Lucene search
+L

2215 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/06/05 12:00 a.m.•5 views

CVE-2017-9438: Uncontrolled Recursion

libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service stack consumption via a crafted rule involving hex strings that is mishandled in the yrreemit function, a different vulnerability than CVE-2017-9304...

7.5CVSS7.3AI score0.02549EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/05/31 12:00 a.m.•3 views

CVE-2017-9304: Uncontrolled Recursion

libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service stack consumption via a crafted rule that is mishandled in the yrreemit function...

7.5CVSS7.3AI score0.01827EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/05 12:00 a.m.•4 views

CVE-2017-0886: Uncontrolled Recursion

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversary may trigger an endless recursion in the application leading to a potential Denial of Service...

6.5CVSS5.8AI score0.0123EPSS
SaveExploits0References2
OSV
OSV
•added 2017/04/04 6:44 a.m.•11 views

MGASA-2017-0103 Updated mxml packages fix security vulnerability

Two stack exhaustion issues based on uncontrolled recursion were found in mxml. A maliciously crafted xml file can cause the application to crash. Recursion using mxmlDelete at mxml-node.c:217 reproducer is stack-exhaustion-1.xml CVE-2016-4570. Recursion using mxmlwritenode at mxml-file.c:2739...

7.1CVSS5.8AI score0.01589EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/09 12:00 a.m.•4 views

CVE-2017-5839: Uncontrolled Recursion

The gstriffcreateaudiocaps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service stack overflow and crash via vectors involving nested WAVEFORMATEX...

7.5CVSS5.9AI score0.0448EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2015/04/28 12:00 a.m.•15 views

The vulnerabilities of the microprogrammed Ethernet switches from Moxa, models PT-508, PT-7728, PT-7828, and MDS-G4012, allow attackers to cause malfunctions during maintenance operations.

The vulnerability of the microprogrammed Ethernet switches from Moxa, models PT-508, PT-7728, PT-7828, and MDS-G4012, is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

8.6CVSS7.5AI score0.32059EPSS
SaveExploits3References7Affected Software6
UbuntuCve
UbuntuCve
•added 2015/04/10 3:00 p.m.•36 views

CVE-2015-2779

Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of service uncontrolled recursion via a crafted massage...

5CVSS5.9AI score0.02775EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2015/04/10 2:00 p.m.•60 views

CVE-2015-2779

Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of service uncontrolled recursion via a crafted massage...

5CVSS6AI score0.02775EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/04/10 12:00 a.m.•6 views

CVE-2015-2779: Undefined Security Weakness

Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of service uncontrolled recursion via a crafted massage...

5CVSS5.9AI score0.02775EPSS
SaveExploits0References2
OSV
OSV
•added 2014/12/19 3:06 p.m.•16 views

MGASA-2014-0537 Updated file packages fix security vulnerabilities

Updated file packages fix security vulnerabilities: Thomas Jarosch of Intra2net AG reported that using the file command on a specially-crafted ELF binary could lead to a denial of service due to uncontrolled resource consumption CVE-2014-8116. Thomas Jarosch of Intra2net AG reported that using th...

5CVSS6.3AI score0.05926EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/11/06 12:00 a.m.•3 views

CVE-2014-0995: Improper Input Validation

The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote attackers to cause a denial of service uncontrolled recursion and crash via a trace level with a wildcard in the Trace Pattern...

5CVSS5.9AI score0.10485EPSS
SaveExploits6References2
zdt
zdt
•added 2014/10/17 12:00 a.m.•83 views

SAP Netweaver Enqueue Server - Denial of Service

Exploit for windows platform in category dos / poc SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability 1. Advisory Information Title: SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability Advisory ID: CORE-2014-0007 Advisory URL:...

5CVSS6.5AI score0.10485EPSS
SaveExploits6
Packet Storm
Packet Storm
•added 2014/10/16 12:00 a.m.•81 views

SAP Netweaver Enqueue Server Trace Pattern Denial Of Service

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability 1. Advisory Information Title: SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability Advisory ID: CORE-2014-0007 Advisory URL:...

5CVSS0.10485EPSS
SaveExploits6
Core Security
Core Security
•added 2014/10/15 12:00 a.m.•547 views

SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability

Advisory ID Internal CORE-2014-0007 1. Advisory Information Title: SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability Advisory ID: CORE-2014-0007 Advisory...

5CVSS7.3AI score0.10485EPSS
SaveExploits6
Prion
Prion
•added 2014/09/01 1:55 a.m.•29 views

Stack overflow

Stack consumption vulnerability in the parserockridgeinodeinternal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service uncontrolled recursion, and system crash or reboot via a crafted iso9660 image with a CL entry referring to a directory...

4CVSS6.4AI score0.00505EPSS
SaveExploits1References26Affected Software1
Rows per page
Query Builder