Lucene search
+L

17846 matches found

Github Security Blog
Github Security Blog
added 2022/05/13 1:08 a.m.33 views

Uncontrolled Resource Consumption in Apache ZooKeeper

Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, which leads to the server unable to serve legitimate client requests. Apache ZooKeeper thru version 3.4.9 and 3.5.2 suffer from this issue, fixed in 3.4.10,...

7.5CVSS7.5AI score0.73064EPSS
SaveExploits1References14Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/13 1:07 a.m.43 views

Apache Geronimo Hash Collisions Cause DoS

Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters. NOTE: this might overlap CVE-2011-4461...

7.8CVSS7.2AI score0.80569EPSS
SaveExploits6References18Affected Software1
OSV
OSV
added 2022/05/13 1:07 a.m.51 views

GHSA-V3H8-RW48-H4GR Apache Geronimo Hash Collisions Cause DoS

Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters. NOTE: this might overlap CVE-2011-4461...

7.8CVSS5.3AI score0.80569EPSS
SaveExploits6References18
NVD
NVD
added 2022/05/12 5:15 p.m.36 views

CVE-2021-33135

Uncontrolled resource consumption in the Linux kernel drivers for IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...

5.5CVSS0.00272EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2022/05/12 5:15 p.m.38 views

CVE-2021-33135

Uncontrolled resource consumption in the Linux kernel drivers for IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...

5.5CVSS6.8AI score0.00272EPSS
SaveExploits0References3
OSV
OSV
added 2022/05/12 5:15 p.m.8 views

UBUNTU-CVE-2021-33135

Uncontrolled resource consumption in the Linux kernel drivers for IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...

5.5CVSS6.7AI score0.00272EPSS
SaveExploits0References4
Prion
Prion
added 2022/05/12 5:15 p.m.23 views

Design/Logic Flaw

Uncontrolled resource consumption in the Linux kernel drivers for IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...

2.1CVSS5AI score0.00272EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/05/12 4:35 p.m.36 views

CVE-2021-33135

Uncontrolled resource consumption in the Linux kernel drivers for IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...

6AI score0.00272EPSS
SaveExploits0References1
CVE
CVE
added 2022/05/12 4:35 p.m.119 views

CVE-2021-33135

Technical details about CVE-2021-33135 are not included in the provided connected documents. The material only reiterates a general DoS risk in Linux kernel SGX drivers. Monitor for official advisories for affected platforms and mitigations.

5.5CVSS5.5AI score0.00272EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2022/05/12 4:35 p.m.66 views

CVE-2021-33135

Uncontrolled resource consumption in the Linux kernel drivers for IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...

5.5CVSS5.5AI score0.00272EPSS
SaveExploits0
NVD
NVD
added 2022/05/12 4:15 p.m.14 views

CVE-2022-1699

Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications...

9.9CVSS0.01077EPSS
SaveExploits1References2
Prion
Prion
added 2022/05/12 4:15 p.m.27 views

Code injection

Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications...

5CVSS7.5AI score0.01077EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/05/12 3:20 p.m.35 views

CVE-2022-1699 Uncontrolled Resource Consumption in causefx/organizr

Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications...

9.9CVSS7.7AI score0.01077EPSS
SaveExploits1References2
CVE
CVE
added 2022/05/12 3:20 p.m.80 views

CVE-2022-1699

CVE-2022-1699 affects the Organizr project (causefx/organizr) prior to version 2.1.2000. The issue is described as Uncontrolled Resource Consumption that can be abused to perform a denial-of-service (DoS) , potentially preventing genuine users from accessing resources/applications. Public documen...

9.9CVSS7.7AI score0.01077EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2022/05/12 3:20 p.m.27 views

CVE-2022-1699 Uncontrolled Resource Consumption in causefx/organizr

Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications...

9.9CVSS8.7AI score
SaveExploits0References4
Mageia
Mageia
added 2022/05/12 10:24 a.m.42 views

Updated python-rencode packages fix security vulnerability

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory. CVE-2021-40839...

7.5CVSS4.4AI score0.05566EPSS
SaveExploits0References2
Huntr
Huntr
added 2022/05/11 7:56 p.m.20 views

Uncontrolled Resource Consumption in "Category Editor"

Description The Organizr application allows large characters to insert in the input field "Category Editor" which can allow attackers to cause a Denial of Service DoS via a crafted HTTP request. Proof of Concept 1.Login to the application 2.Go to "Tab Editor" - "Categories" . 3.Click on the +...

2.1AI score
SaveExploits0References1
Huntr
Huntr
added 2022/05/11 6:55 p.m.55 views

Uncontrolled Resource Consumption

Description The Organizr application allows large characters to insert in the input field "Username" which can allow attackers to cause a Denial of Service DoS via a crafted HTTP request. Proof of Concept 1.Sign up to the application, capture the request in burp suites, and send it to Repeater...

5CVSS1.4AI score0.01077EPSS
SaveExploits1References1
NVD
NVD
added 2022/05/11 3:15 p.m.31 views

CVE-2022-1510

An issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly handling malicious text in the CI Editor and CI Pipeline details page allowing t...

7.5CVSS0.01931EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2022/05/11 3:15 p.m.41 views

CVE-2022-1510

An issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly handling malicious text in the CI Editor and CI Pipeline details page allowing t...

7.5CVSS6.9AI score0.01931EPSS
SaveExploits0References4
Rows per page
Query Builder