Lucene search
+L

10016 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/05/22 12:00 a.m.•8 views

CVE-2012-2927: Undefined Security Weakness

The TM Software Tempo plugin before 6.4.3.1, 6.5.x before 6.5.0.2, and 7.x before 7.0.3 for Atlassian JIRA does not properly restrict the capabilities of third-party XML parsers, which allows remote authenticated users to cause a denial of service resource consumption via unspecified vectors...

4CVSS5.9AI score0.0124EPSS
SaveExploits0References2
Prion
Prion
•added 2012/05/11 10:15 a.m.•58 views

Design/Logic Flaw

sapi/cgi/cgimain.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script aka php-cgi, does not properly handle query strings that lack an = equals sign character, which allows remote attackers to cause a denial of service resource consumption by placing command-line options...

5CVSS7.2AI score0.99998EPSS
SaveExploits47References8Affected Software1
Cvelist
Cvelist
•added 2012/05/11 10:00 a.m.•84 views

CVE-2012-2336

sapi/cgi/cgimain.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script aka php-cgi, does not properly handle query strings that lack an = equals sign character, which allows remote attackers to cause a denial of service resource consumption by placing command-line options...

9.6AI score0.50337EPSS
SaveExploits5References8
CVE
CVE
•added 2012/05/11 10:00 a.m.•788 views

CVE-2012-2336

The PHP programming language interpreter (component sapi/cgi/cgi_main.c ) is vulnerable to a denial of service (resource consumption) when configured as a CGI script (php-cgi ). The root cause is the improper handling of query strings lacking an = (equals sign) character, which allows remote atta...

5CVSS9.4AI score0.50337EPSS
SaveIn wildExploits5References8Affected Software1
NVD
NVD
•added 2012/04/13 5:55 p.m.•23 views

CVE-2012-1809

The web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 allows remote attackers to cause a denial of service resource consumption via unspecified vectors...

5CVSS6.7AI score0.01343EPSS
SaveExploits0References1
CVE
CVE
•added 2012/04/13 5:00 p.m.•65 views

CVE-2012-1809

The CVE-2012-1809 entry concerns the web server in Koyo ECOM Ethernet modules (H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, H4-ECOM100). Public sources describe an Uncontrolled Resource Consumption vulnerability (CWE-306) that enables remote attackers to cause a DoS th...

5CVSS6.8AI score0.01343EPSS
SaveExploits0References1Affected Software8
NVD
NVD
•added 2012/04/13 10:41 a.m.•32 views

CVE-2011-4883

The web server in Certec atvise webMI2ADS aka webMI before 2.0.2 does not properly validate values in HTTP requests, which allows remote attackers to cause a denial of service resource consumption via a crafted request...

5CVSS6.5AI score0.03123EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2012/04/13 12:00 a.m.•8 views

PT-2012-3557

Name of the Vulnerable Software and Affected Versions Koyo H0-ECOM Koyo H0-ECOM100 Koyo H2-ECOM Koyo H2-ECOM-F Koyo H2-ECOM100 Koyo H4-ECOM Koyo H4-ECOM-F Koyo H4-ECOM100 Description The issue allows remote attackers to cause a denial of service, resulting in resource consumption, via unspecified...

5CVSS0.01343EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/04/13 12:00 a.m.•9 views

CVE-2012-1809: Undefined Security Weakness

The web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 allows remote attackers to cause a denial of service resource consumption via unspecified vectors...

5CVSS5.9AI score0.01343EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/04/13 12:00 a.m.•4 views

CVE-2011-4883: Improper Input Validation

The web server in Certec atvise webMI2ADS aka webMI before 2.0.2 does not properly validate values in HTTP requests, which allows remote attackers to cause a denial of service resource consumption via a crafted request...

5CVSS5.8AI score0.03123EPSS
SaveExploits1References2
exploitpack
exploitpack
•added 2012/03/31 12:00 a.m.•18 views

Flock 2.6.1 - Denial of Service

Flock 2.6.1 - Denial of Service source: https://www.securityfocus.com/bid/52856/info Flock is prone to a denial-of-service vulnerability. Successful exploits will consume excessive resources and will eventually crash the application and possibly the underlying computer, effectively denying servic...

7.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2012/03/31 12:00 a.m.•24 views

Flock 2.6.1 - Denial of Service

source: https://www.securityfocus.com/bid/52856/info Flock is prone to a denial-of-service vulnerability. Successful exploits will consume excessive resources and will eventually crash the application and possibly the underlying computer, effectively denying service to legitimate users. Flock 2.6...

5.3AI score
SaveExploits0
Nmap
Nmap
•added 2012/03/23 7:29 p.m.•134 views

http-chrono NSE Script

Measures the time a website takes to deliver a web page and returns the maximum, minimum and average time it took to fetch a page. Web pages that take longer time to load could be abused by attackers in DoS or DDoS attacks due to the fact that they are likely to consume more resources on the targ...

10CVSS7.9AI score0.99448EPSS
SaveExploits35
securityvulns
securityvulns
•added 2012/02/14 12:00 a.m.•41 views

apr / aws libraries DoS

resources consumption because of collisions in a hash function...

5CVSS7.4AI score0.42138EPSS
SaveExploits1References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/02/09 12:00 a.m.•5 views

CVE-2011-3954: Uncontrolled Resource Consumption

Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service application crash via vectors that trigger a large amount of database usage...

5CVSS5.8AI score0.01109EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/01/08 12:00 a.m.•8 views

CVE-2011-5056: Uncontrolled Resource Consumption

The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which might allow local users to cause a denial of service CPU consumption via crafted records in zone files, a different vulnerability than...

2.1CVSS5.8AI score0.00381EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2011/12/20 12:00 a.m.•39 views

Ubuntu 10.04 LTS / 10.10 / 11.04 : python3.1, python3.2 vulnerabilities (USN-1314-1)

Giampaolo Rodola discovered that the smtpd module in Python 3 did not properly handle certain error conditions. A remote attacker could exploit this to cause a denial of service via daemon outage. This issue only affected Ubuntu 10.04 LTS. CVE-2010-3493 Niels Heinen discovered that the urllib...

6.4CVSS7.9AI score0.03564EPSS
SaveExploits0References3
Prion
Prion
•added 2011/11/03 3:55 p.m.•35 views

Sql injection

include/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used, allows remote attackers to trigger a GET request for an arbitrary URL, and cause a denial of service resource consumption and inbox outage, via a Subject header containing only a URL, a related issue to...

5CVSS7.1AI score0.0501EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2011/11/03 3:55 p.m.•30 views

CVE-2011-4078

include/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used, allows remote attackers to trigger a GET request for an arbitrary URL, and cause a denial of service resource consumption and inbox outage, via a Subject header containing only a URL, a related issue to...

5CVSS6.8AI score0.02258EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2011/11/03 3:00 p.m.•45 views

CVE-2011-4078

include/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used, allows remote attackers to trigger a GET request for an arbitrary URL, and cause a denial of service resource consumption and inbox outage, via a Subject header containing only a URL, a related issue to...

6.7AI score0.02258EPSS
SaveExploits0References5
Rows per page
Query Builder