6541 matches found
CVE-2022-30791
CODESYS V3 contains a vulnerability in the CmpBlkDrvTcp component where uncontrolled resource consumption can cause the system to block new TCP connections. Existing connections remain unaffected. This CVE-2022-30791 entry is corroborated by multiple sources (e.g., NVD), but the connected documen...
PT-2022-20316 · 3S Smart Software Solutions · Codesys V3
Name of the Vulnerable Software and Affected Versions: CODESYS V3 affected versions not specified Description: An issue in CmpBlkDrvTcp of CODESYS V3 allows an unauthorized attacker to block new TCP connections due to uncontrolled resource consumption. Existing connections are not affected...
PT-2022-20317 · 3S Smart Software Solutions · Codesys V3
Name of the Vulnerable Software and Affected Versions: CODESYS V3 affected versions not specified Description: An uncontrolled resource consumption issue in the CmpChannelServer of CODESYS V3 allows an unauthorized attacker to block new communication channel connections. Existing connections are...
The vulnerability in the web interface of the Cisco Smart Software Manager On-Prem administration tool allows a perpetrator to trigger a service failure.
The vulnerability in the web interface of the Cisco Smart Software Manager On-Prem administration tool is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
Important: golang
Issue Overview: A validation flaw was found in golang. When invoking functions from WASM modules built using GOARCH=wasm GOOS=js, passing very large arguments can cause portions of the module to be overwritten with data from the arguments. The highest threat from this vulnerability is to integrit...
django: Denial-of-service possibility in UserAttributeSimilarityValidator
A resource-consumption flaw was found in django's UserAttributeSimilarityValidator, where it incurred significant overhead evaluating any submitted password that was artificially large relative to comparison values. A network attacker could exploit this flaw to cause a denial of service...
Exploit for Uncontrolled Resource Consumption in Apache Tomcat
CVE-2022-29885 by 1vere$k Apache Tomcat DoS CVE-2022-29885 E...
Exploit for Uncontrolled Resource Consumption in Quic-Go_Project Quic-Go
QUIC-attacks CVE-2022-30591 The current repository serves t...
The vulnerability of the application deployment automation tool in Kubernetes ArgoCD, related to uncontrolled resource consumption, allows a malicious actor to trigger service failures.
The vulnerability of the application deployment automation tool in Kubernetes ArgoCD is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a malicious actor to trigger service failures remotely...
Uncontrolled Resource Consumption in Spray JSON
Recursive decent parsers are susceptible too StackOverflowExceptions on too deeply nested structures as currently "open" parsing state is kept on the stack...
GHSA-WW3V-6XJF-JV28 Uncontrolled Resource Consumption in Spray JSON
Recursive decent parsers are susceptible too StackOverflowExceptions on too deeply nested structures as currently "open" parsing state is kept on the stack...
API Security: Best Practices for a Changing Attack Surface
API usage is skyrocketing. According to the latest State of the API Report, API requests increased by 56% last year to a total of 855 million, and Google says the growth isn’t expected to slow any time soon. APIs – short for application programming interfaces – are a critical component of how...
The vulnerability of the sql/sql_window.cc component of the MariaDB database management system, which allows a hacker to cause a service failure.
The vulnerability of the sql/sqlwindow.cc component in the MariaDB database management system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
ROS-20220620-01
A vulnerability in the program monitoring the communication between the container manager and the conmon runtime environment is related to the fact that the application does not properly monitor the consumption of internal resources within the request ExecSync. Exploitation of the vulnerability...
pg-native and libpq vulnerable to uncontrolled resource consumption
pg-native before 3.0.1 and libpq before 1.8.10 are vulnerable to Denial of Service DoS when the addons attempt to cast the second argument to an array and fail. This happens for every non-array argument passed. Note: pg-native is a mere binding to npm's libpq library, which in turn has the addons...
GHSA-RVGF-69J7-XH78 Uncontrolled Resource Consumption in @discordjs/opus
Improperly handled errors in @discordjs/opus cause hard crashes instead of returning the error to user land. All versions of package @discordjs/opus = 0.7.0 are vulnerable to Denial of Service DoS when trying to encode using an encoder with zero channels, or a non-initialized buffer. This leads t...
Uncontrolled Resource Consumption in OPCFoundation.NetStandard.Opc.Ua.Core
A vulnerability was discovered in the OPC UA .NET Standard Stack that allows a malicious client to cause a server to trigger an out of memory exception by sending a large number of message chunks...
GHSA-VHFW-V69P-CRCW Uncontrolled Resource Consumption in OPCFoundation.NetStandard.Opc.Ua.Core
A vulnerability was discovered in the OPC UA .NET Standard Stack that allows a malicious client to cause a server to trigger an out of memory exception by sending a large number of message chunks...
