1899 matches found
Denial Of Service (DoS)
rsshub is vulnerable to denial of service attacks. A malicious user is able to cause abnormally high CPU usages in the system via passing specifically crafted values through filter and filterout parameters, resulting in denial of service conditions...
GHSA-JVXX-V45P-V5VF Denial of Service (DoS) vulnerability in RSSHub
Impact Passing some special values to the filter and filterout parameters can cause an abnormally high CPU. Impact on the performance of the servers and RSSHub services. Patches It is fixed in 5c4177441417b44a6e45c3c63e9eac2504abeb5b , please update to this or the later versions as soon as...
PT-2022-20535 · Rsshub · Rsshub
Name of the Vulnerable Software and Affected Versions: RSSHub versions prior to 5c4177441417 Description: The issue arises when special values are passed to the filter and filterout parameters, causing abnormally high CPU usage. This impacts the performance of servers and RSSHub services,...
InvenTree 资源管理错误漏洞
InvenTree is an open source inventory management system from InvenTree Open Source. Provides powerful low-level inventory control and parts tracking . A denial of service vulnerability exists in InvenTree versions prior to 0.8.0 that stems from the annotations feature not including a character...
CVE-2022-30780
Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service CPU consumption from stuck connections because connectionreadheadermore in connections.c has a typo that disrupts use of multiple read operations on large headers...
PT-2022-7123
Name of the Vulnerable Software and Affected Versions pypdf versions prior to 3.9.0 Description The issue is related to the execution of parse content stream which can lead to an infinite loop if a crafted PDF is used. This can occur, for example, when a user extracts text from such a PDF. The...
adbyby denial of service vulnerability
adbyby is a very powerful ad filtering software. It can filter pop-ups and video headers from all major websites to eliminate malicious ads. adbyby version 2.7 has a denial-of-service vulnerability. The vulnerability stems from allowing an external user to establish a connection via port 8118. Th...
CVE-2022-29767
adbyby v2.7 allows external users to make connections via port 8118. This can cause a program logic error and lead to a Denial of Service DoS via high CPU usage due to a large number of connections...
CVE-2022-29767
CVE-2022-29767 affects adbyby v2.7. The vulnerability arises from allowing external users to establish connections via port 8118, causing a program logic error and enabling Denial of Service through high CPU usage when many connections are created. The available connected sources confirm the same...
CVE-2022-29767
adbyby v2.7 allows external users to make connections via port 8118. This can cause a program logic error and lead to a Denial of Service DoS via high CPU usage due to a large number of connections...
Nginx Plus R1 < R15-P2 / R16 < R16-P1 Multiple Vulnerabilities
According to its self reported version, the installed version of Nginx Plus is R1 built on Open Source version 1.5.3-1 prior to R15-P2 or R16 built on Open Source version 1.15.2 prior to R16-P1. It is, therefore, affected by the following issues : - An unspecified error exists related to the modu...
Deserialization of Untrusted Data in Spring AMQP
In Spring AMQP versions 2.2.0 - 2.2.18 and 2.3.0 - 2.3.10, the Spring AMQP Message object, in its toString method, will deserialize a body for a message with content type application/x-java-serialized-object. It is possible to construct a malicious java.util.Dictionary object that can cause 100%...
Infinite loop
Overview std/crypto/elliptic is a Go standard library package std/crypto/elliptic Affected versions of this package are vulnerable to Infinite loop. Go Vulnerability Report: via the crypto/elliptic process. An attacker can cause excessive CPU consumption or potentially recover private keys by...
Regular Expression Denial Of Service (ReDoS)
urlregex is vulnerable to regular expression denial of service. The vulnerability exists due to a lack of sanitization which allows an attacker to cause an application crash via cpu usage...
Regular expression denial of service in url_regex
All versions of package url-regex are vulnerable to Regular Expression Denial of Service ReDoS which can cause the CPU usage to crash...
GHSA-HG3W-7HJ9-M3F7 Regular expression denial of service in url_regex
All versions of package url-regex are vulnerable to Regular Expression Denial of Service ReDoS which can cause the CPU usage to crash...
CVE-2021-41039
In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of performance and possible denial of service...
CVE-2022-21195
All versions of package url-regex are vulnerable to Regular Expression Denial of Service ReDoS which can cause the CPU usage to crash...
