Lucene search
+L

4584 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/12/24 12:00 a.m.•7 views

CVE-2007-6523: Undefined Security Weakness

Algorithmic complexity vulnerability in Opera 9.50 beta and 9.x before 9.25 allows remote attackers to cause a denial of service CPU consumption via a crafted bitmap BMP file that triggers a large number of calculations and checks...

7.8CVSS5.8AI score0.02055EPSS
SaveExploits1References3
NVD
NVD
•added 2007/12/20 11:46 p.m.•32 views

CVE-2007-6349

P4Webs.exe in Perforce P4Web 2006.2 and earlier, when running on Windows, allows remote attackers to cause a denial of service CPU consumption via an HTTP request with an empty body and a Content-Length greater than 0...

7.8CVSS6.6AI score0.01978EPSS
SaveExploits0References7
CVE
CVE
•added 2007/12/20 11:00 p.m.•65 views

CVE-2007-6349

CVE-2007-6349 affects Perforce P4Web 2006.2 and earlier on Windows. The issue is a denial-of-service caused by a crafted HTTP request with a non-empty Content-Length but an empty body, which drives P4Webs.exe to consume up to high CPU usage remotely (no authentication required). The Symantec advi...

7.8CVSS6.6AI score0.01978EPSS
SaveExploits0References7Affected Software1
securityvulns
securityvulns
•added 2007/12/06 12:00 a.m.•127 views

Opera 9.50 beta and prior remote DoS (freeze)

Name : Opera 9.50 beta / 9.24 Remote DoS Type : Remote DoS Credits: Gynvael Coldwind of Vexillium & Simey Impact : Low Short description Opera is vulnerable to a remote DoS attack, using spacially crafted BMP files, that causes the browser to freeze for a short amount of time around 4 minutes on...

7.1AI score
SaveExploits0
Prion
Prion
•added 2007/11/15 12:46 a.m.•24 views

Design/Logic Flaw

classes/Url.php in Justin Hagstrom AutoIndex PHP Script before 2.2.4 allows remote attackers to cause a denial of service CPU and memory consumption via a %00 sequence in the dir parameter to index.php, which triggers an erroneous "recursive calculation."...

7.8CVSS7.2AI score0.08451EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/11/15 12:00 a.m.•7 views

CVE-2007-5984: Improper Input Validation

classes/Url.php in Justin Hagstrom AutoIndex PHP Script before 2.2.4 allows remote attackers to cause a denial of service CPU and memory consumption via a %00 sequence in the dir parameter to index.php, which triggers an erroneous "recursive calculation."...

7.8CVSS5.8AI score0.08451EPSS
SaveExploits1References2
Prion
Prion
•added 2007/11/08 8:46 p.m.•29 views

Design/Logic Flaw

Mozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of service CPU consumption and crash via an iframe with Javascript that sets the document.location to contain a leading NULL byte \x00 and a 1 res://, 2 about:config, or 3 file:/// URI...

7.1CVSS7.3AI score0.01174EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2007/11/08 8:00 p.m.•51 views

CVE-2007-5896

Mozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of service CPU consumption and crash via an iframe with Javascript that sets the document.location to contain a leading NULL byte \x00 and a 1 res://, 2 about:config, or 3 file:/// URI...

6.8AI score0.01174EPSS
SaveExploits0References4
Prion
Prion
•added 2007/11/06 9:46 p.m.•29 views

Design/Logic Flaw

The SNMP agent snmpagent.c in net-snmp before 5.4.1 allows remote attackers to cause a denial of service CPU and memory consumption via a GETBULK request with a large max-repeaters value...

7.8CVSS6.3AI score0.28966EPSS
SaveExploits1References29Affected Software1
FreeBSD
FreeBSD
•added 2007/11/06 12:00 a.m.•70 views

net-snmp -- denial of service via GETBULK request

CVE reports: The SNMP agent snmpagent.c in net-snmp before 5.4.1 allows remote attackers to cause a denial of service CPU and memory consumption via a GETBULK request with a large max-repeaters value...

