Lucene search
+L

2391 matches found

CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•13 views

Drupal Stage File Proxy 安全漏洞

Drupal Stage File Proxy is a Drupal module for the Drupal community. A security vulnerability exists in Drupal Stage File Proxy versions prior to 3.1.5, which stems from an unrestricted resource allocation and could lead to a flood attack...

5.9CVSS6.6AI score0.00353EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/04/14 12:00 a.m.•20 views

The vulnerability of the nvmet component in the nvmet_root_discovery_nqn_store() function of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nvmet component, specifically the nvmetrootdiscoverynqnstore function in the Linux operating system’s kernel, is related to the use of incorrect authentication tokens due to unlimited resource allocation. Exploiting this vulnerability could allow a remote attacker to caus...

5.7CVSS6.5AI score0.00188EPSS
SaveExploits0References5Affected Software1
RedhatCVE
RedhatCVE
•added 2025/04/11 8:00 p.m.•43 views

CVE-2025-3475

Allocation of Resources Without Limits or Throttling, Incorrect Authorization vulnerability in Drupal WEB-T allows Excessive Allocation, Content Spoofing.This issue affects WEB-T: from 0.0.0 before 1.1.0...

6.5CVSS7AI score0.00445EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/04/10 12:30 p.m.•16 views

CVE-2025-1677 Allocation of Resources Without Limits or Throttling in GitLab

A Denial of Service DoS issue has been discovered in GitLab CE/EE affecting all up to 17.8.7, 17.9 prior to 17.9.6 and 17.10 prior to 17.10.4 A denial of service could occur upon injecting oversized payloads into CI pipeline exports...

6.5CVSS6.2AI score0.00413EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/04/10 12:30 p.m.•38 views

CVE-2025-1677 Allocation of Resources Without Limits or Throttling in GitLab

A Denial of Service DoS issue has been discovered in GitLab CE/EE affecting all up to 17.8.7, 17.9 prior to 17.9.6 and 17.10 prior to 17.10.4 A denial of service could occur upon injecting oversized payloads into CI pipeline exports...

6.5CVSS0.00413EPSS
SaveExploits0References2
CVE
CVE
•added 2025/04/09 5:46 p.m.•85 views

CVE-2025-3475

The Drupal WEB-T module (versions 0.0.0 through 1.1.0 ) is vulnerable to Allocation of Resources Without Limits or Throttling and Incorrect Authorization . The root cause is insufficient validation of incoming API responses during the eTranslation integration 's asynchronous workflow. This allows...

6.5CVSS6.7AI score0.00445EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/04/09 5:46 p.m.•49 views

CVE-2025-3475 WEB-T - Moderately critical - Access bypass, Denial of service - SA-CONTRIB-2025-030

Allocation of Resources Without Limits or Throttling, Incorrect Authorization vulnerability in Drupal WEB-T allows Excessive Allocation, Content Spoofing.This issue affects WEB-T: from 0.0.0 before 1.1.0...

0.00445EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/09 5:46 p.m.•28 views

CVE-2025-3475 WEB-T - Moderately critical - Access bypass, Denial of service - SA-CONTRIB-2025-030

Allocation of Resources Without Limits or Throttling, Incorrect Authorization vulnerability in Drupal WEB-T allows Excessive Allocation, Content Spoofing.This issue affects WEB-T: from 0.0.0 before 1.1.0...

6.7AI score0.00445EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/04/09 5:05 p.m.•2 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling when processing large EXIF data structures. An attacker can cause denial of service by sending malicious images. Remediation Upgrade github.com/bep/imagemeta to version 0.10.0 or...

8.7CVSS6.9AI score0.00181EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/04/09 12:00 a.m.•17 views

PT-2025-15837 · Drupal · Drupal Web-T

Name of the Vulnerable Software and Affected Versions: Drupal WEB-T versions 0.0.0 through 1.1.0 Description: The issue affects Drupal WEB-T, allowing excessive allocation and content spoofing due to allocation of resources without limits or throttling and incorrect authorization. Recommendations...

6.5CVSS6.4AI score0.00445EPSS
SaveExploits0References8
OpenVAS
OpenVAS
•added 2025/04/09 12:00 a.m.•21 views

Ubuntu: Security Advisory (USN-7427-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01701EPSS
SaveExploits0References2
OSV
OSV
•added 2025/04/08 9:14 p.m.•12 views

USN-7427-1 dotnet8, dotnet9 vulnerability

James Newton-King discovered that .NET did not properly limit resource allocation when handling certain HTTP/3 requests. An attacker could possibly use this issue to cause a denial of service...

7.5CVSS5.8AI score0.01701EPSS
SaveExploits0References2
NVD
NVD
•added 2025/04/08 6:15 p.m.•51 views

CVE-2025-26682

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

7.5CVSS0.01701EPSS
SaveExploits0References1
OSV
OSV
•added 2025/04/08 6:15 p.m.•10 views

CVE-2025-26682

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

7.5CVSS7.3AI score
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2025/04/08 5:24 p.m.•30 views

CVE-2025-26682

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

7.5CVSS6.8AI score0.01701EPSS
SaveExploits0
Snyk
Snyk
•added 2025/04/08 4:00 p.m.•14 views

Allocation of Resources Without Limits or Throttling

Overview Microsoft.AspNetCore.App.Runtime.linux-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttlin...

8.7CVSS7.9AI score0.01701EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/04/08 4:00 p.m.•15 views

Allocation of Resources Without Limits or Throttling

Overview Microsoft.AspNetCore.App.Runtime.win-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling...

8.7CVSS6.9AI score0.01701EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/04/08 4:00 p.m.•14 views

Allocation of Resources Without Limits or Throttling

Overview Microsoft.AspNetCore.App.Runtime.win-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling wh...

8.7CVSS6.9AI score0.01701EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/04/08 4:00 p.m.•12 views

Allocation of Resources Without Limits or Throttling

Overview Microsoft.AspNetCore.App.Runtime.win-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling wh...

8.7CVSS7.9AI score0.01701EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/04/08 4:00 p.m.•11 views

Allocation of Resources Without Limits or Throttling

Overview Microsoft.AspNetCore.App.Runtime.linux-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling...

8.7CVSS6.9AI score0.01701EPSS
SaveExploits0References2
Rows per page
Query Builder