Lucene search
+L

2812 matches found

Prion
Prion
•added 2019/07/25 2:15 p.m.•28 views

Code injection

Jsish 2.4.84 2.0484 is affected by: Uncontrolled Resource Consumption. The impact is: denial of service. The component is: function jsiValueGetString jsiUtils.c. The attack vector is: executing crafted javascript code. The fixed version is: after commit f3a8096e0ce44bbf36c1dcb6e603adf9c8670c39...

5CVSS7.6AI score0.01321EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/07/25 1:13 p.m.•118 views

CVE-2019-1010172

Jsish 2.4.84 2.0484 is affected by: Uncontrolled Resource Consumption. The impact is: denial of service. The component is: function jsiValueGetString jsiUtils.c. The attack vector is: executing crafted javascript code. The fixed version is: after commit f3a8096e0ce44bbf36c1dcb6e603adf9c8670c39...

7.5AI score0.01321EPSS
SaveExploits0References1
CVE
CVE
•added 2019/07/25 1:13 p.m.•58 views

CVE-2019-1010172

CVE-2019-1010172 affects Jsish 2.4.84/2.0484 and is caused by a resource management flaw in the function jsiValueGetString (jsiUtils.c), leading to Uncontrolled Resource Consumption and a denial of service when processing crafted JavaScript code. The attack vector is executing malicious JavaScrip...

7.5CVSS7.5AI score0.01321EPSS
SaveExploits0References1Affected Software1
ICS
ICS
•added 2019/07/23 12:00 a.m.•122 views

Mitsubishi Electric FR Configurator2

1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Low skill level to exploit Vendor: Mitsubishi Electric Equipment: Mitsubishi Electric FR Configurator2 Vulnerabilities: Improper Restriction of XML External Entity Reference, Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation...

7.1CVSS6AI score0.01019EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2019/07/19 4:13 p.m.•91 views

Regular Expression Denial of Service (ReDoS) in lodash

lodash prior to 4.7.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

6.5CVSS5.3AI score0.03162EPSS
SaveExploits1References9Affected Software4
OSV
OSV
•added 2019/07/17 9:15 p.m.•33 views

CVE-2019-1010266

lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

6.5CVSS6.4AI score
SaveExploits0References4
NVD
NVD
•added 2019/07/17 9:15 p.m.•24 views

CVE-2019-1010266

lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

6.5CVSS7.5AI score0.03162EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2019/07/17 9:15 p.m.•34 views

CVE-2019-1010266

lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

6.5CVSS6.8AI score0.03162EPSS
SaveExploits1References3
OSV
OSV
•added 2019/07/17 9:15 p.m.•12 views

UBUNTU-CVE-2019-1010266

lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

6.5CVSS6.7AI score0.03162EPSS
SaveExploits1References4
Prion
Prion
•added 2019/07/17 9:15 p.m.•33 views

Denial of service

lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

4CVSS7.5AI score0.03162EPSS
SaveExploits1References4Affected Software1
Debian CVE
Debian CVE
•added 2019/07/17 8:25 p.m.•35 views

CVE-2019-1010266

lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is:...

6.5CVSS6AI score0.03162EPSS
SaveExploits1
CVE
CVE
•added 2019/07/17 8:25 p.m.•188 views

CVE-2019-1010266

CVE-2019-1010266 is a lodash vulnerability affecting versions before 4.17.11, caused by Uncontrolled Resource Consumption (ReDoS) in the Date handling code. The attack relies on the library matching very long strings with a regular expression, leading to a Denial of Service. The fix is to upgrade...

6.5CVSS6.4AI score0.03162EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/07/11 12:00 a.m.•12 views

The vulnerability of the Red Hat Enterprise Linux operating system, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.

The vulnerability of the Red Hat Enterprise Linux operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions...

7.8CVSS5.5AI score0.01369EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2019/07/03 9:15 p.m.•36 views

CVE-2019-13074

A vulnerability in the FTP daemon on MikroTik routers through 6.44.3 could allow remote attackers to exhaust all available memory, causing the device to reboot because of uncontrolled resource management...

7.8CVSS7.5AI score0.02046EPSS
SaveExploits0References2
ICS
ICS
•added 2019/05/21 12:00 a.m.•120 views

Mitsubishi Electric MELSEC-Q Series Ethernet Module

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Mitsubishi Electric Equipment: MELSEC-Q series Ethernet module Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability may render the...

7.8CVSS7.7AI score0.0354EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2019/05/16 3:29 p.m.•31 views

CVE-2019-10113

An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. Making concurrent GET /api/v4/projects//languages requests may allow Uncontrolled Resource Consumption...

7.5CVSS7.1AI score0.0208EPSS
SaveExploits1References2
Prion
Prion
•added 2019/05/16 3:29 p.m.•28 views

Design/Logic Flaw

An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. Making concurrent GET /api/v4/projects//languages requests may allow Uncontrolled Resource Consumption...

5CVSS7.4AI score0.0208EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2019/05/16 3:29 p.m.•25 views

CVE-2019-10113

An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. Making concurrent GET /api/v4/projects//languages requests may allow Uncontrolled Resource Consumption...

7.5CVSS7.4AI score0.0208EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2019/05/16 2:27 p.m.•35 views

CVE-2019-10113

Removed by vendor...

7.5CVSS7.1AI score0.0208EPSS
SaveExploits1
CVE
CVE
•added 2019/05/16 2:27 p.m.•84 views

CVE-2019-10113

CVE-2019-10113 affects GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. Making concurrent GET /api/v4/projects//languages requests may lead to Uncontrolled Resource Consumption (DoS). The issue is tied to concurrent language-requests handling;...

7.5CVSS7.5AI score0.0208EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder