Lucene search
K

312 matches found

OSV
OSV
added 2024/01/19 9:30 p.m.11 views

GHSA-HFJ8-63C8-RMFW Duplicate Advisory: Inefficient Algorithmic Complexity in com.upokecenter:cbor

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-36p8-mvp6-cv38. This link is maintained to preserve external references. Original Description Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise...

7.5CVSS7.1AI score0.02303EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2024/01/19 9:30 p.m.23 views

Duplicate Advisory: Inefficient Algorithmic Complexity in com.upokecenter:cbor

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-36p8-mvp6-cv38. This link is maintained to preserve external references. Original Description Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise...

7.5CVSS7.1AI score0.02303EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2024/01/19 9:15 p.m.21 views

CVE-2024-23684

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation CBOR versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use...

7.5CVSS7.3AI score0.02303EPSS
Exploits0References3
OSV
OSV
added 2024/01/19 9:15 p.m.15 views

CVE-2024-23684

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation CBOR versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use...

7.5CVSS7.1AI score
Exploits0References3
Prion
Prion
added 2024/01/19 9:15 p.m.36 views

Design/Logic Flaw

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation CBOR versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use...

5CVSS7AI score0.02303EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2024/01/19 8:59 p.m.25 views

CVE-2024-23684 upokecenter CBOR Denial of Service

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation CBOR versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use...

7.5AI score0.02303EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:0 a.m.2 views

The vulnerability of the PDF processing library PyPDF2, related to algorithmic complexity, allows attackers to trigger a service denial.

The vulnerability of the PyPDF2 library for processing PDF files is related to algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS6.5AI score0.00165EPSS
Exploits1References10Affected Software4
OSV
OSV
added 2023/09/14 9:30 a.m.22 views

GHSA-CGWF-W82Q-5JRR Apache Commons Compress denial of service vulnerability

Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.This issue affects Apache Commons Compress: from 1.22 before 1.24.0. Users are recommended to upgrade to version 1.24.0, which fixes the issue. A third party can create a malformed...

5.5CVSS6.7AI score0.00014EPSS
Exploits0References5
Cvelist
Cvelist
added 2023/09/14 7:45 a.m.23 views

CVE-2023-42503 Apache Commons Compress: Denial of service via CPU consumption for malformed TAR file

Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.This issue affects Apache Commons Compress: from 1.22 before 1.24.0. Users are recommended to upgrade to version 1.24.0, which fixes the issue. A third party can create a malformed...

6.7AI score0.00014EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:0 a.m.20 views

Oracle Linux 5 : mcstrans (ELSA-2007-0542)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2007-0542 advisory. 0.2.6-1 - Don't allow categories 1023 Resolves: 288941 0.2.3-1 - Additional fix to handle ssh root/sysadmr/s0:c1,c2 Resolves: 224637 0.2.1-1 - Rewrite to handle...

1.9CVSS5.8AI score0.00071EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/07/28 2:9 a.m.1 views

SUSE CVE-2023-38285

Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity...

7.5CVSS7AI score0.00592EPSS
Exploits0References5
NVD
NVD
added 2023/07/26 9:15 p.m.10 views

CVE-2023-38285

Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity...

7.5CVSS7.5AI score0.00592EPSS
Exploits0References2
OSV
OSV
added 2023/07/26 9:15 p.m.23 views

CVE-2023-38285

Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity...

7.5CVSS7.2AI score0.00592EPSS
Exploits0References2
Prion
Prion
added 2023/07/26 9:15 p.m.27 views

Code injection

Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity...

5CVSS7.5AI score0.00592EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2023/07/26 9:15 p.m.0 views

UBUNTU-CVE-2023-38285

Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity...

7.5CVSS5.8AI score0.00592EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2023/07/26 12:0 a.m.27 views

CVE-2023-38285

Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity...

7.5CVSS7.1AI score0.00592EPSS
Exploits0References3
CVE
CVE
added 2023/07/26 12:0 a.m.410 views

CVE-2023-38285

CVE-2023-38285 affects Trustwave ModSecurity 3.x prior to 3.0.10. The root cause is Inefficient Algorithmic Complexity in certain input handling, leading to potential denial of service with network-based exploitation. The CVSS indicates network attack vector, low attack complexity, and high avail...

7.5CVSS7.3AI score0.00592EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2023/07/26 12:0 a.m.23 views

CVE-2023-38285

Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity...

7.5CVSS7.5AI score0.00592EPSS
Exploits0
CNNVD
CNNVD
added 2023/07/26 12:0 a.m.7 views

ModSecurity 安全漏洞

ModSecurity is an intrusion detection and blocking engine that can be run as a module of the Apache Web Server or as a standalone application to enhance the security of Web applications and protect them from known and unknown attacks. A security vulnerability exists in Trustwave ModSecurity versi...

7.5CVSS7AI score0.00592EPSS
Exploits0References4
Cvelist
Cvelist
added 2023/07/26 12:0 a.m.14 views

CVE-2023-38285

Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity...

7.6AI score0.00592EPSS
Exploits0References2
Rows per page
Query Builder