Lucene search
+L

3552 matches found

Cvelist
Cvelist
added 2020/03/06 7:14 p.m.32 views

CVE-2020-7212

The encodeinvalidchars function in util/url.py in the urllib3 library 1.25.2 through 1.25.7 for Python allows a denial of service CPU consumption because of an inefficient algorithm. The percentencodings array contains all matches of percent encodings. It is not deduplicated. For a URL of length ...

7.4AI score0.03371EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2020/03/06 12:00 a.m.7 views

PT-2020-5140

Name of the Vulnerable Software and Affected Versions urllib3 library versions 1.25.2 through 1.25.7 Description The issue is related to an inefficient algorithm in the encode invalid chars function, which can lead to a denial of service due to CPU consumption. This happens because the percent...

8.7CVSS7.1AI score0.03371EPSS
SaveExploits0References20
Tenable Nessus
Tenable Nessus
added 2020/03/06 12:00 a.m.22 views

FreeBSD : TiMidity++ -- Multiple vulnerabilities (d37407bd-5c5f-11ea-bb2a-8c164582fbac)

qflb.wu of DBAPPSecurity reports : Ihe insertnotesteps function in readmidi.c in TiMidity++ 2.14.0 can cause a denial of servicedivide-by-zero error and application crash via a crafted mid file. The resamplegauss function in resample.c in TiMidity++ 2.14.0 can cause a denial of...

7.1CVSS5.5AI score0.01097EPSS
SaveExploits0References5
OSV
OSV
added 2020/02/13 10:49 a.m.7 views

MGASA-2020-0084 Updated exiv2 packages fix security vulnerability

The updated packages fix a security vulnerability: In Jp2Image::readMetadata in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

7.8CVSS6AI score0.04296EPSS
SaveExploits1References3
OSV
OSV
added 2020/01/27 5:15 a.m.9 views

PYSEC-2020-344

In Jp2Image::readMetadata in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

7.5CVSS6.8AI score
SaveExploits0References5
Debian CVE
Debian CVE
added 2020/01/27 4:22 a.m.35 views

CVE-2019-20421

In Jp2Image::readMetadata in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

7.8CVSS7.1AI score0.04296EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.37 views

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2019-1698)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS8.5AI score0.19069EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.28 views

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2019-1742)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS8.5AI score0.19069EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.27 views

Huawei EulerOS: Security Advisory for libcroco (EulerOS-SA-2019-2605)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.2AI score0.12996EPSS
SaveExploits7References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.57 views

Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2017-1029)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.2AI score0.57595EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.35 views

Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2017-1112)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS7AI score0.03412EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2020/01/13 12:00 a.m.32 views

EulerOS Virtualization for ARM 64 3.0.5.0 : libcroco (EulerOS-SA-2020-1076)

According to the versions of the libcroco package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The crparserparseselectorcore function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial of...

7.1CVSS6.3AI score0.12996EPSS
SaveExploits5References3
Symantec
Symantec
added 2020/01/08 12:00 a.m.40 views

Juniper Junos CVE-2020-1600 Denial of Service Vulnerability

Description Juniper Junos is prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause the device to consume excessive CPU resources, denying service to legitimate users. Technologies Affected Juniper Junos 12.3X48 Juniper Junos 12.3X48-D10 Juniper Junos 12.3X48-D15...

0.5AI score0.01196EPSS
SaveExploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/01/02 5:21 p.m.74 views

Security Bulletin: IBM API Connect is vulnerable to denial of service attacks via HTTP/2.

Summary API Connect has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2019-9516 DESCRIPTION: Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and...

7.8CVSS0.4AI score0.87399EPSS
SaveExploits1Affected Software1
NVD
NVD
added 2019/12/30 8:15 p.m.15 views

CVE-2012-5645

A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption...

7.8CVSS7.3AI score0.04254EPSS
SaveExploits0References13
OSV
OSV
added 2019/12/30 8:15 p.m.2 views

DEBIAN-CVE-2012-5645

A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption...

7.5CVSS7.1AI score0.04254EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2019/12/30 8:15 p.m.18 views

CVE-2012-5645

A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption...

7.8CVSS7AI score0.04254EPSS
SaveExploits0References4
Prion
Prion
added 2019/12/30 8:15 p.m.19 views

Denial of service

A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption...

7.8CVSS6.9AI score0.04254EPSS
SaveExploits0References13Affected Software2
Debian CVE
Debian CVE
added 2019/12/30 7:57 p.m.44 views

CVE-2012-5645

A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption...

7.8CVSS7.3AI score0.04254EPSS
SaveExploits0
Cvelist
Cvelist
added 2019/12/30 7:57 p.m.26 views

CVE-2012-5645

A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption...

7.2AI score0.04254EPSS
SaveExploits0References13
Rows per page
Query Builder