Lucene search
+L

755 matches found

Github Security Blog
Github Security Blog
•added 2024/01/19 9:30 p.m.•34 views

Duplicate Advisory: Inefficient Algorithmic Complexity in com.upokecenter:cbor

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-36p8-mvp6-cv38. This link is maintained to preserve external references. Original Description Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise...

7.5CVSS7.1AI score0.0092EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2024/01/19 9:30 p.m.•81 views

GHSA-HFJ8-63C8-RMFW Duplicate Advisory: Inefficient Algorithmic Complexity in com.upokecenter:cbor

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-36p8-mvp6-cv38. This link is maintained to preserve external references. Original Description Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise...

7.5CVSS7.1AI score
SaveExploits0References5
NVD
NVD
•added 2024/01/19 9:15 p.m.•55 views

CVE-2024-23684

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation CBOR versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use...

7.5CVSS7.3AI score0.0092EPSS
SaveExploits0References3
Prion
Prion
•added 2024/01/19 9:15 p.m.•46 views

Design/Logic Flaw

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation CBOR versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use...

5CVSS7AI score0.0092EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2024/01/19 8:59 p.m.•24 views

CVE-2024-23684 upokecenter CBOR Denial of Service

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation CBOR versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use...

7.5CVSS7AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2024/01/19 8:59 p.m.•60 views

CVE-2024-23684 upokecenter CBOR Denial of Service

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation CBOR versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use...

7.5AI score0.0092EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/19 12:00 a.m.•5 views

CVE-2024-23684: Inefficient Algorithmic Complexity

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation CBOR versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use...

7.5CVSS7.2AI score0.0092EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/03 12:00 a.m.•1 views

CVE-2024-21909: Inefficient Algorithmic Complexity

PeterO.Cbor versions 4.0.0 through 4.5.0 are vulnerable to a denial of service vulnerability. An attacker may trigger the denial of service condition by providing crafted data to the DecodeFromBytes or other decoding mechanisms in PeterO.Cbor. Depending on the usage of the library, an...

7.5CVSS7.2AI score0.01061EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
•added 2023/11/11 12:00 a.m.•18 views

The vulnerability of the PDF processing library PyPDF2, related to algorithmic complexity, allows attackers to trigger a service denial.

The vulnerability of the PyPDF2 library for processing PDF files is related to algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS6.5AI score0.0063EPSS
SaveExploits1References10Affected Software4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/25 12:00 a.m.•2 views

CVE-2023-46136: Inefficient Algorithmic Complexity

Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk b...

8CVSS6.9AI score0.01072EPSS
SaveExploits0References9
OSV
OSV
•added 2023/09/14 9:30 a.m.•68 views

GHSA-CGWF-W82Q-5JRR Apache Commons Compress denial of service vulnerability

Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.This issue affects Apache Commons Compress: from 1.22 before 1.24.0. Users are recommended to upgrade to version 1.24.0, which fixes the issue. A third party can create a malformed...

5.5CVSS6.7AI score0.00601EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2023/09/14 7:45 a.m.•64 views

CVE-2023-42503 Apache Commons Compress: Denial of service via CPU consumption for malformed TAR file

Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.This issue affects Apache Commons Compress: from 1.22 before 1.24.0. Users are recommended to upgrade to version 1.24.0, which fixes the issue. A third party can create a malformed...

6.7AI score0.00601EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2023/09/07 12:00 a.m.•24 views

Oracle Linux 5 : mcstrans (ELSA-2007-0542)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2007-0542 advisory. 0.2.6-1 - Don't allow categories 1023 Resolves: 288941 0.2.3-1 - Additional fix to handle ssh root/sysadmr/s0:c1,c2 Resolves: 224637 0.2.1-1 - Rewrite to handle...

1.9CVSS5.8AI score0.00303EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2023/07/28 2:09 a.m.•7 views

SUSE CVE-2023-38285

Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity...

7.5CVSS7AI score0.00898EPSS
SaveExploits0References5
NVD
NVD
•added 2023/07/26 9:15 p.m.•35 views

CVE-2023-38285

Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity...

7.5CVSS7.5AI score0.00898EPSS
SaveExploits0References2
Prion
Prion
•added 2023/07/26 9:15 p.m.•34 views

Code injection

Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity...

5CVSS7.5AI score0.00898EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2023/07/26 9:15 p.m.•18 views

UBUNTU-CVE-2023-38285

Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity...

7.5CVSS5.8AI score0.00898EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/26 12:00 a.m.•1 views

CVE-2023-38285: Inefficient Algorithmic Complexity

Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity...

7.5CVSS7.2AI score0.00898EPSS
SaveExploits0References2
OSV
OSV
•added 2023/07/26 12:00 a.m.•34 views

CVE-2023-38285

Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity...

7.2AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2023/07/26 12:00 a.m.•37 views

CVE-2023-38285

Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity...

7.5CVSS7.1AI score0.00898EPSS
SaveExploits0References3
Rows per page
Query Builder