Lucene search
K

5150 matches found

OSV
OSV
added 2018/01/25 3:29 a.m.14 views

CVE-2018-6196

w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feedtableblocktag function in table.c does not prevent a negative indent value...

7.5CVSS7.7AI score
Exploits0References6
OSV
OSV
added 2018/01/25 3:29 a.m.1 views

DEBIAN-CVE-2018-6196

w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feedtableblocktag function in table.c does not prevent a negative indent value...

7.5CVSS6.9AI score0.0067EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/01/25 3:0 a.m.17 views

CVE-2018-6196

w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feedtableblocktag function in table.c does not prevent a negative indent value...

7.3AI score0.0067EPSS
Exploits1References6
Debian CVE
Debian CVE
added 2018/01/25 3:0 a.m.27 views

CVE-2018-6196

w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feedtableblocktag function in table.c does not prevent a negative indent value...

7.5CVSS7.6AI score0.0067EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2018/01/25 3:0 a.m.31 views

CVE-2018-6196

w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feedtableblocktag function in table.c does not prevent a negative indent value...

7.5CVSS7.4AI score0.0067EPSS
Exploits1
CVE
CVE
added 2018/01/25 3:0 a.m.170 views

CVE-2018-6196

CVE-2018-6196 affects w3m up to version 0.5.3. The underlying issue is an infinite recursion in HTMLlineproc0 caused by feed_table_block_tag not preventing a negative indent value in table.c. Public advisories and patches across distros confirm the fix in multiple releases: OpenSUSE/SUSE update (...

7.5CVSS7.2AI score0.0067EPSS
Exploits1References6Affected Software1
CNVD
CNVD
added 2018/01/25 12:0 a.m.2 views

w3m infinite recursion vulnerability

w3m is an open source text-based Web browser . A security vulnerability exists in HTMLlineproc0 in w3m 0.5.3 and earlier versions, which stems from the program's failure to limit negative indentation values. An attacker can exploit this vulnerability to cause a denial of service infinite recursio...

7.5CVSS6.6AI score0.0067EPSS
Exploits1References1
OSV
OSV
added 2018/01/24 9:29 p.m.17 views

CVE-2018-5759

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service excessive recursion via a crafted file...

5.5CVSS7AI score
Exploits0References4
NVD
NVD
added 2018/01/24 9:29 p.m.7 views

CVE-2018-5759

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service excessive recursion via a crafted file...

5.5CVSS5.3AI score0.03779EPSS
Exploits5References4
Prion
Prion
added 2018/01/24 9:29 p.m.11 views

Design/Logic Flaw

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service excessive recursion via a crafted file...

4.3CVSS5.3AI score0.03779EPSS
Exploits5References4Affected Software1
Debian CVE
Debian CVE
added 2018/01/24 9:0 p.m.17 views

CVE-2018-5759

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service excessive recursion via a crafted file...

5.5CVSS5.3AI score0.03779EPSS
Exploits5
Cvelist
Cvelist
added 2018/01/24 9:0 p.m.15 views

CVE-2018-5759

jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service excessive recursion via a crafted file...

5.2AI score0.03779EPSS
Exploits5References4
UbuntuCve
UbuntuCve
added 2018/01/24 12:0 a.m.25 views

CVE-2018-6196

w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feedtableblocktag function in table.c does not prevent a negative indent value...

7.5CVSS6.9AI score0.0067EPSS
Exploits1References4
OSV
OSV
added 2018/01/24 12:0 a.m.0 views

UBUNTU-CVE-2018-6196

w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feedtableblocktag function in table.c does not prevent a negative indent value...

7.5CVSS6.9AI score0.0067EPSS
Exploits1References5
CNVD
CNVD
added 2018/01/23 12:0 a.m.8 views

jQuery Denial of Service Vulnerability

jQuery is an American programmer John Resig developed a set of open source , cross-browser JavaScript library . The library simplifies the operation between HTML and JavaScript , and has a modular , plug-in extensions and other features . A denial of service vulnerability exists in versions of...

7.5CVSS6.6AI score0.00533EPSS
Exploits1References1
NVD
NVD
added 2018/01/22 8:29 p.m.21 views

CVE-2018-6003

An issue was discovered in the asn1decodesimpleber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS...

7.5CVSS7.4AI score0.02547EPSS
Exploits0References7
Cvelist
Cvelist
added 2018/01/22 8:0 p.m.16 views

CVE-2018-6003

An issue was discovered in the asn1decodesimpleber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS...

7.4AI score0.02547EPSS
Exploits0References7
AlpineLinux
AlpineLinux
added 2018/01/22 8:0 p.m.42 views

CVE-2018-6003

An issue was discovered in the asn1decodesimpleber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS...

7.5CVSS7.5AI score0.02547EPSS
Exploits0
Github Security Blog
Github Security Blog
added 2018/01/22 1:32 p.m.99 views

Denial of Service in jquery

Affected versions of jquery use a lowercasing logic on attribute names. When given a boolean attribute with a name that contains uppercase characters, jquery enters into an infinite recursion loop, exceeding the call stack limit, and resulting in a denial of service condition. Recommendation Upda...

7.5CVSS4.4AI score0.00533EPSS
Exploits1References8Affected Software3
OSV
OSV
added 2018/01/22 1:32 p.m.18 views

GHSA-MHPP-875W-9CPV Denial of Service in jquery

Affected versions of jquery use a lowercasing logic on attribute names. When given a boolean attribute with a name that contains uppercase characters, jquery enters into an infinite recursion loop, exceeding the call stack limit, and resulting in a denial of service condition. Recommendation Upda...

7.5CVSS7.3AI score0.00533EPSS
Exploits1References9
Rows per page
Query Builder