Lucene search
+L

382 matches found

Github Security Blog
Github Security Blog
•added 2022/12/19 12:30 a.m.•35 views

active_attr Improper Resource Shutdown or Release vulnerability

A vulnerability classified as problematic has been found in cgriego activeattr up to 0.15.3. This affects the function call of the file lib/activeattr/typecasting/booleantypecaster.rb of the component Regex Handler. The manipulation of the argument value leads to denial of service. The exploit ha...

7.5CVSS1.8AI score0.01138EPSS
SaveExploits1References9Affected Software1
RubySec
RubySec
•added 2022/12/19 12:00 a.m.•36 views

active_attr Improper Resource Shutdown or Release vulnerability

A vulnerability classified as problematic has been found in cgriego activeattr up to 0.15.3. This affects the function call of the file lib/activeattr/typecasting/booleantypecaster.rb of the component Regex Handler. The manipulation of the argument value leads to denial of service. The exploit ha...

7.5CVSS1.8AI score0.01138EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/16 12:00 a.m.•6 views

CVE-2022-4565: Improper Resource Shutdown or Release

A vulnerability classified as problematic was found in Dromara HuTool up to 5.8.10. This vulnerability affects unknown code of the file cn.hutool.core.util.ZipUtil.java. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the...

7.5CVSS5AI score0.00923EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/19 12:00 a.m.•3 views

CVE-2022-4066: Improper Resource Shutdown or Release

A vulnerability was found in davidmoreno onion. It has been rated as problematic. Affected by this issue is the function onionresponseflush of the file src/onion/response.c of the component Log Handler. The manipulation leads to allocation of resources. The name of the patch is...

8.2CVSS5.1AI score0.01128EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/09 12:00 a.m.•5 views

CVE-2022-44552: Improper Resource Shutdown or Release

The lock screen module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability...

7.5CVSS5.9AI score0.00506EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/17 12:00 a.m.•4 views

CVE-2022-3553: Improper Resource Shutdown or Release

A vulnerability, which was classified as problematic, was found in X.org Server. This affects an unknown part of the file hw/xquartz/X11Controller.m of the component xquartz. The manipulation leads to denial of service. It is recommended to apply a patch to fix this issue. The identifier VDB-2110...

6.5CVSS6AI score0.01349EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/29 12:00 a.m.•8 views

CVE-2022-40890: Improper Resource Shutdown or Release

A vulnerability in /src/amf/amf-context.c in Open5GS 2.4.10 and earlier leads to AMF denial of service...

7.5CVSS7.2AI score0.00982EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/28 12:00 a.m.•4 views

CVE-2022-3354: Improper Resource Shutdown or Release

A vulnerability has been found in Open5GS up to 2.4.10 and classified as problematic. This vulnerability affects unknown code in the library lib/core/ogs-tlv-msg.c of the component UDP Packet Handler. The manipulation leads to denial of service. The exploit has been disclosed to the public and ma...

7.5CVSS6.3AI score0.00915EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/26 12:00 a.m.•8 views

CVE-2022-3299: Improper Resource Shutdown or Release

A vulnerability was found in Open5GS up to 2.4.10. It has been declared as problematic. Affected by this vulnerability is an unknown functionality in the library lib/sbi/client.c of the component AMF. The manipulation leads to denial of service. The attack can be launched remotely. The name of th...

6.5CVSS5.7AI score0.01237EPSS
SaveExploits1References2
ICS
ICS
•added 2022/09/13 12:00 a.m.•83 views

Siemens SINEC INS

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Siemens Equipment: SINEC INS Vulnerabilities: Improper Input Validation, Integer Overflow or Wraparound, Uncontrolled Resource Consumption, Command Injection, Inadequate Encryption Strength, Missing...

7.8CVSS6.7AI score0.21333EPSS
SaveExploits10References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/22 12:00 a.m.•7 views

CVE-2022-37133: Improper Resource Shutdown or Release

D-link DIR-816 A2v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end...

7.5CVSS7.2AI score0.01287EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/11 12:00 a.m.•6 views

CVE-2022-2776: Improper Resource Shutdown or Release

A vulnerability classified as problematic has been found in SourceCodester Gym Management System. Affected is an unknown function of the file deleteuser.php. The manipulation of the argument deleteuser leads to denial of service. It is possible to launch the attack remotely. The identifier of thi...

5.4CVSS5.7AI score0.00648EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/04 12:00 a.m.•4 views

CVE-2022-35272: Improper Resource Shutdown or Release

In BIG-IP Versions 17.0.x before 17.0.0.1 and 16.1.x before 16.1.3.1, when source-port preserve-strict is configured on an HTTP Message Routing Framework MRF virtual server, undisclosed traffic may cause the Traffic Management Microkernel TMM to produce a core file and the connection to terminate...

7.5CVSS5.9AI score0.00468EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/01 12:00 a.m.•4 views

CVE-2022-31182: Improper Resource Shutdown or Release

Discourse is the an open source discussion platform. In affected versions a maliciously crafted request for static assets could cause error responses to be cached by Discourse's default NGINX proxy configuration. A corrected NGINX configuration is included in the latest stable, beta and...

5.3CVSS5.9AI score0.00776EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/31 12:00 a.m.•5 views

CVE-2022-2591: Improper Resource Shutdown or Release

A vulnerability classified as critical has been found in TEM FLEX-1085 1.6.0. Affected is an unknown function of the file /sistema/flash/reboot. The manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used...

7.5CVSS6.8AI score0.08898EPSS
SaveExploits4References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/07 12:00 a.m.•5 views

CVE-2022-2191: Improper Resource Shutdown or Release

In Eclipse Jetty versions 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, SslConnection does not release ByteBuffers from configured ByteBufferPool in case of error code paths...

7.5CVSS7.2AI score0.02178EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/09 12:00 a.m.•7 views

CVE-2017-20024: Improper Resource Shutdown or Release

A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. It is possible to launch the attack remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is...

7.5CVSS6.6AI score0.01199EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2022/05/13 1:46 a.m.•45 views

Improper Resource Shutdown or Release in Apache Tomcat

In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the handling of an HTTP/2 GOAWAY frame for a connection did not close streams associated with that connection that were currently waiting for a WINDOWUPDATE before allowing the application to write more data. These waiting streams each...

7.5CVSS8.4AI score0.08275EPSS
SaveExploits0References25Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/13 12:00 a.m.•6 views

CVE-2022-25762: Improper Resource Shutdown or Release

If a web application sends a WebSocket message concurrently with the WebSocket connection closing when running on Apache Tomcat 8.5.0 to 8.5.75 or Apache Tomcat 9.0.0.M1 to 9.0.20, it is possible that the application will continue to use the socket after it has been closed. The error handling...

8.6CVSS7.5AI score0.08405EPSS
SaveExploits0References8
attackerkb
attackerkb
•added 2022/05/12 5:15 p.m.•9 views

CVE-2021-33069

Improper resource shutdown or release in firmware for some IntelR SSD, IntelR SSD DC, IntelR OptaneTM SSD and IntelR OptaneTM SSD DC may allow a privileged user to potentially enable denial of service via local access...

5.5CVSS6.2AI score0.00234EPSS
SaveExploits0References4
Rows per page
Query Builder