Lucene search
+L

3473 matches found

Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•13 views

PT-2025-54583

Name of the Vulnerable Software and Affected Versions qemu affected versions not specified Description The QEMU software may experience an out-of-memory OOM condition when handling a large request originating from a guest virtual machine. This can potentially lead to denial of service...

5.5CVSS5.4AI score0.00142EPSS
SaveExploits0References69
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•20 views

PT-2025-30879

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in its netlink implementation related to memory allocation tracking. Specifically, the sk-sk rmem alloc variable can experience wraparounds, potentially...

8CVSS7AI score0.00175EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•10 views

PT-2025-33708

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel's net/sched subsystem related to the handling of netem network emulator queuing disciplines qdiscs. The duplication prevention logic within netem...

5.5CVSS6.1AI score0.00124EPSS
SaveExploits0
NVD
NVD
•added 2024/12/28 7:15 a.m.•48 views

CVE-2021-22484

Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data. Successful exploitation of this vulnerability may cause a server out of memory OOM...

7.5CVSS0.00298EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/28 6:50 a.m.•21 views

CVE-2021-22484

Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data. Successful exploitation of this vulnerability may cause a server out of memory OOM...

7.5AI score0.00298EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/28 6:50 a.m.•80 views

CVE-2021-22484

CVE-2021-22484 affects Huawei wearables/HarmonyOS where the vulnerability is due to not verifying the actual data size when reading data. This can lead to a server out-of-memory (OOM) condition if exploited. Public references describe the issue generically; no concrete exploitation details are pr...

7.5CVSS7.1AI score0.00298EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/12/28 6:50 a.m.•49 views

CVE-2021-22484

Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data. Successful exploitation of this vulnerability may cause a server out of memory OOM...

0.00298EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/28 12:00 a.m.•3 views

CVE-2021-22484: Improper Input Validation

Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data. Successful exploitation of this vulnerability may cause a server out of memory OOM...

7.5CVSS6AI score0.00298EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/27 3:15 p.m.•13 views

AZL-54845 CVE-2024-56660 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, prevent potential error pointer dereference The drdomainaddvportcap function generally returns NULL on error but sometimes we want it to return ERRPTR-EBUSY so the caller can retry. The problem here is that "ret" ca...

5.5CVSS6.7AI score0.0022EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2024/12/27 12:22 a.m.•28 views

Security Bulletin: IBM SPSS Analytic Server is affected by netty vulnerability (CVE-2024-29025)

Summary IBM SPSS Analytic Server uses netty-codec-http-4.1.100.Final.jar which is vulnerable to CVE-2024-29025. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-29025 DESCRIPTION: Netty is an asynchronous event-driven network...

5.3CVSS7AI score0.0138EPSS
SaveExploits1Affected Software1
OSV
OSV
•added 2024/12/19 3:22 p.m.•17 views

GHSA-5PF6-CQ2V-23WW WhoDB Allows Unbounded Memory Consumption in Authentication Middleware Can Lead to Denial of Service

Summary A Denial of Service DoS vulnerability in the authentication middleware allows any client to cause memory exhaustion by sending large request bodies. The server reads the entire request body into memory without size limits, creating multiple copies during processing, which can lead to Out ...

7.5CVSS7.2AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2024/12/19 3:22 p.m.•53 views

WhoDB Allows Unbounded Memory Consumption in Authentication Middleware Can Lead to Denial of Service

Summary A Denial of Service DoS vulnerability in the authentication middleware allows any client to cause memory exhaustion by sending large request bodies. The server reads the entire request body into memory without size limits, creating multiple copies during processing, which can lead to Out ...

7.2AI score
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
•added 2024/12/17 10:21 p.m.•29 views

CVE-2024-54677

A flaw was found in the "examples" web application of Apache Tomcat. Numerous examples within that application did not place limits on uploaded data. This vulnerability can potentially trigger an out-of-memory OOM error, leading to a denial of service...

3.7CVSS6.4AI score0.01939EPSS
SaveExploits0References4
Redos
Redos
•added 2024/12/16 12:00 a.m.•29 views

ROS-20241216-10

The Jetty servlet container vulnerability is related to the lack of control over internal resource consumption within DoSFilter. Exploitation of the vulnerability could allow an attacker acting remotely to repeatedly send crafted requests multiple times, cause an OutofMemory error, and finally...

7.5CVSS6.8AI score0.0094EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2024/12/12 8:00 p.m.•10 views

org.eclipse.jetty:jetty-server: jetty: Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks

A flaw was found in Jetty's ThreadLimitHandler.getRemote. This flaw allows unauthorized users to cause remote denial of service DoS attacks. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory...

6.5CVSS5.8AI score0.0103EPSS
SaveExploits0References7
Microsoft CVE
Microsoft CVE
•added 2024/12/12 8:00 a.m.•11 views

media: dvbdev: prevent the risk of out of memory access

...

7.8CVSS6.7AI score0.00282EPSS
SaveExploits0
OSV
OSV
•added 2024/11/27 10:00 a.m.•13 views

CLSA-2024-1732701614 binutils: Fix of CVE-2018-12699

CVE-2018-12699: Fix heap-based buffer overflow, oom, and stack overflow issues...

9.8CVSS7.2AI score0.04533EPSS
SaveExploits1References1
OSV
OSV
•added 2024/11/25 5:16 p.m.•26 views

CLSA-2024-1732554981 binutils: Fix of CVE-2018-12699

CVE-2018-12699: Fix heap-based buffer overflow, oom, and stack overflow issues...

9.8CVSS7.2AI score0.04533EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
•added 2024/11/20 3:48 a.m.•6 views

SUSE CVE-2024-53063

In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: prevent the risk of out of memory access The dvbdev contains a static variable used to store dvb minors. The behavior of it depends if CONFIGDVBDYNAMICMINORS is set or not. When not set, dvbregisterdevice won't che...

7.1CVSS6.7AI score0.00282EPSS
SaveExploits0References45
NVD
NVD
•added 2024/11/19 6:15 p.m.•32 views

CVE-2024-53063

In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: prevent the risk of out of memory access The dvbdev contains a static variable used to store dvb minors. The behavior of it depends if CONFIGDVBDYNAMICMINORS is set or not. When not set, dvbregisterdevice won't che...

7.8CVSS0.00282EPSS
SaveExploits0References10
Rows per page
Query Builder