Lucene search
+L

1864 matches found

OSV
OSV
added 2022/05/13 1:44 a.m.18 views

GHSA-VQ76-RXX3-4R4R OpenStack Nova DoS by rebuilding the same instance with a new image multiple times

An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was...

8.6CVSS6.5AI score0.01973EPSS
SaveExploits0References9
OSV
OSV
added 2022/05/13 1:16 a.m.33 views

GHSA-H62F-WM92-2CMW Docker Registry has Allocation of Resources Without Limits or Throttling

Docker Registry before 2.6.2 in Docker Distribution does not properly restrict the amount of content accepted from a user, which allows remote attackers to cause a denial of service memory consumption via the manifest endpoint. Specific Go Packages Affected...

7.5CVSS7.2AI score0.03192EPSS
SaveExploits0References9
OSV
OSV
added 2022/05/01 6:45 p.m.21 views

GHSA-CX59-CP6C-9FR8 pyftpdlib vulnerable to allocation of resources without limits

The ftpSTOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote authenticated users to cause a denial of service via a STOU command...

7.1CVSS5.9AI score0.01782EPSS
SaveExploits0References9
CNVD
CNVD
added 2022/04/21 12:0 a.m.53 views

FANUC ROBOGUIDE Resource Management Error Vulnerability

FANUC ROBOGUIDE is a robot simulation software from FANUC Japan. A resource management error vulnerability exists in ROBOGUIDE v9.40083.00.05 and prior versions, which stems from an inability to properly control the allocation and maintenance of limited resources, and can be exploited by an...

6.1CVSS5.7AI score0.00664EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/03 12:1 a.m.16 views

GHSA-558X-2XJG-6232 Allocation of Resources Without Limits or Throttling in Spring Framework

In Spring Framework versions 5.3.0 - 5.3.16, 5.2.0.RELEASE - 5.2.19.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition...

6.5CVSS6.8AI score0.36081EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2022/04/03 12:1 a.m.62 views

Allocation of Resources Without Limits or Throttling in Spring Framework

In Spring Framework versions 5.3.0 - 5.3.16, 5.2.0.RELEASE - 5.2.19.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition...

6.5CVSS6.7AI score0.36081EPSS
SaveExploits0References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/25 12:0 a.m.9 views

The vulnerability of the Polkit library, related to uncontrolled resource allocation, allows a perpetrator to trigger a service failure.

The vulnerability of the Polkit library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

5.5CVSS6.2AI score0.0053EPSS
SaveExploits1References5Affected Software2
The Hacker News
The Hacker News
added 2022/03/24 1:6 p.m.26 views

How to Build a Custom Malware Analysis Sandbox

Before hunting malware, every researcher needs to find a system where to analyze it. There are several ways to do it: build your own environment or use third-party solutions. Today we will walk through all the steps of creating a custom malware sandbox where you can perform a proper analysis...

6.7AI score
SaveExploits0
OSV
OSV
added 2022/03/18 11:18 p.m.81 views

GHSA-JX8F-CPX7-FV47 Allocation of Resources Without Limits or Throttling in nvflare

Impact NVIDIA FLARE contains a vulnerability in Admin Interface, where an un-authorized attacker can cause Allocation of Resources Without Limits or Throttling, which may lead to cause system unavailable All versions before 2.0.16 are affected. Patches The patch will be included in nvflare==2.0.1...

7.5CVSS7.4AI score0.01058EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/03/17 9:15 p.m.6 views

CVE-2022-21822

NVIDIA FLARE contains a vulnerability in the admin interface, where an un-authorized attacker can cause Allocation of Resources Without Limits or Throttling, which may lead to cause system unavailable...

7.8CVSS7.1AI score0.01058EPSS
SaveExploits0References2
NVD
NVD
added 2022/03/17 9:15 p.m.32 views

CVE-2022-21822

NVIDIA FLARE contains a vulnerability in the admin interface, where an un-authorized attacker can cause Allocation of Resources Without Limits or Throttling, which may lead to cause system unavailable...

7.8CVSS0.01058EPSS
SaveExploits0References1
Prion
Prion
added 2022/03/17 9:15 p.m.21 views

Design/Logic Flaw

NVIDIA FLARE contains a vulnerability in the admin interface, where an un-authorized attacker can cause Allocation of Resources Without Limits or Throttling, which may lead to cause system unavailable...

7.8CVSS7.4AI score0.01058EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/03/17 8:30 p.m.130 views

CVE-2022-21822

NVIDIA FLARE (NVFlare) admin interface vulnerability (CVE-2022-21822) exposes an unauthenticated network-facing flaw that can enable an attacker to trigger Allocation of Resources Without Limits or Throttling, potentially rendering the system unavailable. Affected: NVFlare/NVFlare Admin Interface...

7.8CVSS7.3AI score0.01058EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/03/17 12:0 a.m.6 views

NVIDIA FLARE 安全漏洞

NVIDIA FLARE is an open source FL SDK from NVIDIA, Inc. that allows researchers and data scientists to adapt existing ML/DL workflows to a federated paradigm and enables platform developers to build secure, privacy-preserving products for distributed multi-party collaboration. A security...

7.8CVSS7.3AI score0.01058EPSS
SaveExploits0References2
OSV
OSV
added 2022/03/01 12:0 a.m.29 views

GHSA-3382-R9Q8-4HFG HashiCorp Nomad vulnerable to Allocation of Resources Without Limits or Throttling

HashiCorp Nomad and Nomad Enterprise 1.x before 1.0.17, 1.1.x before 1.1.12, and 1.2.x before 1.2.6 is vulnerable to Allocation of Resources Without Limits or Throttling...

7.5CVSS7.4AI score0.01548EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/03/01 12:0 a.m.29 views

HashiCorp Nomad vulnerable to Allocation of Resources Without Limits or Throttling

HashiCorp Nomad and Nomad Enterprise 1.x before 1.0.17, 1.1.x before 1.1.12, and 1.2.x before 1.2.6 is vulnerable to Allocation of Resources Without Limits or Throttling...

7.5CVSS1AI score0.01548EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2022/02/11 11:15 a.m.26 views

CVE-2021-30325

Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure an...

6.7CVSS0.00145EPSS
SaveExploits0References1
Prion
Prion
added 2022/02/11 11:15 a.m.25 views

Design/Logic Flaw

Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure an...

4.6CVSS6.7AI score0.00145EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/02/11 10:40 a.m.38 views

CVE-2021-30325

Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure an...

6.7CVSS6.8AI score0.00145EPSS
SaveExploits0References1
Veracode
Veracode
added 2022/01/07 4:42 a.m.32 views

Denial Of Service (DoS)

org.apache.avro is vulnerable to denial of service. A remote attacker is able to crash the system by allocate excessive resources via an invalid input...

7.5CVSS4.1AI score0.0296EPSS
SaveExploits0References6Affected Software4
Rows per page
Query Builder