7.8CVSS8.2AI score0.28966EPSS
SaveExploits1
CVE
CVE
•added 2007/10/26 7:00 p.m.•65 views

CVE-2002-2329

CVE-2002-2329 affects ICQ client versions 2001b, 2002a and 2002b. The vulnerability allows remote attackers to cause a denial of service (CPU consumption or crash) by sending a message containing a large number of emoticons. The connected Red Hat and CVE listing entries confirm the same impact. N...

7.8CVSS7.1AI score0.02027EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2007/10/25 7:00 p.m.•29 views

CVE-2003-1518

Adiscon WinSyslog 4.21 SP1 allows remote attackers to cause a denial of service CPU consumption via a long syslog message...

6.6AI score0.07224EPSS
SaveExploits2References4
CVE
CVE
•added 2007/10/25 7:00 p.m.•59 views

CVE-2003-1518

CVE-2003-1518 affects Adiscon WinSyslog 4.21 SP1. A remote attacker can cause a denial of service by sending a long syslog message, leading to CPU consumption or the system freeze. Public sources describe the vulnerable component as WinSyslog’s handling of syslog input over the network (default p...

7.8CVSS6.6AI score0.07224EPSS
SaveExploits2References4Affected Software1
CVE
CVE
•added 2007/10/25 7:00 p.m.•85 views

CVE-2003-1510

TinyWeb 1.9 is vulnerable to a remote denial-of-service triggered by a crafted HTTP GET request to /cgi-bin/.%00./... that consumes high CPU. Affected component is the web server’s CGI handling; root cause appears to be processing a peculiar path fragment in GET requests (".%%00."). Vendors and s...

7.8CVSS6.6AI score0.01691EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/10/25 12:00 a.m.•6 views

CVE-2003-1510: Undefined Security Weakness

TinyWeb 1.9 allows remote attackers to cause a denial of service CPU consumption via a ".%00." in an HTTP GET request to the cgi-bin directory...

7.8CVSS5.8AI score0.01691EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/10/25 12:00 a.m.•10 views

CVE-2003-1518: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adiscon WinSyslog 4.21 SP1 allows remote attackers to cause a denial of service CPU consumption via a long syslog message...

7.8CVSS5.8AI score0.07224EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2007/10/25 12:00 a.m.•34 views

GLSA-200710-27 : ImageMagick: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200710-27 ImageMagick: Multiple vulnerabilities regenrecht reported multiple infinite loops in functions ReadDCMImage and ReadXCFImage CVE-2007-4985, multiple integer overflows when handling certain types of images CVE-2007-4986,...

9.3CVSS7.9AI score0.03819EPSS
SaveExploits4References5
Cvelist
Cvelist
•added 2007/10/24 11:00 p.m.•35 views

CVE-2003-1477

MAILsweeper for SMTP 4.3.6 and 4.3.7 allows remote attackers to cause a denial of service CPU consumption via a PowerPoint attachment that either 1 is corrupt or 2 contains "embedded objects."...

6.7AI score0.01602EPSS
SaveExploits0References3
CVE
CVE
•added 2007/10/24 11:00 p.m.•69 views

CVE-2003-1494

The CVE-2003-1494 issue affects HP OpenView Network Node Manager (NNM) versions 6.2 and 6.4. A remote attacker can cause a denial of service via a crafted TCP packet, resulting in CPU consumption. The available documents describe the vulnerability and impact but do not provide a remediation or pa...

5CVSS6.9AI score0.03247EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2007/10/24 11:00 p.m.•67 views

CVE-2003-1477

CVE-2003-1477 affects MAILsweeper for SMTP versions 4.3.6 and 4.3.7. A remote attacker can trigger a DoS by sending a PowerPoint attachment that is corrupt or contains embedded objects, causing CPU exhaustion and making the server unresponsive. Documents confirm the vulnerable product and the DoS...

7.8CVSS6.8AI score0.01602EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder