Lucene search
+L

6630 matches found

Cloud Foundry
Cloud Foundry
added 2024/03/18 12:00 a.m.84 views

USN-6505-1: nghttp2 vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that nghttp2 incorrectly handled request cancellation. A remote attacker could possibly use this issue to cause nghttp2 to consume resources, leading to a denial of service. Update...

7.5CVSS8.1AI score0.99999EPSS
SaveExploits21Affected Software3
Veracode
Veracode
added 2024/03/17 5:27 p.m.24 views

Uncontrolled Resource Consumption

avahi is vulnerable to the Uncontrolled Resource Consumption. avahi library is vulnerable to a flaw that allows an unprivileged user to trigger a dbus call, leading to a crash of the avahi daemon...

5.5CVSS6.4AI score0.00386EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2024/03/15 8:15 p.m.28 views

CVE-2024-27100

Discourse is an open source platform for community discussion. In affected versions the endpoints for suspending users, silencing users and exporting CSV files weren't enforcing limits on the sizes of the parameters that they accept. This could lead to excessive resource consumption which could...

6.5CVSS6.3AI score0.00555EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/03/15 7:21 p.m.45 views

CVE-2024-27100 Denial of service via Staff Actions in Discourse

Discourse is an open source platform for community discussion. In affected versions the endpoints for suspending users, silencing users and exporting CSV files weren't enforcing limits on the sizes of the parameters that they accept. This could lead to excessive resource consumption which could...

6.5CVSS6.5AI score0.00555EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/03/15 7:21 p.m.34 views

CVE-2024-27100 Denial of service via Staff Actions in Discourse

Discourse is an open source platform for community discussion. In affected versions the endpoints for suspending users, silencing users and exporting CSV files weren't enforcing limits on the sizes of the parameters that they accept. This could lead to excessive resource consumption which could...

6.5CVSS6.5AI score0.00555EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/15 7:21 p.m.26 views

CVE-2024-27100 Denial of service via Staff Actions in Discourse

Discourse is an open source platform for community discussion. In affected versions the endpoints for suspending users, silencing users and exporting CSV files weren't enforcing limits on the sizes of the parameters that they accept. This could lead to excessive resource consumption which could...

6.5CVSS6.4AI score
SaveExploits0References4
NVD
NVD
added 2024/03/15 9:15 a.m.19 views

CVE-2024-24975

Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block that will be processed by the syntax highlighter, allowing an attacker to send a very large code block and crash the mobile app...

6.5CVSS4.1AI score0.00406EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/15 9:07 a.m.32 views

CVE-2024-24975 Denial of Service for mobile app users due to automatic code highlighting

Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block that will be processed by the syntax highlighter, allowing an attacker to send a very large code block and crash the mobile app...

3.5CVSS4.5AI score0.00406EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/15 9:07 a.m.71 views

CVE-2024-24975

Mattermost Mobile: CVE-2024-24975 affects Mattermost Mobile before 2.13.0. The issue is uncontrolled resource consumption caused by the syntax highlighter not limiting the size of code blocks, which can crash the mobile app. Affected component is the syntax highlighter in Mattermost Mobile; root ...

6.5CVSS4AI score0.00406EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/03/15 9:07 a.m.8 views

CVE-2024-24975 Denial of Service for mobile app users due to automatic code highlighting

Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block that will be processed by the syntax highlighter, allowing an attacker to send a very large code block and crash the mobile app...

3.5CVSS6AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/03/15 9:07 a.m.16 views

CVE-2024-24975 Denial of Service for mobile app users due to automatic code highlighting

Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block that will be processed by the syntax highlighter, allowing an attacker to send a very large code block and crash the mobile app...

3.5CVSS7AI score0.00406EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/15 12:00 a.m.10 views

PT-2024-20683 · Mattermost · Mattermost Mobile

Name of the Vulnerable Software and Affected Versions: Mattermost Mobile versions prior to 2.13.0 Description: The issue is related to uncontrolled resource consumption, where the syntax highlighter fails to limit the size of the code block it processes. This allows an attacker to send a very lar...

6.5CVSS7.2AI score0.00406EPSS
SaveExploits0References8
CNVD
CNVD
added 2024/03/15 12:00 a.m.13 views

Mattermost Mobile Uncontrolled Resource Consumption Vulnerability

Mattermost Mobile is a team collaboration and communication tool that supports cross-platform use. Mattermost Mobile suffers from an uncontrolled resource consumption vulnerability that can be exploited by an attacker to crash the mobile application by sending very large chunks of code...

6.5CVSS6.8AI score0.00406EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/03/15 12:00 a.m.120 views

Apache Tomcat Denial of Service Vulnerability (CNVD-2024-13569)

Apache Tomcat is the United States Apache Apache Foundation of a lightweight Web application server. The program implements the Servlet and JavaServer Page JSP support. Apache Tomcat has a denial of service vulnerability that can be exploited by an attacker to increase resource consumption and...

6.3CVSS6.5AI score0.02313EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/15 12:00 a.m.11 views

Mattermost 安全漏洞

Mattermost Mobile is a team collaboration and communication tool that supports cross-platform use. Mattermost Mobile suffers from an uncontrolled resource consumption vulnerability that can be exploited by an attacker to crash the mobile application by sending very large chunks of code...

6.5CVSS6.8AI score0.00406EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/03/15 12:00 a.m.25 views

Ubuntu: Security Advisory (USN-6694-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.2AI score0.02006EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
added 2024/03/14 9:39 p.m.210 views

CVE-2024-23672

A denial of service DoS vulnerability present in the Apache Tomcat package arises from an incomplete cleanup process. Specifically, WebSocket clients can perpetuate WebSocket connections without proper termination, thereby causing a sustained drain on system resources. This vulnerability...

6.3CVSS7.2AI score0.02313EPSS
SaveExploits0References4
NVD
NVD
added 2024/03/14 5:15 p.m.22 views

CVE-2023-35191

Uncontrolled resource consumption for some IntelR SPS firmware versions may allow a privileged user to potentially enable denial of service via network access...

6.8CVSS6.3AI score0.00516EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/03/14 4:45 p.m.26 views

CVE-2023-35191

Uncontrolled resource consumption for some IntelR SPS firmware versions may allow a privileged user to potentially enable denial of service via network access...

6.8CVSS6.8AI score0.00516EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/03/14 4:45 p.m.35 views

CVE-2023-35191

Uncontrolled resource consumption for some IntelR SPS firmware versions may allow a privileged user to potentially enable denial of service via network access...

6.8CVSS6.6AI score0.00516EPSS
SaveExploits0References2
Rows per page
Query Builder