Lucene search
+L

4168 matches found

Veracode
Veracode
added 2026/02/11 9:09 a.m.12 views

Denial Of Service

Django is vulnerable to Denial Of Service. The vulnerability is due to inefficient processing of unmatched HTML end tags in Truncator.chars and Truncator.words with html=True and related template filters, where crafted input containing a large number of unmatched closing tags can trigger excessiv...

7.5CVSS5.5AI score0.01032EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/11 12:00 a.m.13 views

PT-2026-7723

Name of the Vulnerable Software and Affected Versions set-in versions 2.0.1 through 2.0.4 Description set-in is a Node.js package that sets values within nested associative structures given an array of keys. A flaw exists where, despite a previous attempt to prevent prototype pollution by checkin...

9.8CVSS6.4AI score0.00504EPSS
SaveExploits1References16
Positive Technologies
Positive Technologies
added 2026/02/11 12:00 a.m.19 views

PT-2026-7701

Office Product Key Finder 1.5.4 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the registration code input. Attackers can create a specially crafted text file and paste it into the 'Name and Key' field to trigger an application crash...

7.5CVSS5.6AI score0.00346EPSS
SaveExploits0References4
OSV
OSV
added 2026/02/10 4:16 a.m.13 views

CVE-2026-24320

Due to improper memory management in SAP NetWeaver and ABAP Platform Application Server ABAP, an authenticated attacker could exploit logical errors in memory management by supplying specially crafted input containing unique characters, which are improperly converted. This may result in memory...

3.1CVSS5.8AI score0.00247EPSS
SaveExploits0References2
NVD
NVD
added 2026/02/10 4:16 a.m.14 views

CVE-2026-24320

Due to improper memory management in SAP NetWeaver and ABAP Platform Application Server ABAP, an authenticated attacker could exploit logical errors in memory management by supplying specially crafted input containing unique characters, which are improperly converted. This may result in memory...

3.1CVSS0.00247EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/02/10 3:03 a.m.46 views

CVE-2026-24320 Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP)

Due to improper memory management in SAP NetWeaver and ABAP Platform Application Server ABAP, an authenticated attacker could exploit logical errors in memory management by supplying specially crafted input containing unique characters, which are improperly converted. This may result in memory...

3.1CVSS0.00247EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/10 3:03 a.m.31 views

CVE-2026-24320

CVE-2026-24320 : In SAP NetWeaver and ABAP Platform (Application Server ABAP), improper memory management can be triggered by specially crafted input with unique characters, causing memory corruption and potential leakage of memory content. The vulnerability affects authenticated attackers via ne...

3.1CVSS5.7AI score0.00247EPSS
SaveExploits0References2Affected Software3
Vulnrichment
Vulnrichment
added 2026/02/10 3:03 a.m.7 views

CVE-2026-24320 Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP)

Due to improper memory management in SAP NetWeaver and ABAP Platform Application Server ABAP, an authenticated attacker could exploit logical errors in memory management by supplying specially crafted input containing unique characters, which are improperly converted. This may result in memory...

3.1CVSS5.7AI score0.00247EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/02/10 12:24 a.m.11 views

SUSE CVE-2026-25556

MuPDF versions 1.23.0 through 1.27.0 contain a double-free vulnerability in fzfillpixmapfromdisplaylist when an exception occurs during display list rendering. The function accepts a caller-owned fzpixmap pointer but incorrectly drops the pixmap in its error handling path before rethrowing the...

7.5CVSS5.5AI score0.00496EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/02/10 12:00 a.m.12 views

PT-2026-7219

Due to improper memory management in SAP NetWeaver and ABAP Platform Application Server ABAP, an authenticated attacker could exploit logical errors in memory management by supplying specially crafted input containing unique characters, which are improperly converted. This may result in memory...

3.1CVSS5.7AI score0.00247EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/02/08 12:44 a.m.18 views

SUSE CVE-2020-37127

Dnsmasq-utils 2.79-1 contains a buffer overflow vulnerability in the dhcprelease utility that allows attackers to cause a denial of service by supplying excessive input. Attackers can trigger a core dump and terminate the dhcprelease process by sending a crafted input string longer than 16...

6.9CVSS5.8AI score0.00189EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/02/06 11:07 p.m.13 views

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow via the llamagrammaradvancestack function. An attacker can cause a stack-based buffer overflow by providing specially crafted input to the GBNF Grammar Handler component. Remediation There is no fixed version...

4.8CVSS6.1AI score0.00129EPSS
SaveExploits0References2
OSV
OSV
added 2026/02/05 6:16 p.m.11 views

AZL-76886 CVE-2025-47911 affecting package cloud-provider-kubevirt for versions less than 0.5.1-3

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

5.3CVSS6.6AI score0.00521EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/05 6:16 p.m.11 views

AZL-76928 CVE-2025-47911 affecting package docker-buildx for versions less than 0.14.0-10

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

5.3CVSS6.6AI score0.00521EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/05 6:16 p.m.14 views

AZL-76793 CVE-2025-47911 affecting package azl-otel-collector 0.127.0-1

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

5.3CVSS7.3AI score0.00521EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/05 6:16 p.m.12 views

AZL-76962 CVE-2025-47911 affecting package multus for versions less than 4.0.2-10

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

5.3CVSS5.7AI score0.00521EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/05 5:48 p.m.7 views

CVE-2025-58190 Infinite parsing loop in golang.org/x/net

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

5.5AI score0.00501EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2026/02/05 5:16 p.m.12 views

CVE-2020-37127

Dnsmasq-utils 2.79-1 contains a buffer overflow vulnerability in the dhcprelease utility that allows attackers to cause a denial of service by supplying excessive input. Attackers can trigger a core dump and terminate the dhcprelease process by sending a crafted input string longer than 16...

6.9CVSS6.1AI score0.00189EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/02/05 4:13 p.m.5 views

CVE-2020-37127 dnsmasq-utils 2.79-1 - 'dhcp_release' Denial of Service

Dnsmasq-utils 2.79-1 contains a buffer overflow vulnerability in the dhcprelease utility that allows attackers to cause a denial of service by supplying excessive input. Attackers can trigger a core dump and terminate the dhcprelease process by sending a crafted input string longer than 16...

6.9CVSS5.8AI score0.00189EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/02/05 4:13 p.m.11 views

EUVD-2020-31023

Dnsmasq-utils 2.79-1 contains a buffer overflow vulnerability in the dhcprelease utility that allows attackers to cause a denial of service by supplying excessive input. Attackers can trigger a core dump and terminate the dhcprelease process by sending a crafted input string longer than 16...

6.9CVSS5.8AI score0.00189EPSS
SaveExploits0References3
Rows per page
Query Builder