Lucene search
+L

6 matches found

vulnersOsv
vulnersOsv
•added 2023/08/29 3:31 p.m.•2 views

org.springblade:blade-core-boot (3.6.0), org.springblade:blade-core-cloud (3.6.0) +10 more potentially affected by CVE-2023-40787 via org.springblade:blade-core-tool (3.6.0)

org.springblade:blade-core-tool MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springblade:blade-core-tool and may be impacted: - org.springblade:blade-core-boot 3.6.0 - org.springblade:blade-core-cloud 3.6.0 -...

9.8CVSS0.18161EPSS
SaveExploits0
osv_azl
osv_azl
•added 2023/08/08 7:15 p.m.•18 views

AZL-37422 CVE-2023-39533 affecting package golang for versions less than 1.21.6-1

go-libp2p is the Go implementation of the libp2p Networking Stack. Prior to versions 0.27.8, 0.28.2, and 0.29.1 malicious peer can use large RSA keys to run a resource exhaustion attack & force a node to spend time doing signature verification of the large key. This vulnerability is present in th...

7.5CVSS7.1AI score0.01501EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2023/08/08 7:15 p.m.•17 views

AZL-79074 CVE-2023-39533 affecting package golang 1.25.7-1

go-libp2p is the Go implementation of the libp2p Networking Stack. Prior to versions 0.27.8, 0.28.2, and 0.29.1 malicious peer can use large RSA keys to run a resource exhaustion attack & force a node to spend time doing signature verification of the large key. This vulnerability is present in th...

7.5CVSS7.1AI score0.01501EPSS
SaveExploits1References1
Mend
Mend
•added 2023/08/08 6:50 p.m.•9 views

CVE-2023-39533

go-libp2p is the Go implementation of the libp2p Networking Stack. Prior to versions 0.27.8, 0.28.2, and 0.29.1 malicious peer can use large RSA keys to run a resource exhaustion attack & force a node to spend time doing signature verification of the large key. This vulnerability is present in th...

8.7CVSS0.01501EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/08 12:00 a.m.•7 views

CVE-2023-39533: Allocation of Resources Without Limits or Throttling

go-libp2p is the Go implementation of the libp2p Networking Stack. Prior to versions 0.27.8, 0.28.2, and 0.29.1 malicious peer can use large RSA keys to run a resource exhaustion attack & force a node to spend time doing signature verification of the large key. This vulnerability is present in th...

7.5CVSS7.1AI score0.01501EPSS
SaveExploits1References18
CNVD
CNVD
•added 2019/03/28 12:00 a.m.•14 views

Multiple Apple Products iAP and CoreCrypto Buffer Overflow Vulnerabilities

Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple macOS Mojave is a specialized operating system developed for Mac computers.Apple macOS Mojave is a specialized operating system developed for Mac computers. A buffer overflow...

7.8CVSS6.8AI score0.01053EPSS
SaveExploits0References1
Rows per page
Query Builder