Lucene search
+L

3419 matches found

Github Security Blog
Github Security Blog
•added 2021/03/18 7:55 p.m.•66 views

Pillow Denial of Service by Uncontrolled Resource Consumption

Pillow before 8.1.2 allows attackers to cause a denial of service memory consumption because the reported size of a contained image is not properly checked for a BLP container, and thus an attempted memory allocation can be very large...

7.5CVSS6.6AI score0.0317EPSS
SaveExploits0References13Affected Software1
Github Security Blog
Github Security Blog
•added 2021/03/18 7:54 p.m.•68 views

Pillow Denial of Service by Uncontrolled Resource Consumption

Pillow before 8.1.2 allows attackers to cause a denial of service memory consumption because the reported size of a contained image is not properly checked for an ICO container, and thus an attempted memory allocation can be very large...

7.5CVSS7.2AI score0.03045EPSS
SaveExploits0References13Affected Software1
Tenable Nessus
Tenable Nessus
•added 2021/03/11 12:00 a.m.•349 views

EulerOS Virtualization 2.9.0 : edk2 (EulerOS-SA-2021-1668)

According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - EFI Development Kit II AARCH64 UEFI FirmwareSecurity Fixes:AuthenticodeVerify calls OpenSSLs d2iPKCS7 API to parse asn encoded signe...

9.8CVSS7.8AI score0.04047EPSS
SaveExploits0References14
Vaadin
Vaadin
•added 2021/03/11 12:00 a.m.•50 views

Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17

Unsafe validation RegEx in EmailField component in com.vaadin:vaadin-text-field-flow versions 2.0.4 through 2.3.2 Vaadin 14.0.6 through 14.4.3, and 3.0.0 through 4.0.2 Vaadin 15.0.0 through 17.0.10 allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses...

7.5CVSS0.6AI score0.01127EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/03/02 12:00 a.m.•21 views

The vulnerability in the function of the file srs2.c in the PostSRSd package allows a hacker to cause a service failure.

The vulnerability in the srs2.c file of the PostSRSd package involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause a service failure consumption of computing resources by using a tag with a time stamp in the SRS address...

7.8CVSS7.2AI score0.02689EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
•added 2021/02/23 12:00 a.m.•10 views

The vulnerability of Intel Ethernet E810 series network adapter drivers allows a hacker to cause a service failure.

The vulnerability of Intel Ethernet E810 series network adapter drivers is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a attacker to cause service interruptions...

5.5CVSS6.7AI score0.00298EPSS
SaveExploits0References7Affected Software3
Prion
Prion
•added 2021/02/17 2:15 p.m.•30 views

Design/Logic Flaw

Uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access...

2.1CVSS5.9AI score0.00298EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/02/17 1:37 p.m.•225 views

CVE-2020-24504

CVE-2020-24504: Affects Intel Ethernet E810 Adapter drivers for Linux. Uncontrolled resource consumption could allow a locally-authenticated user to cause denial of service. Expected fix is upgrade to Linux driver version 1.0.4 or later (per initial description). MiracleLinux AXSA advisory corrob...

5.5CVSS5.8AI score0.00298EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2021/02/09 4:04 p.m.•47 views

CVE-2021-21240

An uncontrolled resource consumption flaw as found in python-httplib2, due to a flawed regular expression used while parsing the WWW-Authenticate header in an HTTP response. This flaw allows a malicious or compromised server to reply with a crafted sequence of characters in the WWW-Authenticate...

7.5CVSS0.7AI score0.03626EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2021/02/08 12:00 a.m.•25 views

The vulnerability of the system resources management service of the Cisco Elastic Services Controller allows a attacker to trigger a service failure.

The vulnerability of the Cisco Elastic Services Controller, a system resource management service, is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

5.3CVSS7.1AI score0.02524EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/01/26 7:07 p.m.•35 views

CVE-2020-27295

The affected product has uncontrolled resource consumption issues, which may allow an attacker to cause a denial-of-service condition on the OPC UA Tunneller versions prior to 6.3.0.8233...

7.4AI score0.01467EPSS
SaveExploits0References1
ICS
ICS
•added 2021/01/21 12:00 a.m.•92 views

Mitsubishi Electric MELFA (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: MELFA FR Series, MELFA CR Series, MELFA ASSISTA Vulnerability: Uncontrolled Resource Consumption 2. UPDATE INFORMATION This updated advisory is a follow-up to the original...

7.8CVSS7.7AI score0.02744EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2021/01/13 12:00 a.m.•19 views

The vulnerability of the fly-qdm graphical interface, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the fly-qdm graphical interface is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a hacker to cause a service failure...

4CVSS5.5AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2020/12/30 12:00 a.m.•14 views

The vulnerability of the OpenSSL library used in the WildFly server, related to uncontrolled resource consumption, allows attackers to cause service failures or gain full access to the system.

The vulnerability of the OpenSSL library used by the WildFly server is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures or gain full access to the system...

7.8CVSS7.2AI score0.02365EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2020/12/23 5:15 p.m.•13 views

CVE-2018-1000891

Bitcoin SV before 0.1.1 allows uncontrolled resource consumption when receiving messages with invalid checksums...

7.5CVSS5.8AI score0.01044EPSS
SaveExploits0References1
OSV
OSV
•added 2020/12/23 5:15 p.m.•13 views

CVE-2018-1000893

Bitcoin SV before 0.1.1 allows uncontrolled resource consumption when deserializing transactions...

7.5CVSS5.8AI score0.01044EPSS
SaveExploits0References1
OSV
OSV
•added 2020/12/23 5:15 p.m.•13 views

CVE-2018-1000892

Bitcoin SV before 0.1.1 allows uncontrolled resource consumption when receiving sendheaders messages...

7.5CVSS5.8AI score0.01044EPSS
SaveExploits0References1
Prion
Prion
•added 2020/12/23 5:15 p.m.•27 views

Design/Logic Flaw

Bitcoin SV before 0.1.1 allows uncontrolled resource consumption when receiving sendheaders messages...

5CVSS7.6AI score0.01044EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/12/18 12:00 a.m.•14 views

The vulnerability of the Undertow web server, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the Undertow web server is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

7.8CVSS7.2AI score0.02137EPSS
SaveExploits0References2Affected Software4
OSV
OSV
•added 2020/12/11 2:15 a.m.•9 views

UBUNTU-CVE-2020-26409

A DOS vulnerability exists in Gitlab CE/EE =10.3, =13.5, =13.6, 13.6.2 that allows an attacker to trigger uncontrolled resource by bypassing input validation in markdown fields...

6.5CVSS5.8AI score0.0126EPSS
SaveExploits0References6
Rows per page
Query Builder