Lucene search
+L

747982 matches found

OSV
OSV
•added 2026/10/08 12:55 a.m.•5 views

CLEANSTART-2026-IX04206 Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS)

Security vulnerability affects the apache-hive package. Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks DOS...

6.5CVSS7AI score0.01647EPSS
SaveExploits0References3
OSV
OSV
•added 2026/10/08 12:55 a.m.•7 views

CLEANSTART-2026-QZ30630 Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS)

Security vulnerability affects the apache-hive package. Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS...

6.5CVSS6.8AI score0.01905EPSS
SaveExploits0References3
OSV
OSV
•added 2026/10/08 12:55 a.m.•5 views

CLEANSTART-2026-PD76449 Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS)

Security vulnerability affects the apache-hive package. Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS...

6.5CVSS6.6AI score0.01253EPSS
SaveExploits1References3
OSV
OSV
•added 2026/10/08 12:55 a.m.•5 views

CLEANSTART-2026-UI28748 Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS)

Security vulnerability affects the apache-hive package. Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS...

6.5CVSS7AI score0.02526EPSS
SaveExploits0References3
OSV
OSV
•added 2026/10/08 12:55 a.m.•7 views

CLEANSTART-2026-YW99186 Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS)

Security vulnerability affects the apache-hive package. Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS...

5.8CVSS6.8AI score0.01548EPSS
SaveExploits1References3
OSV
OSV
•added 2026/10/08 12:55 a.m.•6 views

CLEANSTART-2026-UF90267 Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS)

Security vulnerability affects the apache-hive package. Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS...

6.5CVSS6.6AI score0.02061EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/08 12:48 a.m.•25 views

POC_CVE-2024-12537

CVE-2024-12537 Open WebUI Code Format DoS Lab This repository contains a local, isolated reproduction lab and nuclei template candidate for CVE-2024-12537, an unauthenticated denial-of-service vulnerability in Open WebUI's code formatting endpoint. The lab does not send large denial-of-service...

7.5AI score0.00886EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/10/08 12:44 a.m.•14 views

EUVD-2026-94653

When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can exploi...

8.5CVSS6.7AI score0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/08 12:44 a.m.•43 views

CVE-2026-87679

When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can exploi...

8.5CVSS0.00161EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/08 12:44 a.m.•8 views

CVE-2026-87679

When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can exploi...

8.5CVSS6.7AI score0.00161EPSS
SaveExploits0References1
OSV
OSV
•added 2026/10/08 12:43 a.m.•8 views

CLEANSTART-2026-PE22489 Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack when the power operator (^) is used with a BigDecimal or...

Security vulnerability affects the apache-nifi-registry package. Applications that evaluate user-supplied Spring Expression Language SpEL expressions may be vulnerable to a Denial of Service DoS attack when the power operator ^ is used with a BigDecimal or BigInteger operand and a large exponent...

7.5CVSS6.6AI score0.0046EPSS
SaveExploits0References3
OSV
OSV
•added 2026/10/08 12:41 a.m.•7 views

CLEANSTART-2026-DB26866 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

4.9CVSS5.9AI score0.0044EPSS
SaveExploits0References3
OSV
OSV
•added 2026/10/08 12:41 a.m.•7 views

CLEANSTART-2026-RE29915 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

6.5CVSS5.9AI score0.0042EPSS
SaveExploits0References3
OSV
OSV
•added 2026/10/08 12:41 a.m.•6 views

CLEANSTART-2026-DZ11715 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130)

Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...

6.5CVSS5.9AI score0.0042EPSS
SaveExploits0References3
OSV
OSV
•added 2026/10/08 12:41 a.m.•7 views

CLEANSTART-2026-VQ49789 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

6.5CVSS5.9AI score0.0042EPSS
SaveExploits0References3
OSV
OSV
•added 2026/10/08 12:41 a.m.•7 views

CLEANSTART-2026-VB66019 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

6.5CVSS5.9AI score0.0042EPSS
SaveExploits0References3
OSV
OSV
•added 2026/10/08 12:40 a.m.•7 views

CLEANSTART-2026-DU50548 malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop

CVE-2026-39830 affects multiple packages. A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. See references for individual vulnerability details...

9.1CVSS6.6AI score0.00621EPSS
SaveExploits0References3
OSV
OSV
•added 2026/10/08 12:37 a.m.•8 views

CLEANSTART-2026-FO54280 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

CVE-2026-25680 affects multiple packages. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. See references for individual vulnerability details...

6.5CVSS6.3AI score0.0046EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/08 12:22 a.m.•16 views

cve-2020-0022

cve-2020-0022 poc para cve-2020-0022 uso gcc poc.c -lbluetooth -o poc poc MACADDR información Este poc debería ser estable en android 8.1.0, una vez que entra en el truncamiento de paquetes, se bloquea. Pero puede ser muy inestable, en Samsung s9 plus seguramente inestable. Ejecutar poc en...

8.8CVSS8AI score0.06052EPSS
SaveExploits8
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•6 views

PT-2026-108151

Name of the Vulnerable Software and Affected Versions music-metadata versions prior to 11.16.0 Description The ID3v2 parser trusts the syncsafe tag-size field and allocates the complete tag body before verifying if the input contains the declared bytes. A specially crafted file such as MP3, FLAC,...

6.2CVSS5.8AI score0.00129EPSS
SaveExploits0References8
Rows per page
Query Builder