Lucene search
+L

467 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/23 12:00 a.m.•3 views

CVE-2023-23916: Allocation of Resources Without Limits or Throttling

An allocation of resources without limits or throttling vulnerability exists in curl...

6.5CVSS5.8AI score0.01742EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/21 12:00 a.m.•6 views

CVE-2022-31394: Allocation of Resources Without Limits or Throttling

Hyperium Hyper before 0.14.19 does not allow for customization of the maxheaderlistsize method in the H2 third-party software, allowing attackers to perform HTTP2 attacks...

7.5CVSS5.8AI score0.01076EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/20 12:00 a.m.•4 views

CVE-2023-24998: Allocation of Resources Without Limits or Throttling

Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new configuration option...

7.5CVSS7.2AI score0.48788EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/27 12:00 a.m.•10 views

CVE-2023-22740: Allocation of Resources Without Limits or Throttling

Discourse is an open source platform for community discussion. Versions prior to 3.1.0.beta1 beta tests-passed are vulnerable to Allocation of Resources Without Limits. Users can create chat drafts of an unlimited length, which can cause a denial of service by generating an excessive load on the...

6.5CVSS5.7AI score0.00683EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/26 12:00 a.m.•5 views

CVE-2023-22739: Allocation of Resources Without Limits or Throttling

Discourse is an open source platform for community discussion. Versions prior to 3.0.1 stable, 3.1.0.beta2 beta, and 3.1.0.beta2 tests-passed are subject to Allocation of Resources Without Limits or Throttling. As there is no limit on data contained in a draft, a malicious user can create an...

6.5CVSS5.7AI score0.00874EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/23 12:00 a.m.•4 views

CVE-2022-4723: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5...

6.5CVSS5.8AI score0.0065EPSS
SaveExploits1References2
Mend
Mend
•added 2022/10/14 12:00 a.m.•4 views

CVE-2022-3439

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0...

9.8CVSS0.0083EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/14 12:00 a.m.•4 views

CVE-2022-3439: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0...

9.8CVSS6.1AI score0.0083EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/13 12:00 a.m.•3 views

CVE-2022-3456: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0...

9.8CVSS6.5AI score0.00407EPSS
SaveExploits0References2
Mend
Mend
•added 2022/10/13 12:00 a.m.•5 views

CVE-2022-3456

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0...

9.8CVSS0.00407EPSS
SaveExploits0References6
Mend
Mend
•added 2022/10/07 12:00 a.m.•10 views

CVE-2022-3423

Allocation of Resources Without Limits or Throttling in GitHub repository nocodb/nocodb prior to 0.92.0...

7.3CVSS0.0229EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/06 12:00 a.m.•2 views

CVE-2022-3273: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...

9.8CVSS6AI score0.00554EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/30 12:00 a.m.•3 views

CVE-2022-3371: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3...

7.5CVSS7.3AI score0.01343EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/29 12:00 a.m.•3 views

CVE-2022-3364: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3...

7.5CVSS6.4AI score0.01179EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/29 12:00 a.m.•4 views

CVE-2022-39226: Allocation of Resources Without Limits or Throttling

Discourse is an open source discussion platform. In versions prior to 2.8.9 on the stable branch and prior to 2.9.0.beta10 on the beta and tests-passed branches, a malicious actor can add large payloads of text into the Location and Website fields of a user profile, which causes issues for other...

4.3CVSS5.5AI score0.01031EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/26 12:00 a.m.•2 views

CVE-2022-3295: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8...

7.5CVSS6.4AI score0.01163EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/26 12:00 a.m.•4 views

CVE-2022-3298: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8...

7.5CVSS6.4AI score0.01163EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/02 12:00 a.m.•7 views

CVE-2022-35220: Allocation of Resources Without Limits or Throttling

Teamplus Pro community discussion function has an ‘allocation of resource without limits or throttling’ vulnerability. A remote attacker with general user privilege posting a thread with large content can cause the receiving client device to allocate too much memory, leading to abnormal terminati...

7.7CVSS6.6AI score0.00981EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/20 12:00 a.m.•4 views

CVE-2022-2134: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling in GitHub repository inventree/inventree prior to 0.8.0...

7.1CVSS6.8AI score0.00853EPSS
SaveExploits1References3
Mend
Mend
•added 2022/06/20 12:00 a.m.•4 views

CVE-2022-2134

Allocation of Resources Without Limits or Throttling in GitHub repository inventree/inventree prior to 0.8.0...

7.1CVSS0.00853EPSS
SaveExploits1References4
Rows per page
Query Builder