of service vulnerability on versions 2.60.0 and below. A specifically crafted input regarding the parsing of processing instructions leads to heap memory consumption. Please update to version 2.61.0. For more information If you have any questions or...

7.5CVSS7.3AI score0.01231EPSS
SaveExploits0References4
Prion
Prion
added 2022/04/25 11:15 a.m.23 views

Denial of service

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain F-Secure products while scanning larger packages/fuzzed files consume too much memory eventually can crash the scanning engine. The exploit can be triggered remotely by an attacke...

5CVSS7.5AI score0.00561EPSS
SaveExploits0References2
NVD
NVD
added 2022/04/25 3:15 a.m.31 views

CVE-2022-29546

HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability. Crafted input associated with the parsing of Processing Instruction PI data leads to heap memory consumption. This is similar to CVE-2022-28366 but affects a much later version of the product...

7.5CVSS0.01231EPSS
SaveExploits0References1
Prion
Prion
added 2022/04/25 3:15 a.m.32 views

Design/Logic Flaw

HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability. Crafted input associated with the parsing of Processing Instruction PI data leads to heap memory consumption. This is similar to CVE-2022-28366 but affects a much later version of the product...

5CVSS7.3AI score0.02125EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/25 2:54 a.m.46 views

CVE-2022-29546

HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability. Crafted input associated with the parsing of Processing Instruction PI data leads to heap memory consumption. This is similar to CVE-2022-28366 but affects a much later version of the product...

7.6AI score0.01231EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/25 2:54 a.m.44 views

CVE-2022-29546

HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability. Crafted input associated with the parsing of Processing Instruction PI data leads to heap memory consumption. This is similar to CVE-2022-28366 but affects a much later version of the product...

6.6AI score
SaveExploits0References3
CVE
CVE
added 2022/04/25 2:54 a.m.460 views

CVE-2022-29546

CVE-2022-29546 : HtmlUnit NekoHtml Parser before 2.61.0 has a denial-of-service vulnerability via crafted Processing Instructions that triggers heap memory consumption. The issue is triggered during PI data parsing and is described as similar to CVE-2022-28366 but affecting a much newer version. ...

7.5CVSS7.2AI score0.01231EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2022/04/25 12:00 a.m.20 views

Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2022-1570)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS6.1AI score0.49324EPSS
SaveExploits30References2
Github Security Blog
Github Security Blog
added 2022/04/23 12:03 a.m.116 views

Denial of service in HtmlUnit-Neko

Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction PI input that causes excessive heap memory consumption. In particular, this issue exists in HtmlUnit-Neko through 2.26, and is fixed in 2.27. This issue also exists in CyberNeko HTML through 1.9.22 also...

7.5CVSS6.3AI score0.02125EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder