18847 matches found
Denial Of Service (DoS)
ImageMagick is vulnerable to Denial Of Service DoS. The vulnerability exists due to a stack-based buffer overflow in tiff.c which allows an attacker to cause an application crash...
Denial Of Service (DoS)
github.com/mattermost/mattermost-server is vulnerable to Denial Of Service DoS. The vulnerability exists because the Unescape function of inlines.go does not efficiently process Markdown strings, allowing an attacker to cause an application crash by sending a direct message containing a large...
Coraza has potential denial of service vulnerability
Summary Due to the misuse of log.Fatalf, the application using coraza crashed after receiving crafted requests from attackers. Details https://github.com/corazawaf/coraza/blob/82157f85f24c6107667bf0f686b71a72aafdf8a5/internal/bodyprocessors/multipart.goL26-L29 The bodyprocessors of multipart uses...
Denial Of Service (DoS)
libjxl.so is vulnerable to Denial of Service DoS. The vulnerability exists due to an integer underflow in the Decode function at decpatchdictionary.cc because the function doesn't properly check that all patches are in bounds resulting in an application crash...
Heap Buffer Overflow
libgpac.so is vulnerable to Heap Buffer Overflows. The vulnerability exists in id3dmxflush function of reframemp3.c which allows an attacker to cause an application crash...
CVE-2015-20109
A vulnerability was found in the GNU C Library glibc. The endpattern called from internalfnmatch might allow context-dependent attackers to cause a denial of service application crash, as demonstrated by the use of the fnmatch library function with the ! pattern...
PT-2023-27522 · Owasp · Owasp Coraza Waf
Name of the Vulnerable Software and Affected Versions: OWASP Coraza WAF versions prior to 3.0.1 Description: The issue is caused by the misuse of log.Fatalf in the OWASP Coraza WAF library, which leads to the application crashing after receiving crafted requests from attackers. The application wi...
Design/Logic Flaw
endpattern called from internalfnmatch in the GNU C Library aka glibc or libc6 before 2.22 might allow context-dependent attackers to cause a denial of service application crash, as demonstrated by use of the fnmatch library function with the ! pattern. NOTE: this is not the same as CVE-2015-8984...
CVE-2015-20109
endpattern called from internalfnmatch in the GNU C Library aka glibc or libc6 before 2.22 might allow context-dependent attackers to cause a denial of service application crash, as demonstrated by use of the fnmatch library function with the ! pattern. NOTE: this is not the same as CVE-2015-8984...
CVE-2015-20109
endpattern called from internalfnmatch in the GNU C Library aka glibc or libc6 before 2.22 might allow context-dependent attackers to cause a denial of service application crash, as demonstrated by use of the fnmatch library function with the ! pattern. NOTE: this is not the same as CVE-2015-8984...
CVE-2015-20109
endpattern called from internalfnmatch in the GNU C Library aka glibc or libc6 before 2.22 might allow context-dependent attackers to cause a denial of service application crash, as demonstrated by use of the fnmatch library function with the ! pattern. NOTE: this is not the same as CVE-2015-8984...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : dav1d (SUSE-SU-2023:2618-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2618-1 advisory. - CVE-2023-32570: Fixed possible crash when decoding a frame bsc1211262. Tenable has extracted the...
Denial Of Service (DoS)
com.helger.commons is vulnerable to Denial Of Service DoS. The vulnerability exists due to a lack of nesting depth checks in JsonParser.java, which allows an attacker to cause an application crash...
Denial Of Service (DoS)
com.owlike, genson is vulnerable to Denial Of Service DoS. The vulnerability exists due to a lack of nested depth checks, which allows an attacker to cause an application crash...
Denial Of Service (DoS)
org.hjson, hjson is vulnerable to Denial of Service DoS attacks. A malicious user is able to cause a stack overflow, resulting in an application crash, because the library does not properly check crafted objects with deeply nested structures...
Denial Of Services (DoS)
flexjson is vulnerable to Denial Of Services DoS. The vulnerability exists due to a lack of nesting depth checks in the library, allowing an attacker to cause an application crash by passing a maliciously crafted JSON string...
Denial Of Services (DoS)
mjson is vulnerable to Denial Of Services DoS. The vulnerability exists due to a lack of nested depth checks in Json.java, which allows an attacker to cause an application crash by passing a maliciously crafted JSON string...
Denial Of Services (DoS)
JSON is vulnerable to Denial Of Services DoS. The vulnerability exists due to a lack of nested depth checks in Parser.java, which allows an attacker to cause an application crash by passing a maliciously crafted JSON string...
Denial Of Services (DoS)
json-io is vulnerable to Denial Of Services DoS. The vulnerability exists due a lack of nesting depth checks in the JsonParser.java, which allows an attacker to cause an application crash by passing the maliciously crafted JSON string...
Denial Of Services (DoS)
jsonij is vulnerable to Denial Of Services DoS. The vulnerability exists due to a lack of nesting depth checks, allowing an attacker to cause an application crash by passing a maliciously crafted JSON string...