Lucene search
+L

5817 matches found

OSV
OSV
added 2021/07/26 12:15 p.m.7 views

UBUNTU-CVE-2021-22144

In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that...

6.5CVSS7.4AI score0.0218EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/07/26 12:15 p.m.3 views

CVE-2021-22144

In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that...

6.5CVSS7.3AI score0.0218EPSS
SaveExploits0References4
Prion
Prion
added 2021/07/26 12:15 p.m.32 views

Design/Logic Flaw

In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that...

4CVSS6.4AI score0.0218EPSS
SaveExploits0References3Affected Software2
UbuntuCve
UbuntuCve
added 2021/07/26 12:15 p.m.27 views

CVE-2021-22144

In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that...

6.5CVSS7AI score0.0218EPSS
SaveExploits0References1
CVE
CVE
added 2021/07/26 11:48 a.m.179 views

CVE-2021-22144

CVE-2021-22144 affects Elasticsearch Grok parser. The vulnerability is an uncontrolled recursion that enables a DoS via specially crafted Grok queries submitted by an authenticated user, potentially crashing the node. Affected versions are Elasticsearch before 7.13.3 and 6.8.17. Public references...

6.5CVSS6.3AI score0.0218EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/07/26 11:48 a.m.59 views

CVE-2021-22144

In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that...

6.8AI score0.0218EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2021/07/21 12:0 a.m.30 views

EulerOS Virtualization 3.0.2.2 : bind (EulerOS-SA-2021-2127)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Bind-utils contains a collection of utilities for querying DNS Domain Name System name servers to find out information about Intern...

8.6CVSS6.8AI score0.93422EPSS
SaveExploits7References4
NVD
NVD
added 2021/07/20 7:15 a.m.20 views

CVE-2020-36429

VariantencodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion depth...

5.5CVSS0.0031EPSS
SaveExploits0References4
OSV
OSV
added 2021/07/20 7:15 a.m.16 views

CVE-2020-36429

VariantencodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion depth...

5.5CVSS7AI score
SaveExploits0References4
CNNVD
CNNVD
added 2021/07/20 12:0 a.m.6 views

open62541 缓冲区错误漏洞

open62541 is an application software. An open source and free implementation of OPC UA OPC Unified Architecture, written in a common subset of the C99 and C++98 languages. A security vulnerability exists in open62541 prior to 1.0.4, which stems from the fact that X has out-of-bounds writes for...

5.5CVSS5.8AI score0.0031EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/07/18 4:15 a.m.10 views

CVE-2021-36773

uBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter nesting for strict blocking, which allows crafted web sites to cause a denial of service unbounded recursion that can trigger memory consumption and a loss of all blocking functionality...

7.5CVSS7.2AI score0.01261EPSS
SaveExploits1References4
OSV
OSV
added 2021/07/18 4:15 a.m.12 views

UBUNTU-CVE-2021-36773

uBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter nesting for strict blocking, which allows crafted web sites to cause a denial of service unbounded recursion that can trigger memory consumption and a loss of all blocking functionality...

7.5CVSS5.9AI score0.01261EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/07/18 12:0 a.m.8 views

uBlock 安全漏洞

uBlock is an open source ad blocker. There is a security vulnerability in uBlock Origin that allows a carefully crafted website to cause a denial of service infinite recursion can trigger memory consumption and loss of all blocking functionality...

7.5CVSS7.2AI score0.01261EPSS
SaveExploits1References6
OpenVAS
OpenVAS
added 2021/07/15 12:0 a.m.45 views

SUSE: Security Advisory (SUSE-SU-2021:2320-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.2AI score0.0825EPSS
SaveExploits3References24
OSV
OSV
added 2021/07/14 3:1 p.m.21 views

SUSE-SU-2021:2320-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: - Update to version 3.36.0 - CVE-2020-15358: heap-based buffer overflow in multiSelectOrderBy due to mishandling of query-flattener optimization bsc1173641 - CVE-2020-9327: NULL pointer dereference and segmentation fault because of generated...

9.8CVSS7.2AI score0.0825EPSS
SaveExploits3References43
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.17 views

The vulnerability of the Oniguruma regular expression library, related to an uncontrolled recursion, allows a hacker to trigger a service failure.

The vulnerability of the Oniguruma regular expression library is related to an uncontrolled recursion. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.5CVSS6.5AI score0.02752EPSS
SaveExploits1References12Affected Software4
Positive Technologies
Positive Technologies
added 2021/07/13 12:0 a.m.6 views

PT-2021-21349 · Unknown +2 · Ublock Origin +2

Name of the Vulnerable Software and Affected Versions: uBlock Origin versions prior to 1.36.2 nMatrix versions prior to 4.4.9 Description: The issue allows crafted web sites to cause a denial of service due to unbounded recursion, which can trigger memory consumption and a loss of all blocking...

7.5CVSS6.5AI score0.01261EPSS
SaveExploits1References20
Mageia
Mageia
added 2021/07/10 8:0 p.m.42 views

Updated libcroco and gettext packages fix security vulnerability

libcroco through 0.6.13 has excessive recursion in crparserparseanycore in cr-parser.c, leading to stack consumption CVE-2020-12825...

7.1CVSS4.6AI score0.02319EPSS
SaveExploits1References3
OSV
OSV
added 2021/07/10 8:0 p.m.6 views

MGASA-2021-0333 Updated libcroco and gettext packages fix security vulnerability

libcroco through 0.6.13 has excessive recursion in crparserparseanycore in cr-parser.c, leading to stack consumption CVE-2020-12825...

7.1CVSS6.8AI score0.02319EPSS
SaveExploits1References4
NVD
NVD
added 2021/07/09 12:15 p.m.23 views

CVE-2021-36154

HTTP2ToRawGRPCServerCodec in gRPC Swift 1.1.1 and earlier allows remote attackers to deny service via the delivery of many small messages within a single HTTP/2 frame, leading to Uncontrolled Recursion and stack consumption...

7.5CVSS0.02082EPSS
SaveExploits0References3
Rows per page
Query Builder