Lucene search
+L

6475 matches found

Github Security Blog
Github Security Blog
added 2022/12/21 9:30 p.m.37 views

EnumStringValues vulnerable to Uncontrolled Resource Consumption

A vulnerability was found in Brondahl EnumStringValues 4.0.1. It has been declared as problematic. This vulnerability affects the function GetStringValuesWithPreferencesUncache of the file EnumStringValues/EnumExtensions.cs. The manipulation leads to resource consumption. Upgrading to version 4.0...

7.5CVSS7.4AI score0.01283EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2022/12/21 7:15 p.m.32 views

CVE-2020-36620

A vulnerability was found in Brondahl EnumStringValues up to 4.0.0. It has been declared as problematic. This vulnerability affects the function GetStringValuesWithPreferencesUncache of the file EnumStringValues/EnumExtensions.cs. The manipulation leads to resource consumption. Upgrading to versi...

7.5CVSS0.01283EPSS
SaveExploits0References3
OSV
OSV
added 2022/12/21 7:15 p.m.20 views

CVE-2020-36620

A vulnerability was found in Brondahl EnumStringValues up to 4.0.0. It has been declared as problematic. This vulnerability affects the function GetStringValuesWithPreferencesUncache of the file EnumStringValues/EnumExtensions.cs. The manipulation leads to resource consumption. Upgrading to versi...

7.5CVSS7.6AI score
SaveExploits0References3
Prion
Prion
added 2022/12/21 7:15 p.m.23 views

Design/Logic Flaw

A vulnerability was found in Brondahl EnumStringValues up to 4.0.0. It has been declared as problematic. This vulnerability affects the function GetStringValuesWithPreferencesUncache of the file EnumStringValues/EnumExtensions.cs. The manipulation leads to resource consumption. Upgrading to versi...

5CVSS7.5AI score0.01283EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/21 12:00 a.m.6 views

CVE-2020-36620 Brondahl EnumStringValues EnumExtensions.cs GetStringValuesWithPreferences_Uncache resource consumption

A vulnerability was found in Brondahl EnumStringValues up to 4.0.0. It has been declared as problematic. This vulnerability affects the function GetStringValuesWithPreferencesUncache of the file EnumStringValues/EnumExtensions.cs. The manipulation leads to resource consumption. Upgrading to versi...

3.5CVSS7.2AI score0.01283EPSS
SaveExploits0References3
CVE
CVE
added 2022/12/21 12:00 a.m.110 views

CVE-2020-36620

Summary: This CVE affects Brondahl EnumStringValues up to 4.0.0. The vulnerability is in GetStringValuesWithPreferences_Uncache (EnumExtensions.cs) and causes resource consumption. Documents consistently cite upgrading to 4.0.1 to address the issue, with the patch identified as c0fc7806beb24883cc...

7.5CVSS5.5AI score0.01283EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2022/12/21 12:00 a.m.38 views

CVE-2020-36620 Brondahl EnumStringValues EnumExtensions.cs GetStringValuesWithPreferences_Uncache resource consumption

A vulnerability was found in Brondahl EnumStringValues up to 4.0.0. It has been declared as problematic. This vulnerability affects the function GetStringValuesWithPreferencesUncache of the file EnumStringValues/EnumExtensions.cs. The manipulation leads to resource consumption. Upgrading to versi...

3.5CVSS7.6AI score0.01283EPSS
SaveExploits0References3
Veracode
Veracode
added 2022/12/18 8:41 p.m.50 views

Denial Of Service (DoS)

cn.hutool:hutool-core is vulnerable to denial of service DoS attacks. A malicious user is able to cause excessive resource consumption due to improper decompression mechanisms in multiple functions of ZipUtil.java, resulting in an application crash...

7.5CVSS7AI score0.00897EPSS
SaveExploits1References3Affected Software1
Github Security Blog
Github Security Blog
added 2022/12/16 9:30 p.m.53 views

HuTool vulnerable to Uncontrolled Resource Consumption

A vulnerability classified as problematic was found in Dromara HuTool up to 5.8.10. This vulnerability affects unknown code of the file cn.hutool.core.util.ZipUtil.java. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the...

