Lucene search
+L

6491 matches found

Veracode
Veracode
added 2023/07/22 9:06 p.m.29 views

Denial Of Service (DoS)

gitlab is vulnerable to Denial of Service DoS attacks. A lack of appropriate timeouts allows an attacker to cause unlimited resource consumption, resulting in denial of service conditions...

5.3CVSS6.6AI score0.01083EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
added 2023/07/22 12:06 p.m.28 views

Uncontrolled Resource Consumption

gitlab is vulnerable to Uncontrolled Resource Consumption. This occurs when a timeout is triggered on a page with markdown when using specific amounts of block-quotes...

4.3CVSS6.8AI score0.0071EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/07/20 12:00 a.m.29 views

Juniper Junos OS Vulnerability (JSA70196)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70196 advisory. - An Uncontrolled Resource Consumption vulnerability in the PFE management daemon evo-pfemand of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based...

7.5CVSS7.5AI score0.00616EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.12 views

The vulnerability of the demangle_template function in the cplus-dem.c component of the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the demangletemplate function in the cplus-dem.c component of the GNU Binutils development environment is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.8CVSS6.9AI score0.0611EPSS
SaveExploits1References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.22 views

The vulnerability of the Avahi service detection system in local networks, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Avahi service detection system in local networks is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a perpetrator to cause service failures...

5.5CVSS6.2AI score0.00386EPSS
SaveExploits1References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.14 views

The vulnerability of the Python programming language interpreter, related to uncontrolled resource consumption, allows attackers to trigger service failures.

The vulnerability of the Python programming language interpreter is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service failures...

7.8CVSS6.8AI score0.02523EPSS
SaveExploits1References21Affected Software6
Veracode
Veracode
added 2023/07/18 5:15 p.m.15 views

Inefficient Regular Expression Complexity

gitlab is vulnerable to Inefficient Regular Expression Complexity. The issue causes Uncontrolled Resource Consumption which could result in a denial of service...

7.5CVSS6.7AI score0.00905EPSS
SaveExploits0References3Affected Software1
ICS
ICS
added 2023/07/18 6:00 a.m.41 views

Rockwell Automation Kinetix 5700 DC Bus Power Supply

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: Kinetix 5700 Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could result in a denial-of-service attack...

7.5CVSS7.8AI score0.01226EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2023/07/18 12:00 a.m.14 views

The vulnerability of the Gunyah Resource Manager service on Android and Linux embedded platforms of Qualcomm devices allows a hacker to induce a service failure.

The vulnerability of the Gunyah Resource Manager service for Android and Linux embedded devices on Qualcomm systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a attacker to cause a service failure by sending specially crafted messages from the...

5.5CVSS5.9AI score0.00104EPSS
SaveExploits0References13
Prion
Prion
added 2023/07/17 4:15 p.m.25 views

Code injection

Mattermost fails to properly validate a gif image file, allowing an attacker to consume a significant amount of server resources, making the server unresponsive for an extended period of time by linking to specially crafted image file...

1.9CVSS4.2AI score0.00351EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/17 3:32 p.m.17 views

CVE-2023-3614 Denial of Service via specially crafted gif image

Mattermost fails to properly validate a gif image file, allowing an attacker to consume a significant amount of server resources, making the server unresponsive for an extended period of time by linking to specially crafted image file...

4.3CVSS6.8AI score0.00351EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/17 2:15 a.m.36 views

CVE-2022-4952

A vulnerability has been found in OmniSharp csharp-language-server-protocol up to 0.19.6 and classified as problematic. This vulnerability affects the function CreateSerializerSettings of the file src/JsonRpc/Serialization/SerializerBase.cs of the component JSON Serializer. The manipulation leads...

7.5CVSS0.00886EPSS
SaveExploits0References5
Prion
Prion
added 2023/07/17 2:15 a.m.24 views

Information disclosure

A vulnerability has been found in OmniSharp csharp-language-server-protocol up to 0.19.6 and classified as problematic. This vulnerability affects the function CreateSerializerSettings of the file src/JsonRpc/Serialization/SerializerBase.cs of the component JSON Serializer. The manipulation leads...

5CVSS7.6AI score0.00886EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2023/07/17 2:00 a.m.54 views

CVE-2022-4952

CVE-2022-4952 affects OmniSharp csharp-language-server-protocol up to 0.19.6. The vulnerability lies in the JSON Serializer’s CreateSerializerSettings function (SerializerBase.cs), where manipulation leads to resource consumption and potential denial of service. A fix is available in version 0.19...

7.5CVSS5.6AI score0.00886EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2023/07/17 2:00 a.m.41 views

CVE-2022-4952 OmniSharp csharp-language-server-protocol JSON Serializer SerializerBase.cs CreateSerializerSettings resource consumption

A vulnerability has been found in OmniSharp csharp-language-server-protocol up to 0.19.6 and classified as problematic. This vulnerability affects the function CreateSerializerSettings of the file src/JsonRpc/Serialization/SerializerBase.cs of the component JSON Serializer. The manipulation leads...

3.5CVSS7.8AI score0.00886EPSS
SaveExploits0References5
OSV
OSV
added 2023/07/17 2:00 a.m.19 views

CVE-2022-4952 OmniSharp csharp-language-server-protocol JSON Serializer SerializerBase.cs CreateSerializerSettings resource consumption

A vulnerability has been found in OmniSharp csharp-language-server-protocol up to 0.19.6 and classified as problematic. This vulnerability affects the function CreateSerializerSettings of the file src/JsonRpc/Serialization/SerializerBase.cs of the component JSON Serializer. The manipulation leads...

3.5CVSS4.8AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/07/17 12:00 a.m.11 views

PT-2023-25450 · Unknown · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost affected versions not specified Description: The issue arises from the improper validation of a gif image file, allowing an attacker to consume a significant amount of server resources. This can be achieved by linking to a speciall...

4.3CVSS3.7AI score0.00351EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
added 2023/07/14 2:04 a.m.6 views

SUSE CVE-2023-3637

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significa...

6.5CVSS6.5AI score0.01305EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/07/13 2:08 a.m.42 views

CVE-2023-3424 Inefficient Regular Expression Complexity in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.3 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1. A Regular Expression Denial of Service was possible via sending crafted payloads to the...

7.5CVSS7.4AI score0.00905EPSS
SaveExploits0References2
CNVD
CNVD
added 2023/07/12 12:00 a.m.65 views

Siemens SIMATIC MV500 Devices Uncontrolled Resource Consumption Vulnerability

SIMATIC MV500 products are fixed optical readers for capturing print, laser, drill, punch and dotted line codes on a variety of different surfaces. Siemens SIMATIC MV500 Devices has an uncontrolled resource consumption vulnerability that can be exploited by an attacker to cause a denial of servic...

7.5CVSS7.4AI score0.00866EPSS
SaveExploits0References1
Rows per page
Query Builder