Lucene search
K

1134 matches found

OSV
OSV
added 2025/07/05 1:15 a.m.3 views

AZL-65565 CVE-2025-53605 affecting package rust for versions less than 1.75.0-17

The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::codedinputstream::CodedInputStream::skipgroup parsing of unknown fields in untrusted input...

5.9CVSS5.7AI score0.0038EPSS
Exploits0References1
OSV
OSV
added 2025/07/05 1:15 a.m.3 views

UBUNTU-CVE-2025-53605

The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::codedinputstream::CodedInputStream::skipgroup parsing of unknown fields in untrusted input...

5.9CVSS5.8AI score0.0038EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/07/05 12:0 a.m.7 views

CVE-2025-53605

The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::codedinputstream::CodedInputStream::skipgroup parsing of unknown fields in untrusted input...

5.9CVSS0.0038EPSS
Exploits0References3
CVE
CVE
added 2025/07/05 12:0 a.m.53 views

CVE-2025-53605

CVE-2025-53605 affects the Rust protobuf crate prior to 3.7.2. The issue is uncontrolled recursion in protobuf::coded_input_stream::CodedInputStream::skip_group when parsing unknown fields from untrusted input, with impact described as availability-related in the CVSS metrics. Connected advisorie...

5.9CVSS6.5AI score0.0038EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/07/05 12:0 a.m.4 views

CVE-2025-53605

The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::codedinputstream::CodedInputStream::skipgroup parsing of unknown fields in untrusted input...

5.9CVSS7.2AI score0.0038EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2025/07/05 12:0 a.m.7 views

CVE-2025-53605

The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::codedinputstream::CodedInputStream::skipgroup parsing of unknown fields in untrusted input...

5.9CVSS5.1AI score0.0038EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2025/06/16 4:26 p.m.9 views

Moderate: Red Hat Security Advisory: wireshark security update

An update for wireshark is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

7.8CVSS6.1AI score0.0028EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:0 a.m.4 views

RHEL 10 : wireshark (RHSA-2025:9121)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9121 advisory. The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fixes:...

7.8CVSS5.8AI score0.0028EPSS
Exploits0References6
OSV
OSV
added 2025/06/16 12:0 a.m.3 views

ALSA-2025:9121 Moderate: wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fixes: wireshark: Uncontrolled Recursion in Wireshark CVE-2025-1492 For more details about the security issues, including the impact, a CVSS score,...

7.8CVSS7.1AI score0.0028EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 1:46 a.m.7 views

CVE-2023-29001

Contiki-NG is an open-source, cross-platform operating system for IoT devices. The Contiki-NG operating system processes source routing headers SRH in its two alternative RPL protocol implementations. The IPv6 implementation uses the results of this processing to determine whether an incoming...

8.7CVSS6.7AI score0.00538EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:5 a.m.7 views

CVE-2022-28773

Due to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager, the application may crash, leading to denial of service, but can be restarted automatically...

7.5CVSS7.9AI score0.01416EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:22 a.m.7 views

CVE-2022-46405

Mastodon through 4.0.2 allows attackers to cause a denial of service large Sidekiq pull queue by creating bot accounts that follow attacker-controlled accounts on certain other servers associated with a wildcard DNS A record, such that there is uncontrolled recursion of attacker-generated message...

7.5CVSS6.7AI score0.00918EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:56 p.m.5 views

CVE-2022-3222

Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV...

5.5CVSS6.7AI score0.00628EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:56 p.m.16 views

CVE-2021-36154

HTTP2ToRawGRPCServerCodec in gRPC Swift 1.1.1 and earlier allows remote attackers to deny service via the delivery of many small messages within a single HTTP/2 frame, leading to Uncontrolled Recursion and stack consumption...

7.5CVSS6.9AI score0.02082EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:31 p.m.8 views

CVE-2021-27432

OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow...

7.5CVSS6.7AI score0.02186EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:4 a.m.6 views

CVE-2019-13123

Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Uncontrolled Recursion in the V8 JavaScript engine issue 1 of 2...

7.5CVSS6.9AI score0.0132EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:42 a.m.6 views

CVE-2019-1010182

yaml-rust 0.4.0 and earlier is affected by: Uncontrolled Recursion. The impact is: Denial of service by impossible to catch abort. The component is: YamlLoader::loadfromstr function. The attack vector is: Parsing of a malicious YAML document. The fixed version is: 0.4.1 and later...

6.5CVSS6.8AI score0.01061EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:18 a.m.9 views

CVE-2018-20993

An issue was discovered in the yaml-rust crate before 0.4.1 for Rust. There is uncontrolled recursion during deserialization...

7.5CVSS6.8AI score0.01411EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:31 a.m.12 views

CVE-2019-15542

An issue was discovered in the ammonia crate before 2.1.0 for Rust. There is uncontrolled recursion during HTML DOM tree serialization...

7.5CVSS6.7AI score0.01411EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/05/14 12:0 a.m.11 views

Alibaba Cloud Linux 3 : 0152: go-toolset:rhel8 (ALINUX3-SA-2022:0152)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0152 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-1705: Acceptance of some invalid...

7.5CVSS7.2AI score0.01875EPSS
Exploits4References11
Rows per page
Query Builder