Lucene search
K

4 matches found

Github Security Blog
Github Security Blog
added 2024/10/25 7:44 p.m.16 views

Werkzeug possible resource exhaustion when parsing file data in forms

Applications using Werkzeug to parse multipart/form-data requests are vulnerable to resource exhaustion. A specially crafted form body can bypass the Request.maxformmemorysize setting. The Request.maxcontentlength setting, as well as resource limits provided by deployment software and platforms,...

7.5CVSS7.3AI score0.0112EPSS
Exploits0References9Affected Software2
OSV
OSV
added 2024/10/25 7:44 p.m.23 views

GHSA-Q34M-JH98-GWM2 Werkzeug possible resource exhaustion when parsing file data in forms

Applications using Werkzeug to parse multipart/form-data requests are vulnerable to resource exhaustion. A specially crafted form body can bypass the Request.maxformmemorysize setting. The Request.maxcontentlength setting, as well as resource limits provided by deployment software and platforms,...

7.5CVSS6AI score0.0112EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2024/02/13 12:0 a.m.0 views

PT-2024-1811 · Microsoft · Azure Kubernetes Service Confidential Containers

Name of the Vulnerable Software and Affected Versions: Microsoft Azure Kubernetes Service Confidential Containers affected versions not specified Description: The issue is related to insufficient input validation in the deployment and management software of Azure Kubernetes Service Confidential...

9CVSS9.6AI score0.00275EPSS
Exploits0References5
Veracode
Veracode
added 2019/05/02 4:54 a.m.18 views

Arbitrary Code Execution

java is vulnerable to arbitrary code execution. The vulnerability exists through Deployment...

10CVSS6.7AI score0.0652EPSS
Exploits0References16Affected Software1
Rows per page
Query Builder