Lucene search
+L

5839 matches found

Huntr
Huntr
added 2025/05/27 3:2 p.m.9 views

Denial of Service(DOS) in JSONReader

Description There exists a denial of service vulnerabilityDOS that occurs by python hitting max recursion depth while parsing a deeply nested json file using JSONReader. Vulnerable piece of code...

8.6CVSS7.1AI score0.00283EPSS
SaveExploits0
OSV
OSV
added 2025/05/26 7:13 a.m.18 views

BIT-JENKINS-2021-43859 Denial of Service by injecting highly recursive collections or maps in XStream

XStream is an open source java library to serialize objects to XML and back again. Versions prior to 1.4.19 may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulatin...

7.5CVSS7.4AI score0.07934EPSS
SaveExploits1References11
RedhatCVE
RedhatCVE
added 2025/05/23 10:29 a.m.7 views

CVE-2024-42369

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. A malicious homeserver can craft a room or room structure such that the predecessors form a cycle. The matrix-js-sdk's getRoomUpgradeHistory function will infinitely recurse in this case, causing the code to hang. This...

5.3CVSS6.8AI score0.00483EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 9:20 a.m.8 views

CVE-2024-38443

C/sorting/binaryinsertionsort.c in The Algorithms - C through e5dad3f has a segmentation fault for deep recursion, which may affect common use cases such as sorting an array of 50 elements...

6.2CVSS5.9AI score0.0016EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:13 a.m.13 views

CVE-2024-2965

A Denial-of-Service DoS vulnerability exists in the SitemapLoader class of the langchain-ai/langchain repository, affecting all versions. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the...

4.7CVSS4.7AI score0.00304EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/23 5:58 a.m.4 views

CVE-2023-31794

MuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdfmarklistpush. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...

5.5CVSS7AI score0.00233EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:47 a.m.9 views

CVE-2023-31893

Telefnica Brasil Vivo Play IPTV Firmware: 2023.04.04.01.06.15 is vulnerable to Denial of Service DoS via DNS Recursion...

7.5CVSS6.9AI score0.00874EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:44 a.m.11 views

CVE-2023-50251

php-svg-lib is an SVG file parsing / rendering library. Prior to version 0.5.1, when parsing the attributes passed to a use tag inside an svg document, an attacker can cause the system to go to an infinite recursion. Depending on the system configuration and attack pattern this could exhaust the...

7.5CVSS6.7AI score0.00878EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:46 a.m.12 views

CVE-2023-29001

Contiki-NG is an open-source, cross-platform operating system for IoT devices. The Contiki-NG operating system processes source routing headers SRH in its two alternative RPL protocol implementations. The IPv6 implementation uses the results of this processing to determine whether an incoming...

8.7CVSS6.7AI score0.00538EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:6 a.m.9 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS6.6AI score0.00407EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:5 a.m.11 views

CVE-2022-28773

Due to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager, the application may crash, leading to denial of service, but can be restarted automatically...

7.5CVSS7.9AI score0.01461EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:30 a.m.9 views

CVE-2022-48545

An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02...

5.5CVSS6.7AI score0.00232EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 12:27 a.m.9 views

CVE-2022-47662

GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 has a segment fault /stack overflow due to infinite recursion in MediaGetSample isomedia/media.c:662...

5.5CVSS6.7AI score0.00308EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/23 12:22 a.m.14 views

CVE-2022-46405

Mastodon through 4.0.2 allows attackers to cause a denial of service large Sidekiq pull queue by creating bot accounts that follow attacker-controlled accounts on certain other servers associated with a wildcard DNS A record, such that there is uncontrolled recursion of attacker-generated message...

7.5CVSS6.7AI score0.00918EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:56 p.m.6 views

CVE-2022-3222

Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV...

5.5CVSS6.7AI score0.00651EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:56 p.m.11 views

CVE-2021-28040

An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in osxml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached...

7.5CVSS7.1AI score0.01192EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:56 p.m.23 views

CVE-2021-36154

HTTP2ToRawGRPCServerCodec in gRPC Swift 1.1.1 and earlier allows remote attackers to deny service via the delivery of many small messages within a single HTTP/2 frame, leading to Uncontrolled Recursion and stack consumption...

7.5CVSS6.9AI score0.02082EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:31 p.m.12 views

CVE-2021-27432

OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow...

7.5CVSS6.7AI score0.02126EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:46 p.m.11 views

CVE-2021-41213

TensorFlow is an open source platform for machine learning. In affected versions the code behind tf.function API can be made to deadlock when two tf.function decorated Python functions are mutually recursive. This occurs due to using a non-reentrant Lock Python object. Loading any model which...

5.5CVSS6.7AI score0.00235EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/22 6:42 p.m.10 views

CVE-2021-36395

In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion denial of service...

7.5CVSS6.7AI score0.00734EPSS
SaveExploits0
Rows per page
Query Builder