Lucene search
+L

8 matches found

Cvelist
Cvelist
added 2026/08/30 12:18 a.m.44 views

CVE-2026-77831 Algorithmic-complexity denial of service in AshPaperTrail full-diff list tracking

Inefficient Algorithmic Complexity vulnerability in ash-project ashpapertrail allows a user who can submit a large array attribute to a paper-trailed create or update action to cause a denial of service through excessive CPU and memory use. With full-diff change tracking,...

2.1CVSS0.00138EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/30 12:18 a.m.11 views

EEF-CVE-2026-77831 Algorithmic-complexity denial of service in AshPaperTrail full-diff list tracking

Summary Inefficient Algorithmic Complexity vulnerability in ash-project ashpapertrail allows a user who can submit a large array attribute to a paper-trailed create or update action to cause a denial of service through excessive CPU and memory use. With full-diff change tracking,...

2.1CVSS5.9AI score0.00138EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/30 12:18 a.m.10 views

CVE-2026-77831 Algorithmic-complexity denial of service in AshPaperTrail full-diff list tracking

Inefficient Algorithmic Complexity vulnerability in ash-project ashpapertrail allows a user who can submit a large array attribute to a paper-trailed create or update action to cause a denial of service through excessive CPU and memory use. With full-diff change tracking,...

2.1CVSS5.9AI score0.00138EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
added 2024/03/14 4:11 a.m.12 views

SUSE CVE-2024-27758

In RPyC before 6.0.0, when a server exposes a method that calls the attribute named array for a client-provided netref e.g., np.arrayclientnetref, a remote attacker can craft a class that results in remote code execution...

8.4CVSS8.1AI score0.00507EPSS
SaveExploits0References4
OSV
OSV
added 2024/03/12 4:15 p.m.5 views

DEBIAN-CVE-2024-27758

In RPyC before 6.0.0, when a server exposes a method that calls the attribute named array for a client-provided netref e.g., np.arrayclientnetref, a remote attacker can craft a class that results in remote code execution...

8.4CVSS8.3AI score0.00507EPSS
SaveExploits0References1
PyPA
PyPA
added 2024/03/12 4:15 p.m.13 views

PYSEC-2024-44

In RPyC before 6.0.0, when a server exposes a method that calls the attribute named array for a client-provided netref e.g., np.arrayclientnetref, a remote attacker can craft a class that results in remote code execution...

8.4CVSS7.7AI score0.00507EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/03/12 4:15 p.m.21 views

UBUNTU-CVE-2024-27758

In RPyC before 6.0.0, when a server exposes a method that calls the attribute named array for a client-provided netref e.g., np.arrayclientnetref, a remote attacker can craft a class that results in remote code execution...

8.4CVSS6.1AI score0.00507EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/03/06 12:00 a.m.13 views

PT-2024-2537 · Rpyc +1 · Rpyc +1

Name of the Vulnerable Software and Affected Versions: RPyC versions prior to 6.0.0 Description: The issue is related to the netref component of the RPyC Python library, which has an incorrect security check for standard elements. This can allow a remote attacker to execute arbitrary code by...

8.4CVSS8AI score0.00507EPSS
SaveExploits0References27
Rows per page
Query Builder