Lucene search
+L

1322 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/11 12:00 a.m.•12 views

CVE-2021-38566: Uncontrolled Recursion

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows stack consumption during recursive processing of embedded XML nodes...

7.5CVSS5.7AI score0.00961EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/08/11 12:00 a.m.•18 views

PT-2021-22218

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 10.1.4 Description An issue was discovered that allows stack consumption via recursive function calls during the handling of XFA forms or link objects. Recommendations For Foxit Reader and PhantomP...

7.5CVSS0.00961EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/08/11 12:00 a.m.•13 views

PT-2021-22215

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader versions prior to 11.0.1 Foxit PDF Editor versions prior to 11.0.1 Description An issue in the software allows stack consumption during recursive processing of embedded XML nodes. Recommendations For Foxit PDF Reader versions...

7.5CVSS0.00961EPSS
SaveExploits0References3
Mageia
Mageia
•added 2021/07/10 8:00 p.m.•50 views

Updated libcroco and gettext packages fix security vulnerability

libcroco through 0.6.13 has excessive recursion in crparserparseanycore in cr-parser.c, leading to stack consumption CVE-2020-12825...

7.1CVSS4.6AI score0.02319EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2021/07/09 12:15 p.m.•41 views

CVE-2021-36154

HTTP2ToRawGRPCServerCodec in gRPC Swift 1.1.1 and earlier allows remote attackers to deny service via the delivery of many small messages within a single HTTP/2 frame, leading to Uncontrolled Recursion and stack consumption...

7.5CVSS6.9AI score0.02082EPSS
SaveExploits0References3
NVD
NVD
•added 2021/07/09 12:15 p.m.•37 views

CVE-2021-36154

HTTP2ToRawGRPCServerCodec in gRPC Swift 1.1.1 and earlier allows remote attackers to deny service via the delivery of many small messages within a single HTTP/2 frame, leading to Uncontrolled Recursion and stack consumption...

7.5CVSS0.02082EPSS
SaveExploits0References3
Mend
Mend
•added 2021/07/09 11:02 a.m.•12 views

CVE-2021-36154

HTTP2ToRawGRPCServerCodec in gRPC Swift 1.1.1 and earlier allows remote attackers to deny service via the delivery of many small messages within a single HTTP/2 frame, leading to Uncontrolled Recursion and stack consumption...

8.7CVSS0.02082EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2021/07/07 12:00 a.m.•17 views

Huawei EulerOS: Security Advisory for libcroco (EulerOS-SA-2021-2143)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS7.2AI score0.02319EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2021/07/06 12:00 a.m.•36 views

EulerOS Virtualization 3.0.2.2 : libcroco (EulerOS-SA-2021-2143)

According to the version of the libcroco package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - libcroco through 0.6.13 has excessive recursion in crparserparseanycore in cr-parser.c, leading to stack consumption.CVE-2020-12825...

7.1CVSS6.6AI score0.02319EPSS
SaveExploits1References2
Rosalinux
Rosalinux
•added 2021/07/02 5:41 p.m.•66 views

Advisory ROSA-SA-2021-1949

Software: perl 5.16.3 OS: Cobalt 7.9 CVE-ID: CVE-2014-4330 CVE-Crit: MEDIUM CVE-DESC: The Dumper method in Data :: Dumper before 2.154, which was used in Perl 5.20.1 and earlier, allows context-sensitive attackers to cause a denial of service stack consumption and failure via an array reference...

9.8CVSS7.9AI score0.12768EPSS
SaveExploits8
Rosalinux
Rosalinux
•added 2021/07/02 5:11 p.m.•63 views

Advisory ROSA-SA-2021-1865

Software: libcroco 0.6.12 OS: Cobalt 7.9 CVE-ID: CVE-2017-7960 CVE-Crit: MEDIUM CVE-DESC: The crinputnewfromuri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service heap-based buffer re-read via a crafted CSS file. CVE-STATUS: default CVE-REV:...

7.1CVSS7.1AI score0.1294EPSS
SaveExploits7
osv_mgasa
osv_mgasa
•added 2021/06/29 5:31 p.m.•25 views

MGASA-2021-0299 Updated re2c package fixes a security vulnerability

re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags CVE-2018-21232...

5.5CVSS5.4AI score0.01468EPSS
SaveExploits1References3
Mageia
Mageia
•added 2021/06/29 5:31 p.m.•47 views

Updated re2c package fixes a security vulnerability

re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags CVE-2018-21232...

5.5CVSS4.9AI score0.01468EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•73 views

SUSE: Security Advisory (SUSE-SU-2016:1581-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.1AI score0.36009EPSS
SaveExploits25References30
osv_debian
osv_debian
•added 2021/05/06 1:15 p.m.•9 views

DEBIAN-CVE-2020-28019

Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequences. This occurs because use of certain getc functions is mishandled when a client uses BDAT instead of DATA...

7.5CVSS7.5AI score0.61664EPSS
SaveExploits1References1
NVD
NVD
•added 2021/05/06 1:15 p.m.•41 views

CVE-2020-28019

Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequences. This occurs because use of certain getc functions is mishandled when a client uses BDAT instead of DATA...

7.5CVSS0.61664EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/05/06 4:03 a.m.•40 views

CVE-2020-28019

Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequences. This occurs because use of certain getc functions is mishandled when a client uses BDAT instead of DATA...

8.5AI score0.61664EPSS
SaveExploits1References1
CVE
CVE
•added 2021/05/06 4:03 a.m.•500 views

CVE-2020-28019

CVE-2020-28019 is an Exim 4 vulnerability: versions prior to 4.94.2 suffer from Improper Initialization that can cause recursion-based stack consumption or other consequences when a client uses BDAT instead of DATA. The issue stems from how certain getc functions are mishandled in that BDAT flow,...

7.5CVSS7.5AI score0.61664EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/05/06 4:03 a.m.•8 views

CVE-2020-28019

Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequences. This occurs because use of certain getc functions is mishandled when a client uses BDAT instead of DATA...

8.7CVSS0.61664EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
•added 2021/05/06 4:03 a.m.•92 views

CVE-2020-28019

Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequences. This occurs because use of certain getc functions is mishandled when a client uses BDAT instead of DATA...

7.5CVSS7.5AI score0.61664EPSS
SaveExploits1References1
Rows per page
Query Builder