Lucene search
+L

6541 matches found

CVE
CVE
added 2025/05/09 9:34 a.m.169 views

CVE-2025-46392

CVE-2025-46392 describes an Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. The issue arises when loading untrusted configurations or using unusual usage patterns, leading to excessive resource use. The provided documents indicate that the Apache Commons Confi...

6.5CVSS6.6AI score0.01929EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2025/05/09 12:00 a.m.5 views

PT-2025-20548 · Apache +1 · Apache Commons Configuration +1

Name of the Vulnerable Software and Affected Versions: Apache Commons Configuration versions 1.x Description: The issue is related to Uncontrolled Resource Consumption in Apache Commons Configuration 1.x, which can lead to excessive resource consumption when loading untrusted configurations or...

7.3CVSS3.5AI score0.02054EPSS
SaveExploits0References21
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:00 a.m.14 views

The vulnerability of the Message routing profiles component of the BIG-IP access control and remote authentication solution allows a perpetrator to cause a service failure.

The vulnerability of the Message routing profiles component in the access control and remote authentication solution BIG-IP is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS6.2AI score0.00408EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2025/05/08 12:00 a.m.16 views

Ubuntu: Security Advisory (USN-7501-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.4AI score0.13624EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2025/05/08 12:00 a.m.15 views

Ubuntu: Security Advisory (USN-7501-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.4AI score0.13624EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2025/05/07 3:22 p.m.16 views

USN-7501-1: Django vulnerability

Elias Myllymäki discovered that Django incorrectly handled stripping large sequences of incomplete HTML tags. A remote attacker could possibly use this issue to cause Django to consume resources, leading to a denial of service...

5.3CVSS6.8AI score0.13624EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2025/05/06 2:59 p.m.11 views

django: Potential denial-of-service vulnerability in django.utils.text.wrap()

A potential denial of service vulnerability exists in django.utils.text.wrap and the wordwrap template filter. When processing extremely long strings, these functions may cause excessive resource consumption, potentially leading to service disruption...

7.5CVSS7.2AI score0.00799EPSS
SaveExploits0References6
Redos
Redos
added 2025/05/06 12:00 a.m.11 views

ROS-20250505-01

The vulnerability in the Golang programming language SSH server is related to the fact that the application does not control internal resources consumption in the ssh packet when working with clients that are slow or do not perform key exchange at all. or do not perform key exchange at all...

7.5CVSS7AI score0.00921EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/05 6:32 a.m.27 views

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to a possible denial-of- service for Python-idna CVE-2024-3651

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to a possible denial-of- service for Python-idna CVE-2024-3651. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-3651 DESCRIPTION: idna could allow a local user to...

7.5CVSS6.5AI score0.01386EPSS
SaveExploits1Affected Software1
RedHat Linux
RedHat Linux
added 2025/05/05 1:17 a.m.53 views

libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header

A flaw was found in libsoup. The implementation of HTTP range requests is vulnerable to a resource consumption attack. This flaw allows a malicious client to request the same range many times in a single HTTP request, causing the server to use large amounts of memory. This does not allow for a fu...

5.3CVSS5.8AI score0.00655EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2025/05/05 12:00 a.m.11 views

The vulnerability of the multimedia platform GPAC, related to uncontrolled resource consumption, allows a violator to trigger a service failure.

The vulnerability of the multimedia platform GPAC is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a hacker to cause a service failure...

7.8CVSS6.6AI score0.00318EPSS
SaveExploits0References5Affected Software4
RedhatCVE
RedhatCVE
added 2025/05/04 1:08 a.m.23 views

CVE-2024-55909

IBM Concert Software 1.0.0 through 1.0.5 could allow an authenticated user to cause a denial of service due to the expansion of archive files without controlling resource consumption...

6.5CVSS6.5AI score0.00367EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/03 5:41 a.m.29 views

BIT-ELASTICSEARCH-2024-52979 Elasticsearch Uncontrolled Resource Consumption vulnerability

Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash...

7.5CVSS6.3AI score0.00606EPSS
SaveExploits0References2
OSV
OSV
added 2025/05/02 1:15 a.m.5 views

CVE-2024-55909

IBM Concert Software 1.0.0 through 1.0.5 could allow an authenticated user to cause a denial of service due to the expansion of archive files without controlling resource consumption...

6.5CVSS8.2AI score
SaveExploits0References1
NVD
NVD
added 2025/05/02 1:15 a.m.24 views

CVE-2024-55909

IBM Concert Software 1.0.0 through 1.0.5 could allow an authenticated user to cause a denial of service due to the expansion of archive files without controlling resource consumption...

6.5CVSS0.00367EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/02 12:35 a.m.69 views

CVE-2024-55909

IBM Concert Software versions 1.0.0–1.0.5 are affected by a denial-of-service vulnerability stemming from uncontrolled resource consumption when expanding archive files. The authenticated attacker could trigger resource exhaustion, leading to DoS. The issue is documented in IBM’s Security Bulleti...

6.5CVSS6.3AI score0.00367EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/05/02 12:35 a.m.29 views

CVE-2024-55909 IBM Concert Software denial of service

IBM Concert Software 1.0.0 through 1.0.5 could allow an authenticated user to cause a denial of service due to the expansion of archive files without controlling resource consumption...

6.5CVSS0.00367EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/02 12:35 a.m.10 views

CVE-2024-55909 IBM Concert Software denial of service

IBM Concert Software 1.0.0 through 1.0.5 could allow an authenticated user to cause a denial of service due to the expansion of archive files without controlling resource consumption...

6.5CVSS6.3AI score0.00367EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/01 8:02 p.m.11 views

Security Bulletin: IBM Watson Speech Services Cartridge v4.8.8 is vulnerable to an uncontrolled resource consumption in Apache Commons IO [CVE-2024-47554]

Summary IBM Watson Speech Services Cartridge is vulnerable to an uncontrolled resource consumption in Apache Commons IO, due to a flaw in the org.apache.commons.io.input.XmlStreamReader class that may allow maliciously crafted input to excessively consume CPU resources while processing...

4.3CVSS6.3AI score0.01241EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/05/01 3:16 p.m.16 views

CVE-2025-23246

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it allows a guest to consume uncontrolled resources. A successful exploit of this vulnerability might lead to denial of service...

5.5CVSS0.00159EPSS
SaveExploits0References1
Rows per page
Query Builder