Lucene search
K

1134 matches found

Tenable Nessus
Tenable Nessus
added 2021/07/02 12:0 a.m.30 views

EulerOS Virtualization for ARM 64 3.0.2.0 : libproxy (EulerOS-SA-2021-2073)

According to the version of the libproxy package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion...

7.5CVSS7.2AI score0.04284EPSS
Exploits1References2
Mageia
Mageia
added 2021/06/29 5:31 p.m.23 views

Updated re2c package fixes a security vulnerability

re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags CVE-2018-21232...

5.5CVSS4.9AI score0.01432EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.3 views

The vulnerability of Xen hypervisors, caused by uncontrolled recursion, allows attackers to trigger an emergency shutdown of the application.

The vulnerability of the Xen hypervisor is caused by an uncontrolled recursion. Exploiting this vulnerability can allow an attacker to cause the application to terminate abnormally...

5.5CVSS6.8AI score0.00438EPSS
Exploits0References7Affected Software4
CNVD
CNVD
added 2021/05/27 12:0 a.m.6 views

Unspecified vulnerability in PoDoFo (CNVD-2021-43538)

PoDoFo is a free, portable and easy to use PDF parsing, modification and creation library. An uncontrolled recursive call vulnerability exists in the PdfTokenizer::ReadArray, PdfTokenizer::GetNextVariant and PdfTokenizer::ReadDataType functions in PoDoFo version 0.9.7. An attacker could exploit...

5.5CVSS6.5AI score0.00691EPSS
Exploits1References1
OSV
OSV
added 2021/05/26 10:15 p.m.1 views

DEBIAN-CVE-2021-30471

A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call in PdfNamesTree::AddToDictionary function in src/podofo/doc/PdfNamesTree.cpp can lead to a stack overflow...

5.5CVSS6.7AI score0.0073EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/05/26 12:0 a.m.1 views

Sourceforge PoDoFo 安全漏洞

PoDoFo is a free, portable and easy to use PDF parsing, modification and creation library. An uncontrolled recursive call vulnerability exists in the PdfTokenizer::ReadArray, PdfTokenizer::GetNextVariant and PdfTokenizer::ReadDataType functions in PoDoFo version 0.9.7. An attacker could exploit...

5.5CVSS5.7AI score0.00691EPSS
Exploits1References2
NVD
NVD
added 2021/05/20 4:15 p.m.27 views

CVE-2021-27432

OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow...

7.5CVSS0.02186EPSS
Exploits0References1
Prion
Prion
added 2021/05/20 4:15 p.m.16 views

Stack overflow

OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow...

5CVSS7.4AI score0.02186EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/05/20 3:20 p.m.70 views

CVE-2021-27432

OPC Foundation UA .NET Standard and OPC UA .NET Legacy are affected by CVE-2021-27432 due to an uncontrolled recursion that can trigger a stack overflow. Affected products are OPC UA .NET Standard prior to 1.4.365.48 and OPC UA .NET Legacy. The vulnerability enables remote exploitation (network v...

7.5CVSS7.4AI score0.02186EPSS
Exploits0References1Affected Software2
CNVD
CNVD
added 2021/05/14 12:0 a.m.13 views

Unspecified Vulnerability in Siemens SIMATIC OPC UA

The Siemens SIMATIC CP443-1 OPC UA9 is a communication processor from Siemens, Germany. A security vulnerability exists in OPC UA. The vulnerability stems from the program's susceptibility to uncontrolled recursion, which can be exploited by an attacker to trigger a stack overflow...

7.5CVSS6.6AI score0.02186EPSS
Exploits0References1
ICS
ICS
added 2021/05/13 12:0 a.m.47 views

OPC Foundation UA Products Built with .NET Framework

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: OPC Foundation Equipment: OPC UA Servers Vulnerability: Uncontrolled Recursion 2. RISK EVALUATION Successful exploitation of this vulnerability could trigger a stack overflow. 3. TECHNICAL DETAILS 3.1...

7.5CVSS7.7AI score0.02186EPSS
Exploits0References5
Snyk
Snyk
added 2021/04/14 8:4 p.m.1 views

Uncontrolled Recursion

Overview std/archive/zip is a Go standard library package std/archive/zip Affected versions of this package are vulnerable to Uncontrolled Recursion. Go Vulnerability Report: via the Reader.Open function when processing an archive containing a file with a path prefixed by "../". An attacker can...

6.8CVSS6.8AI score0.01517EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2021/03/24 12:0 a.m.23 views

EulerOS 2.0 SP5 : curl (EulerOS-SA-2021-1672)

According to the version of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.CVE-2020-8285...

7.5CVSS6.8AI score0.09917EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/03/12 12:0 a.m.20 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1645)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.09917EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:0 a.m.36 views

EulerOS Virtualization 3.0.2.6 : curl (EulerOS-SA-2021-1410)

According to the version of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match...

7.5CVSS6.8AI score0.09917EPSS
Exploits1References2
NVD
NVD
added 2021/03/05 6:15 p.m.22 views

CVE-2021-28040

An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in osxml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached...

7.5CVSS0.01192EPSS
Exploits1References1
Prion
Prion
added 2021/03/05 6:15 p.m.15 views

Design/Logic Flaw

An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in osxml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached...

5CVSS7.5AI score0.01192EPSS
Exploits1References1Affected Software1
OpenVAS
OpenVAS
added 2021/03/05 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1466)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.09917EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2021/03/05 12:0 a.m.17 views

Huawei EulerOS: Security Advisory for libproxy (EulerOS-SA-2021-1530)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.8AI score0.04284EPSS
Exploits1References2
OSV
OSV
added 2021/02/07 11:2 a.m.2 views

OESA-2021-1034 djvulibre security update

DjVu is a set of compression technologies, a file format, and a software platform for the deliveryover the Web of digital documents, scanned documents, and high resolution images.DjVu documents download and display extremely quickly, and look exactly the same on all platforms with no compatibilit...

7.5CVSS6.9AI score0.03667EPSS
Exploits5References6
Rows per page
Query Builder