7.5CVSS7.5AI score0.00897EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/12/16 9:30 p.m.42 views

GHSA-47VX-FQR5-J2GW HuTool vulnerable to Uncontrolled Resource Consumption

A vulnerability classified as problematic was found in Dromara HuTool up to 5.8.10. This vulnerability affects unknown code of the file cn.hutool.core.util.ZipUtil.java. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the...

7.5CVSS6AI score0.00897EPSS
SaveExploits1References4
Prion
Prion
added 2022/12/16 7:15 p.m.23 views

Spoofing

A vulnerability classified as problematic was found in Dromara HuTool up to 5.8.10. This vulnerability affects unknown code of the file cn.hutool.core.util.ZipUtil.java. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the...

5CVSS7.6AI score0.00897EPSS
SaveExploits1References2Affected Software1
RedhatCVE
RedhatCVE
added 2022/12/16 10:05 a.m.38 views

CVE-2022-23524

A flaw was found in Helm, a tool for managing Charts, a pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to Uncontrolled Resource Consumption. Input to functions in the strvals package could cause a stack overflow that is unrecoverable by Go. Applications that use functio...

7.5CVSS6.1AI score0.0076EPSS
SaveExploits0References4
GitLab Advisory Database
GitLab Advisory Database
added 2022/12/16 12:00 a.m.97 views

Uncontrolled Resource Consumption

A vulnerability classified as problematic was found in Dromara HuTool up to 5.8.10. This vulnerability affects unknown code of the file cn.hutool.core.util.ZipUtil.java. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the...

7.5CVSS2.6AI score0.00897EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2022/12/16 12:00 a.m.97 views

CVE-2022-4565

CVE-2022-4565 affects Dromara HuTool up to version 5.8.10, targeting the ZipUtil.java code path (cn.hutool.core.util.ZipUtil). The issue enables uncontrolled resource consumption and can be triggered remotely; exploitation has been disclosed publicly. A fix is available in HuTool 5.8.11. Connecte...

7.5CVSS6AI score0.00897EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/12/16 12:00 a.m.7 views

PT-2022-27591 · Dromara · Dromara Hutool

Name of the Vulnerable Software and Affected Versions: Dromara HuTool versions up to 5.8.10 Description: A vulnerability was found in Dromara HuTool that affects the file cn.hutool.core.util.ZipUtil.java, leading to resource consumption. The attack can be initiated remotely. Recommendations: For...

7.5CVSS7.3AI score0.00897EPSS
SaveExploits1References7
OSV
OSV
added 2022/12/16 12:00 a.m.24 views

CVE-2022-4565 Dromara HuTool cn.hutool.core.util.ZipUtil.java resource consumption

A vulnerability classified as problematic was found in Dromara HuTool up to 5.8.10. This vulnerability affects unknown code of the file cn.hutool.core.util.ZipUtil.java. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the...

4.3CVSS5.7AI score
SaveExploits0References4
Cvelist
Cvelist
added 2022/12/16 12:00 a.m.42 views

CVE-2022-4565 Dromara HuTool cn.hutool.core.util.ZipUtil.java resource consumption

A vulnerability classified as problematic was found in Dromara HuTool up to 5.8.10. This vulnerability affects unknown code of the file cn.hutool.core.util.ZipUtil.java. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the...

4.3CVSS7.8AI score0.00897EPSS
SaveExploits1References2
NVD
NVD
added 2022/12/15 7:15 p.m.21 views

CVE-2022-23524

Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to Uncontrolled Resource Consumption, resulting in Denial of Service. Input to functions in the strvals package can cause a stack overflow. In Go, a stack overflow cannot be recovered fro...

7.5CVSS0.0076EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2022/12/15 7:15 p.m.129 views

CVE-2022-23524

Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to Uncontrolled Resource Consumption, resulting in Denial of Service. Input to functions in the strvals package can cause a stack overflow. In Go, a stack overflow cannot be recovered fro...

7.5CVSS3.6AI score0.0076EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2022/12/15 4:20 p.m.20 views

minimist: prototype pollution

An Uncontrolled Resource Consumption flaw was found in minimist. The original fix for CVE-2020-7598 was incomplete as it was still possible to bypass in some cases. This flaw CVE-2021-44906 allows an attacker to trick the library into adding or modifying the properties of Object.prototype, using ...

9.8CVSS6.8AI score0.04581EPSS
SaveExploits1References5
Rows per page
Query Builder