18847 matches found
Denial Of Services (DoS)
github.com/gophish/gophish is vulnerable to Denial Of Services DoS. An attacker can cause an application crash through a crafted payload involving autofocus...
Regular Expression Denial Of Service (ReDoS)
uri is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists due to the insecure Regex pattern used for the RFC3986URI and RFC3986relativeref parameters in the rfc3986parser.rb, which allows an attacker to crash the application by providing maliciously crafted URI...
Prototype Pollution
matrix-react-sdk is vulnerable to Prototype Pollution. The vulnerability exists because, in certain configurations, data sent by remote servers containing special strings in key locations could cause modifications of the Object.prototype which may lead to an application crash...
SUSE SLES15 Security Update : yaml-cpp (SUSE-SU-2023:1740-3)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1740-3 advisory. - CVE-2018-20573: Fixed remote DOS via a crafted YAML file in function Scanner:EnsureTokensInQueue bsc1121227. - CVE-2018-20574:...
Denial Of Service (DoS)
Snappier is vulnerable to Denial Of Service DoS. The vulnerability exists because the Short-lived stack references to locations outside buffers may become invalid if they exist during a GC compaction, which leads to an attacker causing an application crash by providing a malicious input...
Security Bulletin: Multiple Vulnerabilities related to SnakeYAML in Logstash shipped with IBM Operations Analytics - Log Analysis (CVE-2022-38750, CVE-2022-38751, CVE-2022-38752, CVE-2022-38749)
Summary Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. While deserializing unknown yaml content can lead to remote code execution. Vulnerability Details CVEID:CVE-2022-38750 DESCRIPTION: SnakeYAML is vulnerable to a denial of service, caused by a...
Denial Of Services (DoS)
graphql-java is vulnerable to Denial Of Services DoS. An attacker can send a maliciously crafted GraphQL query that causes excessive stack consumption, which can lead to an application crash...
Denial Of Service (DoS)
libgpac.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the unhandled SWF tags in the filterpid.c, which leads to memory leaks and could cause an application crash...
Denial Of Service (DoS)
TensorFlow is vulnerable to Denial Of Service DoS. The vulnerability exists due to the improper validation checks in the library, which leads to a segmentation fault with a null pointer dereference in ParallelConcat with XLA, allowing an attacker to cause an application crash when the given...
Denial Of Service (DoS)
TensorFlow is vulnerable to Denial Of Service DoS. The vulnerability exists due to an out-of-bounds read in the GRUBlockCellGrad function because it does not check the rank, which allows an attacker to cause an application crash...
Denial Of Service (DoS)
tensorflow is vulnerable to Denial of Service DoS attacks. The vulnerability is due to a floating point exception if the stride and window size are not positive for the rawops.AvgPoolGrad function, causing the application to crash...
Denial Of Service (DoS)
tensorflow is vulnerable to Denial of Service DoS attacks. The vulnerability is due to a floating point exception in SpectrogramShapeFn when the window size is 1 or the stride is negative resulting in an application crash...
Denial Of Service (DoS)
tensorflow is vulnerable to Denial of Service DoS attacks. The vulnerability is due to an integer overflow in the EditDistance function when the hypothesisshape perimeter is empty causing the application to crash...
Denial Of Service (DoS)
ImageMagick is vulnerable to Denial Of Service DoS. The vulnerability exists in DrawPrimitive function of draw.c which allows an attacker to pass a specially crafted SVG file that leads to a segmentation fault leading to an application crash...
Denial Of Service (DoS)
tensorflow is vulnerable to Denial of Service DoS attacks. The vulnerability is due to a floating point exception in TensorListSplit because it does not check for negative lengths, causing the application to crash...
snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode
A flaw was found in the snakeyaml package due to a stack-overflow in parsing YAML files. By persuading a victim to open a specially-crafted file, a remote attacker could cause the application to crash...
Denial Of Service (DoS)
tensorflow is vulnerable to Denial of Service DoS attacks. A malicious user is able to cause an integer overflow in gifio.cc leading to segmentation fault when opening multiframe gifs, causing the application to crash...
Denial Of Service (DoS)
tensorflow is vulnerable to Denial of Service DoS attacks. A malicious user is able to cause a heap-based buffer over overflow in TAvgPoolGrad, resulting in an application crash...
PT-2023-13454 · Unknown · Matrix-React-Sdk
Name of the Vulnerable Software and Affected Versions: matrix-react-sdk versions prior to 3.53.0 Description: Events sent with special strings in key places can temporarily disrupt or impede the matrix-react-sdk from functioning properly, such as by causing room or event tile crashes. The remaind...
Null pointer dereference
The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network access to an application that depends on the vulnerable code path can cause the application to crash...