apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader

A vulnerability was found in the Apache Commons IO component in the org.apache.commons.io.input.XmlStreamReader class. Excessive CPU resource consumption can lead to a denial of service when an untrusted input is processed...

Tenda O3 Buffer Overflow Vulnerability (CNVD-2024-45311)

Tenda O3 is an outdoor wireless bridge from Tenda, China. The Tenda O3 suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. A remote attacker could use this vulnerability to cause a denial of service via a fixed-format...

openssl: Excessive time spent checking DSA keys and parameters

A flaw was found in OpenSSL. Applications that use the EVPPKEYparamcheck or EVPPKEYpubliccheck function to check a DSA public key or DSA parameters may experience long delays when checking excessively long DSA keys or parameters. In applications that allow untrusted sources to provide the key or...

Stirling-PDF 安全漏洞

Stirling-PDF is a powerful, locally hosted, web-based PDF manipulation tool using Docker, open-sourced by Stirling Tools. A security vulnerability exists in Stirling-PDF versions prior to 0.32.0 that stems from a merge function that accepts untrusted user input and uses it directly to create HTML...

The vulnerabilities of the ASMKERN228A.dll and ASMdatax229A.dll libraries, which are software components for modeling, design, and drawing in AutoCAD, allow a malicious individual to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the ASMKERN228A.dll and ASMdatax229A.dll libraries, which are software for simulation, design, and drafting in AutoCAD, exists due to a boundary error in processing unreliable input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

...

CVE-2024-51502

loona is an experimental, HTTP/1.1 and HTTP/2 implementation in Rust on top of io-uring. loona-hpack suffers from the same vulnerability as the original hpack as documented in issue 11. All users who try to decode untrusted input using the Decoder are vulnerable to this exploit. This issue has be...

CVE-2024-51502

CVE-2024-51502 affects loona-hpack (Rust, built on io-uring) where the Decoder can be exploited by decoding untrusted input. The vulnerability is the same as in the original hpack and is mitigated by upgrading to loona release 0.4.3. Connected sources also reference a patched crate (hpack-patched...

apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader

A vulnerability was found in the Apache Commons IO component in the org.apache.commons.io.input.XmlStreamReader class. Excessive CPU resource consumption can lead to a denial of service when an untrusted input is processed...

loona 安全漏洞

loona is an open source library from bearcove. A security vulnerability exists in loona version 0.4.2 and earlier, which stems from the presence of a mishandling exception that results in an attack on all users attempting to decode untrusted input using the decoder...

Fedora: Security Advisory (FEDORA-2024-5d581b2365)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-10079

The WP Easy Post Types plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.4 via deserialization of untrusted input from the 'text' parameter in the 'ajaximportcontent' function. This allows authenticated attackers, with subscriber-level permissions an...

CVE-2024-10079

The WP Easy Post Types plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.4 via deserialization of untrusted input from the 'text' parameter in the 'ajaximportcontent' function. This allows authenticated attackers, with subscriber-level permissions an...

CVE-2024-10079

CVE-2024-10079 refers to WP Easy Post Types for WordPress (

Denial Of Service (DoS)

The System.IO.Packaging library is vulnerable to Denial Of Service DoS. The vulnerability is due to the inadequate validation of untrusted inputs by the System.IO.Packaging library, allowing attackers to exploit complex operations and exhaust system resources...

D-Link DIR-820L Buffer Overflow Vulnerability (CNVD-2024-41037)

The D-Link DIR-820L is a dual-band wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-820L version 1.05B03, which originates from a boundary error in the sub451208 function when handling untrusted input. A remote attacker could exploit this...

D-Link DCS-960L Buffer Overflow Vulnerability

D-Link DCS-960L is a webcam product from China AUO D-Link. A buffer overflow vulnerability exists in the D-Link DCS-960L version 1.09, which originates from a boundary error in the sub402280 function when handling untrusted input. An attacker can exploit the vulnerability to execute arbitrary cod...

CVE-2024-9634

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.16.3 via deserialization of untrusted input from the givecompanyname parameter. This makes it possible for unauthenticated attackers to inject a...

CVE-2024-9634

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.16.3 via deserialization of untrusted input from the givecompanyname parameter. This makes it possible for unauthenticated attackers to inject a...

PT-2024-39667 · Vue · Vue

Name of the Vulnerable Software and Affected Versions: Vue affected versions not specified Description: The issue is related to an improper regular expression in Vue's parseHTML function, which can lead to a potential regular expression denial of service vulnerability. This flaw, known as a ReDoS...