Lucene search
+L

90 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2026-104712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asymmetric resource consumption amplification vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal...

7.5CVSS6AI score0.00948EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/05 7:17 p.m.•21 views

CVE-2026-104712

Asymmetric resource consumption amplification vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal java.math.BigDecimal property that is then rendered through the Struts tag library, the framework can produce a response many orders of magnitude large...

7.5CVSS0.00948EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/05 6:35 p.m.•34 views

CVE-2026-104712 Apache Struts: Disproportionate response size when rendering BigDecimal request parameters

Asymmetric resource consumption amplification vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal java.math.BigDecimal property that is then rendered through the Struts tag library, the framework can produce a response many orders of magnitude large...

0.00948EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/10/03 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-103885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/03 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-103880

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. Storing a password using the bcrypt algorithm with a high force like 30 in a LDAP...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/02 11:38 a.m.•13 views

EUVD-2026-91434

Zebra zebrad before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers to stall block verification by pushing V6 mempool transactions with invalid Halo2 proofs. Attackers can flood the shared unprioritized Halo2 verification queue with zero-fee...

8.7CVSS5.9AI score0.00343EPSS
SaveExploits0References2
OSV
OSV
•added 2026/10/02 10:17 a.m.•7 views

DEBIAN-CVE-2026-103880

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. Storing a password using the bcrypt algorithm with a high force like 30 in a LDAP server that supports this algorithm will cause the server CPU to run for hours checking the credentials. A bounded cost should be enforced...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References1
OSV
OSV
•added 2026/10/02 10:17 a.m.•9 views

DEBIAN-CVE-2026-103885

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers. This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9. User...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/02 10:17 a.m.•14 views

CVE-2026-103880

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. Storing a password using the bcrypt algorithm with a high force like 30 in a LDAP server that supports this algorithm will cause the server CPU to run for hours checking the credentials. A bounded cost should be enforced...

7.5CVSS0.00488EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/02 10:17 a.m.•12 views

CVE-2026-103885

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers. This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9. User...

7.5CVSS0.00488EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/10/02 10:17 a.m.•11 views

CVE-2026-103880

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. Storing a password using the bcrypt algorithm with a high force like 30 in a LDAP server that supports this algorithm will cause the server CPU to run for hours checking the credentials. A bounded cost should be enforced ...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References4
OSV
OSV
•added 2026/10/02 10:17 a.m.•7 views

UBUNTU-CVE-2026-103885

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers. This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9. User...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/10/02 10:17 a.m.•12 views

CVE-2026-103885

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers. This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9. User...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References4
OSV
OSV
•added 2026/10/02 10:17 a.m.•10 views

UBUNTU-CVE-2026-103880

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. Storing a password using the bcrypt algorithm with a high force like 30 in a LDAP server that supports this algorithm will cause the server CPU to run for hours checking the credentials. A bounded cost should be enforced ...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2026/10/02 10:09 a.m.•14 views

CVE-2026-103885

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers. This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9. User...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0
CVE
CVE
•added 2026/10/02 10:09 a.m.•14 views

CVE-2026-103885

An Asymmetric Resource Consumption vulnerability exists in the Apache Directory LDAP API (versions 2.1.0 through 2.1.8). An attacker can trigger a Denial of Service (DoS) by submitting specially crafted Telephone Numbers , causing the LDAP server (such as Apache DS ) to consume 100% of a CPU core...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/02 10:09 a.m.•14 views

EUVD-2026-91362

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers. This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9. User...

5.8AI score0.00488EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/02 10:09 a.m.•6 views

CVE-2026-103885 Apache Directory LDAP API: Denial of service via crafted telephone number values

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers. This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9. User...

5.8AI score0.00488EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/02 10:09 a.m.•52 views

CVE-2026-103885 Apache Directory LDAP API: Denial of service via crafted telephone number values

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers. This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9. User...

0.00488EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/10/02 10:03 a.m.•16 views

CVE-2026-103880

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. Storing a password using the bcrypt algorithm with a high force like 30 in a LDAP server that supports this algorithm will cause the server CPU to run for hours checking the credentials. A bounded cost should be enforced...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0
Rows per page
Query Builder