Lucene search
+L

365 matches found

RedHat Linux
RedHat Linux
added 2024/10/09 2:49 p.m.16 views

dotnet: Denial of Service in System.Text.Json

A flaw was found in dotnet. In System.Text.Json, applications that deserialize input to a model with an ExtensionData property can be vulnerable to an algorithmic complexity attack, resulting in a denial of service...

7.5CVSS7.2AI score0.03052EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/10/09 2:34 p.m.6 views

dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList

A flaw was found in dotnet. The System.IO.Packaging library may allow untrusted inputs to influence algorithmically complex operations, resulting in a denial of service...

7.5CVSS5.7AI score0.02935EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/10/09 11:47 a.m.6 views

dotnet: Denial of Service in System.Text.Json

A flaw was found in dotnet. In System.Text.Json, applications that deserialize input to a model with an ExtensionData property can be vulnerable to an algorithmic complexity attack, resulting in a denial of service...

7.5CVSS7.2AI score0.03052EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/10/08 12:00 a.m.10 views

PT-2024-7347

Name of the Vulnerable Software and Affected Versions: .NET and Visual Studio affected versions not specified Description: The issue is related to algorithmic complexity in the .NET and Visual Studio platform, which can be exploited by a remote attacker to cause a denial of service...

9.8CVSS8AI score0.99999EPSS
SaveExploits21References224
CNNVD
CNNVD
added 2024/10/08 12:00 a.m.6 views

Microsoft .NET和Microsoft Visual Studio 安全漏洞

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle.Microsoft .NET is a software framework dedicated to agile software development, rapid application development,...

7.5CVSS6.4AI score0.03052EPSS
SaveExploits0References4
Redos
Redos
added 2024/06/14 12:00 a.m.26 views

ROS-20240614-02

The vulnerability in the Python programming language interpreter is related to errors in the conversion of int and str data types. int and str data types. Exploitation of the vulnerability could allow an attacker to cause a denial of service due to the algorithmic complexity...

7.5CVSS6.9AI score0.05768EPSS
SaveExploits0
Redos
Redos
added 2024/04/10 12:00 a.m.63 views

ROS-20240410-09

A vulnerability in the DNSSEC component of the DNS protocol implementation of the DNS server BIND is related to the algorithmic complexity and unrestricted resource allocation in the creation of a DNS zone. complexity and unrestricted resource allocation when creating a DNS zone. Exploitation of...

7.5CVSS7.1AI score0.99995EPSS
SaveExploits1
OSV
OSV
added 2024/03/06 10:56 a.m.29 views

BIT-MODSECURITY2-2023-38285

Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity...

7.5CVSS7.4AI score0.00898EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/06 10:56 a.m.45 views

BIT-MODSECURITY-2023-38285

Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity...

7.5CVSS7.4AI score0.00898EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/02/20 12:00 a.m.9 views

The vulnerability of the DNSSEC component of the DNS server BIND implementation allows a attacker to cause service failures.

The vulnerability of DNSSEC implementation in DNS server BIND is related to algorithmic complexity and unlimited resource distribution during the creation of a DNS zone. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS6.8AI score0.81729EPSS
SaveExploits1References25Affected Software11
Packet Storm
Packet Storm
added 2024/02/12 12:00 a.m.344 views

SCHLIX 2.2.8-1 Denial Of Service

Exploit Title: SCHLIX v2.2.8-1 Regular Expression Denial of Service Date: 02/10/2024 Exploit Author: Diyar Saadi Vendor Homepage: https://www.schlix.com Software Link: https://www.schlix.com/html/schlix-cms-downloads.html Version: v2.2.8-1 Tested on: Windows 11 + XAMPP Description SCHLIX v2.2.8-1...

7.4AI score
SaveExploits0
zdt
zdt
added 2024/02/12 12:00 a.m.417 views

SCHLIX 2.2.8-1 Denial Of Service Exploit

Exploit Title: SCHLIX v2.2.8-1 Regular Expression Denial of Service Exploit Author: Diyar Saadi Vendor Homepage: https://www.schlix.com Software Link: https://www.schlix.com/html/schlix-cms-downloads.html Version: v2.2.8-1 Tested on: Windows 11 + XAMPP Description SCHLIX v2.2.8-1 is vulnerable to...

7.4AI score
SaveExploits0
OSV
OSV
added 2024/01/19 9:30 p.m.76 views

GHSA-HFJ8-63C8-RMFW Duplicate Advisory: Inefficient Algorithmic Complexity in com.upokecenter:cbor

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-36p8-mvp6-cv38. This link is maintained to preserve external references. Original Description Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise...

7.5CVSS7.1AI score0.00912EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2024/01/19 9:30 p.m.29 views

Duplicate Advisory: Inefficient Algorithmic Complexity in com.upokecenter:cbor

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-36p8-mvp6-cv38. This link is maintained to preserve external references. Original Description Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise...

7.5CVSS7.1AI score0.00912EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2024/01/19 9:15 p.m.48 views

CVE-2024-23684

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation CBOR versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use...

7.5CVSS7.3AI score0.00912EPSS
SaveExploits0References3
Prion
Prion
added 2024/01/19 9:15 p.m.42 views

Design/Logic Flaw

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation CBOR versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use...

5CVSS7AI score0.00912EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2024/01/19 8:59 p.m.55 views

CVE-2024-23684 upokecenter CBOR Denial of Service

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation CBOR versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use...

7.5AI score0.00912EPSS
SaveExploits0References3
OSV
OSV
added 2024/01/19 8:59 p.m.18 views

CVE-2024-23684 upokecenter CBOR Denial of Service

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation CBOR versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use...

7.5CVSS7AI score
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.12 views

The vulnerability of the PDF processing library PyPDF2, related to algorithmic complexity, allows attackers to trigger a service denial.

The vulnerability of the PyPDF2 library for processing PDF files is related to algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS6.5AI score0.00625EPSS
SaveExploits1References10Affected Software4
OSV
OSV
added 2023/09/14 9:30 a.m.27 views

GHSA-CGWF-W82Q-5JRR Apache Commons Compress denial of service vulnerability

Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.This issue affects Apache Commons Compress: from 1.22 before 1.24.0. Users are recommended to upgrade to version 1.24.0, which fixes the issue. A third party can create a malformed...

5.5CVSS6.7AI score0.00489EPSS
SaveExploits0References5
Rows per page
Query Builder