Lucene search
+L

6073 matches found

attackerkb
attackerkb
•added 2021/05/11 12:15 p.m.•9 views

CVE-2021-30504

In JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation...

7.5CVSS7AI score0.02307EPSS
SaveExploits0References3
Prion
Prion
•added 2021/05/11 12:15 p.m.•25 views

Design/Logic Flaw

In JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation...

5CVSS7.5AI score0.02307EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/11 12:00 a.m.•3 views

CVE-2021-30504: Uncontrolled Resource Consumption

In JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation...

7.5CVSS5.7AI score0.02307EPSS
SaveExploits0References2
OSV
OSV
•added 2021/05/06 1:15 p.m.•6 views

DEBIAN-CVE-2020-28009

Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow because getstdinput allows unbounded reads that are accompanied by unbounded increases in a certain size variable. NOTE: exploitation may be impractical because of the execution time needed to overflow multiple days...

7.8CVSS7.6AI score0.00468EPSS
SaveExploits1References1
Prion
Prion
•added 2021/05/06 1:15 p.m.•36 views

Integer overflow

Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow because getstdinput allows unbounded reads that are accompanied by unbounded increases in a certain size variable. NOTE: exploitation may be impractical because of the execution time needed to overflow multiple days...

7.2CVSS8.7AI score0.00468EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/06 12:00 a.m.•3 views

CVE-2020-28009: Integer Overflow or Wraparound

Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow because getstdinput allows unbounded reads that are accompanied by unbounded increases in a certain size variable. NOTE: exploitation may be impractical because of the execution time needed to overflow multiple days...

7.8CVSS7.6AI score0.00468EPSS
SaveExploits1References2
OSV
OSV
•added 2021/05/04 1:30 p.m.•12 views

UBUNTU-CVE-2020-28009

Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow because getstdinput allows unbounded reads that are accompanied by unbounded increases in a certain size variable. NOTE: exploitation may be impractical because of the execution time needed to overflow multiple days...

7.8CVSS7.6AI score0.00468EPSS
SaveExploits1References4
Veracode
Veracode
•added 2021/05/02 5:48 a.m.•56 views

Denial Of Service (DoS)

xen is vulnerable to denial of service. An out-of-memory occurs when an unbounded queue of single threaded events are received faster than the thread is able to handle...

6.5CVSS6.4AI score0.00361EPSS
SaveExploits0References6Affected Software1
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•23 views

SUSE: Security Advisory (SUSE-SU-2020:3375-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.04417EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•40 views

SUSE: Security Advisory (SUSE-SU-2017:2326-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.9CVSS8.1AI score0.04448EPSS
SaveExploits0References14
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•25 views

SUSE: Security Advisory (SUSE-SU-2017:2541-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.6AI score0.04028EPSS
SaveExploits0References17
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•36 views

SUSE: Security Advisory (SUSE-SU-2016:0473-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.4AI score0.90987EPSS
SaveExploits19References12
OSV
OSV
•added 2021/04/14 8:04 p.m.•51 views

GO-2021-0061 Denial of service in gopkg.in/yaml.v2

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

5.5CVSS6AI score0.00415EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/04/14 12:00 a.m.•6 views

PT-2021-9103 · Go +5 · Github.Com/Tendermint/Tendermint +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to the support of Gzip compression in request bodies and the lack of limiting response body sizes. This can allow a malicious serve...

7.5CVSS7AI score0.01134EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
•added 2021/04/14 12:00 a.m.•10 views

PT-2021-23588 · Linux Mint +1 · Linuxmint +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to unbounded alias chasing in YAML files. A maliciously crafted YAML file can cause the system to consume significant system...

7.5CVSS6.4AI score0.017EPSS
SaveExploits1References24
Code423n4
Code423n4
•added 2021/04/07 12:00 a.m.•27 views

Impossible to call withdrawReward fails due to run out of gas

Handle s1m0 Vulnerability details Impact The withdrawReward fails due to the loop at . From my testing the dayDiff would be 18724 and with a gasLimit of 9500000 it stops at iteration 270 due to the fact that lastUpdatedDay is not initialized so is 0. Other than that it could run out of gas also f...

6.8AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2021/03/24 12:00 a.m.•30 views

Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2021-1685)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.04417EPSS
SaveExploits0References2
OSV
OSV
•added 2021/03/15 9:05 p.m.•11 views

USN-4787-1 jq vulnerability

It was discovered that jq did not perform sufficient bounds checking, resulting in unbounded resource consumption. An attacker could use this vulnerability to cause a denial of service...

7.8CVSS7.3AI score0.05333EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/03/11 12:55 a.m.•44 views

CVE-2020-1898

The fbunserialize function did not impose a depth limit for nested deserialization. That meant a maliciously constructed string could cause deserialization to recurse, leading to stack exhaustion. This issue affected HHVM prior to v4.32.3, between versions 4.33.0 and 4.56.0, 4.57.0, 4.58.0, 4.58....

7.5AI score0.01211EPSS
SaveExploits0References2
OSV
OSV
•added 2021/03/08 5:15 a.m.•15 views

UBUNTU-CVE-2021-23351

The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service DoS via the parseVersion1 function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It will read from the connection until it finds a newline. Since no limits are implemented in t...

4.9CVSS5.8AI score0.01871EPSS
SaveExploits0References6
Rows per page
Query Builder