Lucene search
+L

8 matches found

OSV
OSV
added 2026/07/17 8:54 p.m.5 views

CVE-2026-54490 websocket-driver: Resource limit bypass via message compression

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, if this library is used with the permessage-deflate extension, a WebSocket server or client can be made to accept messages that are larger than the configured maximum message size because the limit is checked...

6.3CVSS5.3AI score
SaveExploits0References4
Patchstack
Patchstack
added 2026/07/15 10:8 p.m.31 views

NPM: websocket-driver: Resource limit bypass via message compression

NPM: websocket-driver: Resource limit bypass via message compression vulnerability discovered by ? in WordPress Npm websocket-driver versions 0.7.5...

6.3CVSS6.1AI score0.00263EPSS
SaveExploits0References3Affected Software1
Snyk
Snyk
added 2026/07/11 2:34 p.m.8 views

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.5CVSS6.1AI score0.00173EPSS
SaveExploits0References2
RubySec
RubySec
added 2026/06/04 12:0 a.m.8 views

Resource limit bypass via message compression

Impact If this library is used in tandem with the permessage-deflate extension, a WebSocket server or client can be made to accept messages that are larger than the configured maximum message size. This is because this limit is checked against the message frames' length headers, which give the si...

6.3CVSS5.9AI score0.00324EPSS
SaveExploits0References1Affected Software1
Snyk
Snyk
added 2026/02/24 1:43 a.m.3 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the SVG decoding process. An attacker can cause excessive memory consumption and process termination by submitting a specially crafted SVG image file. Remediation A fix was pushed...

8.7CVSS5.6AI score0.00501EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/11/04 12:0 a.m.17 views

RHEL 6 : openstack-nova (RHSA-2013:1199)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:1199 advisory. The openstack-nova packages provide OpenStack Compute Nova, which provides services for provisioning, managing, and using virtual machine...

6CVSS8.3AI score0.04863EPSS
SaveExploits7References17
Veracode
Veracode
added 2019/05/02 4:48 a.m.45 views

Denial Of Service (DoS)

The openstack-nova packages provide OpenStack Compute Nova, which provides services for provisioning, managing, and using virtual machine instances. It was found that the fixes for CVE-2013-1664 and CVE-2013-1665, released via RHSA-2013:0657, did not fully correct the issues in the Extensible...

6CVSS9.2AI score0.04863EPSS
SaveExploits7References13Affected Software1
RedHat Linux
RedHat Linux
added 2013/09/03 8:16 p.m.45 views

Moderate: Red Hat Security Advisory: openstack-nova security and bug fix update

Updated openstack-nova packages that fix multiple security issues and various bugs are now available for Red Hat OpenStack 3.0. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

6CVSS7.3AI score0.02703EPSS
SaveExploits6References11
Rows per page
Query Builder