Lucene search
+L

3523 matches found

UbuntuCve
UbuntuCve
added 2009/12/08 12:0 a.m.36 views

CVE-2009-3563

ntprequest.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service CPU and bandwidth consumption by using MODEPRIVATE to send a spoofed 1 request or 2 response packet that triggers a continuous exchange of MODEPRIVATE error responses between two NTP daemon...

6.4CVSS7.1AI score0.32288EPSS
SaveExploits3References4
UbuntuCve
UbuntuCve
added 2009/11/12 5:54 p.m.40 views

CVE-2009-3933

WebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to cause a denial of service CPU consumption via a web page that calls the JavaScript setInterval method, which triggers an incompatibility between the WTF::currentTime and base::Time functions...

5CVSS5.9AI score0.03105EPSS
SaveExploits1References1
Prion
Prion
added 2009/11/12 5:54 p.m.23 views

Design/Logic Flaw

WebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to cause a denial of service CPU consumption via a web page that calls the JavaScript setInterval method, which triggers an incompatibility between the WTF::currentTime and base::Time functions...

5CVSS6.7AI score0.03105EPSS
SaveExploits1References12Affected Software1
CVE
CVE
added 2009/11/12 4:0 p.m.82 views

CVE-2009-3933

CVE-2009-3933 affects WebKit as used in Google Chrome up to version prior to 3.0.195.32. The issue is a denial of service caused by a CPU-consuming hot path when a web page calls JavaScript setInterval, triggered by an incompatibility between WTF::currentTime and base::Time functions. The vulnera...

5CVSS8.2AI score0.03105EPSS
SaveExploits1References12Affected Software1
Cvelist
Cvelist
added 2009/11/12 4:0 p.m.36 views

CVE-2009-3933

WebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to cause a denial of service CPU consumption via a web page that calls the JavaScript setInterval method, which triggers an incompatibility between the WTF::currentTime and base::Time functions...

8.2AI score0.03105EPSS
SaveExploits1References12
Debian CVE
Debian CVE
added 2009/11/12 4:0 p.m.46 views

CVE-2009-3933

Removed by vendor...

5CVSS6.7AI score0.03105EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2009/11/11 10:2 p.m.7 views

httpd: possible temporary DoS (CPU consumption) in mod_deflate

The moddeflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service CPU consumption...

7.1CVSS7.2AI score0.17111EPSS
SaveExploits3References4
OpenVAS
OpenVAS
added 2009/10/29 12:0 a.m.26 views

Django Forms Library Algorithmic Complexity Vulnerability

Django is prone to Algorithmic Complexity vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:djangoproject:django";...

5CVSS6.3AI score0.03686EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2009/10/29 12:0 a.m.34 views

WordPress wp-trackback.php Denial of Service Vulnerability

WordPress is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"...

4.3CVSS6.4AI score0.05827EPSS
SaveExploits2References4
UbuntuCve
UbuntuCve
added 2009/10/23 6:30 p.m.40 views

CVE-2009-3622

Algorithmic complexity vulnerability in wp-trackback.php in WordPress before 2.8.5 allows remote attackers to cause a denial of service CPU consumption and server hang via a long title parameter in conjunction with a charset parameter composed of many comma-separated "UTF-8" substrings, related t...

4.3CVSS5.8AI score0.05827EPSS
SaveExploits2References1
NVD
NVD
added 2009/10/23 6:30 p.m.33 views

CVE-2009-3622

Algorithmic complexity vulnerability in wp-trackback.php in WordPress before 2.8.5 allows remote attackers to cause a denial of service CPU consumption and server hang via a long title parameter in conjunction with a charset parameter composed of many comma-separated "UTF-8" substrings, related t...

4.3CVSS6.5AI score0.05827EPSS
SaveExploits2References13
Prion
Prion
added 2009/10/23 6:30 p.m.24 views

Design/Logic Flaw

Algorithmic complexity vulnerability in wp-trackback.php in WordPress before 2.8.5 allows remote attackers to cause a denial of service CPU consumption and server hang via a long title parameter in conjunction with a charset parameter composed of many comma-separated "UTF-8" substrings, related t...

4.3CVSS7.1AI score0.05827EPSS
SaveExploits2References13Affected Software1
OSV
OSV
added 2009/10/23 6:30 p.m.9 views

CVE-2009-3622

Algorithmic complexity vulnerability in wp-trackback.php in WordPress before 2.8.5 allows remote attackers to cause a denial of service CPU consumption and server hang via a long title parameter in conjunction with a charset parameter composed of many comma-separated "UTF-8" substrings, related t...

6.8AI score
SaveExploits0References20
CVE
CVE
added 2009/10/23 6:0 p.m.69 views

CVE-2009-3622

CVE-2009-3622 affects WordPress wp-trackback.php. The vulnerability allows remote attackers to cause a denial of service (CPU consumption and server hang) by sending a long title together with a charset parameter consisting of many comma-separated "UTF-8" substrings, exploiting mb_convert_encodin...

4.3CVSS6.5AI score0.05827EPSS
SaveExploits2References13Affected Software1
Debian CVE
Debian CVE
added 2009/10/23 6:0 p.m.63 views

CVE-2009-3622

Algorithmic complexity vulnerability in wp-trackback.php in WordPress before 2.8.5 allows remote attackers to cause a denial of service CPU consumption and server hang via a long title parameter in conjunction with a charset parameter composed of many comma-separated "UTF-8" substrings, related t...

4.3CVSS4.8AI score0.05827EPSS
SaveExploits2
Prion
Prion
added 2009/10/13 10:30 a.m.18 views

Design/Logic Flaw

Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service CPU consumption via a crafted 1 EmailField email address or 2 URLField URL that triggers a large amount of backtracking in a regular...

5CVSS6.6AI score0.03686EPSS
SaveExploits0References10Affected Software1
CVE
CVE
added 2009/10/13 10:0 a.m.90 views

CVE-2009-3695

This CVE covers the Django forms library vulnerability where the regex used to validate EmailField and URLField can backtrack excessively, causing high CPU and potential denial of service. Affected versions are Django 1.0 before 1.0.4 and 1.1 before 1.1.1. The issue stems from algorithmic complex...

5CVSS6.2AI score0.03686EPSS
SaveExploits0References10Affected Software1
Debian CVE
Debian CVE
added 2009/10/13 10:0 a.m.67 views

CVE-2009-3695

Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service CPU consumption via a crafted 1 EmailField email address or 2 URLField URL that triggers a large amount of backtracking in a regular...

5CVSS6.1AI score0.03686EPSS
SaveExploits0
OSV
OSV
added 2009/10/10 12:0 a.m.11 views

DSA-1905-1 python-django - denial of service

Bulletin has no description...

5CVSS6.3AI score0.03686EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2009/09/28 12:0 a.m.31 views

RedHat Security Advisory RHSA-2009:1452

The remote host is missing updates announced in advisory RHSA-2009:1452. neon is an HTTP and WebDAV client library, with a C interface. It provides a high-level interface to HTTP and WebDAV methods along with a low-level interface for HTTP request handling. neon supports persistent connections,...

5.8CVSS5.9AI score0.08437EPSS
SaveExploits2References2
Rows per page
Query Builder