Lucene search
+L

36 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 3:12 p.m.10 views

CVE-2020-13807

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference mishandling that causes a loop...

7.5CVSS6.9AI score0.0153EPSS
SaveExploits0
Cvelist
Cvelist
added 2023/12/18 1:43 p.m.47 views

CVE-2023-5236 Infinispan: circular reference on marshalling leads to dos

A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service...

4.4CVSS6.4AI score0.0089EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/12/18 1:43 p.m.13 views

CVE-2023-5236 Infinispan: circular reference on marshalling leads to dos

A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service...

4.4CVSS6.4AI score0.0089EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2023/09/28 11:55 a.m.94 views

Moderate: Red Hat Security Advisory: Red Hat Data Grid 8.4.4 security update

An update for Red Hat Data Grid 8 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

9.8CVSS6.6AI score0.03608EPSS
SaveExploits2References9
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/03 10:06 p.m.35 views

Security Bulletin: Potential SSL/TLS-related denial of service vulnerability in GSKit used with IBM Informix Client Software Development Kit (CSDK) (CVE-2013-6747)

Summary An SSL/TLS connection initiated using a malformed certificate chain from a Client or Server could contain a circular reference. The circular reference can cause the chain building logic to loop and lead to an engine crash or an engine hang when it runs out of memory. Vulnerability Details...

7.1CVSS0.4AI score0.02238EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/03 10:06 p.m.35 views

Security Bulletin: Potential SSL/TLS-related denial of service vulnerability in IBM Informix Server (CVE-2013-6747)

Summary An SSL/TLS connection initiated using a malformed certificate chain from a Client or Server could contain a circular reference. The circular reference can cause the chain building logic to loop and lead to an engine crash or an engine hang when it runs out of memory. Vulnerability Details...

7.1CVSS0.3AI score0.02238EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2020/06/04 3:15 p.m.7 views

CVE-2020-13807

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference mishandling that causes a loop...

7.5CVSS7.1AI score0.0153EPSS
SaveExploits0References1
NVD
NVD
added 2020/06/04 3:15 p.m.28 views

CVE-2020-13807

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference mishandling that causes a loop...

7.5CVSS7.5AI score0.0153EPSS
SaveExploits0References1
Prion
Prion
added 2020/06/04 3:15 p.m.20 views

Design/Logic Flaw

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference mishandling that causes a loop...

5CVSS7.5AI score0.0153EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2020/06/04 2:48 p.m.33 views

CVE-2020-13807

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference mishandling that causes a loop...

7.5AI score0.0153EPSS
SaveExploits0References1
CVE
CVE
added 2020/06/04 2:48 p.m.62 views

CVE-2020-13807

The vulnerability CVE-2020-13807 affects Foxit Reader and PhantomPDF up to version 9.7.2, caused by circular-reference mishandling that can produce a loop. Documented details specify the affected products and the root cause as circular references, with an impact description indicating a loop, but...

7.5CVSS7.5AI score0.0153EPSS
SaveExploits0References1Affected Software2
AlpineLinux
AlpineLinux
added 2020/06/04 2:48 p.m.43 views

CVE-2020-13807

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference mishandling that causes a loop...

7.5CVSS6.9AI score0.0153EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/17 2:41 p.m.41 views

Security Bulletin: Tivoli Storage Manager Server Certificate Chaining Vulnerability (CVE-2013-6747 )

Summary A certificate chain presented by a Client or Server could contain a circular reference that will cause the chain building logic to loop, crash or hang. Vulnerability Details CVE ID: CVE-2013-6747 DESCRIPTION: A certificate chain presented by a Client or Server could contain a circular...

7.1CVSS1AI score0.02238EPSS
SaveExploits1Affected Software4
Fedora
Fedora
added 2013/07/23 1:02 a.m.18 views

[SECURITY] Fedora 18 Update: nodejs-json-stringify-safe-5.0.0-1.fc18

This module provides functionality similar to JavaScript's JSON.stringify, but it doesn't blow up when it encounters circular references...

3.3CVSS3.4AI score0.00372EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2013/07/15 8:32 p.m.13 views

OpenJDK: ObjectStreamClass circular reference denial of service (Serialization, 8000638)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Serialization. NOTE: the previous...

5CVSS6.8AI score0.05084EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2013/07/15 8:29 p.m.18 views

OpenJDK: ObjectStreamClass circular reference denial of service (Serialization, 8000638)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Serialization. NOTE: the previous...

5CVSS6.8AI score0.05084EPSS
SaveExploits0References5
Rows per page
Query Builder