3593 matches found
CVE-2013-6801
Microsoft Word 2003 SP2 and SP3 on Windows XP SP3 allows remote attackers to cause a denial of service CPU consumption via a malformed .doc file containing an embedded image, as demonstrated by word2003forkbomb.doc, related to a "fork bomb" issue...
CVE-1999-0449
The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service CPU consumption via a direct request to the 1 advsearch.asp, 2 query.asp, or 3 search.asp scripts...
SUSE: Security Advisory (SUSE-SU-2025:4390-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-66453
Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float poing number into the toFixed function, it might lead to high CPU consumption and a potential Denial of Service. Small...
OESA-2025-2707 golang security update
. Security Fixes: tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When...
HSEC-2023-0001 Hash flooding vulnerability in aeson
Hash flooding vulnerability in aeson aeson was vulnerable to hash flooding a.k.a. hash DoS. The issue is a consequence of the HashMap implementation from unordered-containers. It results in a denial of service through CPU consumption. This technique has been used in real-world attacks against a...
AZL-69290 CVE-2025-61725 affecting package golang 1.25.12-1
The ParseAddress function constructs domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption...
CVE-2025-61725
CVE-2025-61725 is confirmed with technical details in connected advisory: the vulnerability is in the ParseAddress function, where domain-literal components are built by repeated string concatenation, causing excessive CPU usage when parsing large domain literals. The F5 advisory specifically map...
EUVD-2005-2507
Malware in sbrugna...
EUVD-2007-1079
Malware in sbrugna...
EUVD-2011-1476
Malware in sbrugna...
EUVD-2019-5635
Malware in sbrugna...
EUVD-2014-2631
Malware in sbrugna...
EUVD-2009-3258
Malware in sbrugna...
EUVD-2006-2277
Malware in sbrugna...
EUVD-2012-5291
Malware in sbrugna...
EUVD-2013-7117
Malware in sbrugna...
EUVD-2012-2321
Malware in sbrugna...