Lucene search
+L

3448 matches found

OSV
OSV
•added 2025/05/09 12:31 p.m.•25 views

GHSA-PVP8-3XJ6-8C6X Apache Commons Configuration Uncontrolled Resource Consumption

Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuratio...

6.9CVSS6.7AI score0.02123EPSS
SaveExploits0References5
NVD
NVD
•added 2025/05/09 10:15 a.m.•37 views

CVE-2025-46392

Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuratio...

6.5CVSS0.02123EPSS
SaveExploits0References3
OSV
OSV
•added 2025/05/09 10:15 a.m.•12 views

DEBIAN-CVE-2025-46392

Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuratio...

6.5CVSS6AI score0.02123EPSS
SaveExploits0References1
OSV
OSV
•added 2025/05/09 10:15 a.m.•16 views

UBUNTU-CVE-2025-46392

Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuratio...

6.5CVSS6.8AI score0.02123EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/05/09 9:34 a.m.•29 views

CVE-2025-46392 Apache Commons Configuration: Uncontrolled Resource Consumption when loading untrusted configurations in 1.x

Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuratio...

6.5AI score0.02123EPSS
SaveExploits0References3
Mend
Mend
•added 2025/05/09 9:34 a.m.•5 views

CVE-2025-46392

Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuratio...

7.1CVSS0.02123EPSS
SaveExploits0References7
CVE
CVE
•added 2025/05/09 9:34 a.m.•210 views

CVE-2025-46392

The Apache Commons Configuration 1.x library is susceptible to an uncontrolled resource consumption vulnerability (CWE-400) when loading untrusted configurations or through unexpected usage patterns. This issue can lead to a denial of service (DoS) condition, as evidenced by its impact on IBM Sto...

6.5CVSS6.4AI score0.02123EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2025/05/09 9:34 a.m.•73 views

CVE-2025-46392 Apache Commons Configuration: Uncontrolled Resource Consumption when loading untrusted configurations in 1.x

Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuratio...

0.02123EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2025/05/09 9:34 a.m.•30 views

CVE-2025-46392

Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuratio...

6.5CVSS6.4AI score0.02123EPSS
SaveExploits0
OSV
OSV
•added 2025/05/09 9:34 a.m.•32 views

CVE-2025-46392 Apache Commons Configuration: Uncontrolled Resource Consumption when loading untrusted configurations in 1.x

Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuratio...

6.5CVSS6.7AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/05/09 12:00 a.m.•8 views

PT-2025-20548

Name of the Vulnerable Software and Affected Versions Apache Commons Configuration versions 1.x Description The issue is related to Uncontrolled Resource Consumption in Apache Commons Configuration 1.x, which can lead to excessive resource consumption when loading untrusted configurations or usin...

6.8CVSS3.5AI score0.02123EPSS
SaveExploits0References262
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/09 12:00 a.m.•5 views

CVE-2025-46392: Uncontrolled Resource Consumption

Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuratio...

6.5CVSS6AI score0.02123EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/09 12:00 a.m.•7 views

Apache Commons Configuration 资源管理错误漏洞

Apache Commons Configuration is a generic configuration interface from the Apache Foundation that is primarily used to enable Java applications to read configuration data from multiple sources. A resource management error vulnerability exists in Apache Commons Configuration version 1.x. The...

7.3CVSS6.2AI score0.02123EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/05/07 12:00 a.m.•13 views

Oracle JDeveloper DoS (April 2025 CPU)

The version of Oracle JDeveloper installed on the remote host is missing a security patch. It is, therefore, affected by denial of service vulnerability as referenced in the April 2025 CPU advisory. - Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Generic...

8.1CVSS6.3AI score0.01905EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2025/05/06 2:32 p.m.•6 views

apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader

A vulnerability was found in the Apache Commons IO component in the org.apache.commons.io.input.XmlStreamReader class. Excessive CPU resource consumption can lead to a denial of service when an untrusted input is processed...

4.3CVSS5.8AI score0.01315EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/05/06 2:32 p.m.•6 views

apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader

A vulnerability was found in the Apache Commons IO component in the org.apache.commons.io.input.XmlStreamReader class. Excessive CPU resource consumption can lead to a denial of service when an untrusted input is processed...

4.3CVSS5.8AI score0.01315EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/05/06 2:31 p.m.•6 views

apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader

A vulnerability was found in the Apache Commons IO component in the org.apache.commons.io.input.XmlStreamReader class. Excessive CPU resource consumption can lead to a denial of service when an untrusted input is processed...

4.3CVSS5.8AI score0.01315EPSS
SaveExploits0References5
OSS-Fuzz
OSS-Fuzz
•added 2025/05/06 10:43 a.m.•12 views

apache-commons-lang:LocaleUtilsFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Detailed Report: https://oss-fuzz.com/testcase?key=5297402724810752 Project: apache-commons-lang Fuzzing Engine: libFuzzer Fuzz Target: LocaleUtilsFuzzer Job Type: libfuzzerasanapache-commons-lang Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

5.4AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2025/05/04 11:38 a.m.•12 views

apache-commons-jxpath:JXPathFuzzer: Security exception in org.apache.commons.jxpath.ri.compiler.CoreFunction.toString

Detailed Report: https://oss-fuzz.com/testcase?key=5483190896885760 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

5.4AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2025/05/01 8:02 p.m.•12 views

Security Bulletin: IBM Watson Speech Services Cartridge v4.8.8 is vulnerable to an uncontrolled resource consumption in Apache Commons IO [CVE-2024-47554]

Summary IBM Watson Speech Services Cartridge is vulnerable to an uncontrolled resource consumption in Apache Commons IO, due to a flaw in the org.apache.commons.io.input.XmlStreamReader class that may allow maliciously crafted input to excessively consume CPU resources while processing...

4.3CVSS6.3AI score0.01315EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder