Lucene search
+L

1028 matches found

OSV
OSV
•added 2024/03/06 10:53 a.m.•90 views

BIT-DISCOURSE-2023-44388 Malicious requests can fill up the log files resulting in a deinal of service in Discourse

Discourse is an open source platform for community discussion. A malicious request can cause production log files to quickly fill up and thus result in the server running out of disk space. This problem has been patched in the 3.1.1 stable and 3.2.0.beta2 versions of Discourse. It is possible to...

7.5CVSS7.5AI score0.00531EPSS
SaveExploits0References3
OSV
OSV
•added 2024/03/06 10:51 a.m.•40 views

BIT-DISCOURSE-2024-21655 Insufficient control of custom field value sizes

Discourse is a platform for community discussion. For fields that are client editable, limits on sizes are not imposed. This allows a malicious actor to cause a Discourse instance to use excessive disk space and also often excessive bandwidth. The issue is patched 3.1.4 and 3.2.0.beta4...

4.3CVSS4.7AI score0.00566EPSS
SaveExploits0References2
Penetration Testing Lab
Penetration Testing Lab
•added 2024/01/29 5:59 a.m.•30 views

Persistence – Disk Clean-up

Disk Clean-up is a utility which is part of Windows operating systems and can free up hard drive disk space by deleting mainly cache and… Continue reading - Persistence - Disk Clean-up...

7.4AI score
SaveExploits0
CNVD
CNVD
•added 2024/01/26 12:00 a.m.•37 views

Discourse Resource Management Error Vulnerability

Discourse is an open source community discussion platform. The platform includes features such as community, email and chat rooms. A resource management error vulnerability exists in Discourse, which stems from an unimposed size limit on client-side editable fields, and can be exploited by an...

4.3CVSS6.7AI score0.00566EPSS
SaveExploits0References1
Prion
Prion
•added 2024/01/12 9:15 p.m.•30 views

Design/Logic Flaw

Discourse is a platform for community discussion. For fields that are client editable, limits on sizes are not imposed. This allows a malicious actor to cause a Discourse instance to use excessive disk space and also often excessive bandwidth. The issue is patched 3.1.4 and 3.2.0.beta4...

4CVSS7AI score0.00566EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/01/12 8:46 p.m.•37 views

CVE-2024-21655 Insufficient control of custom field value sizes

Discourse is a platform for community discussion. For fields that are client editable, limits on sizes are not imposed. This allows a malicious actor to cause a Discourse instance to use excessive disk space and also often excessive bandwidth. The issue is patched 3.1.4 and 3.2.0.beta4...

4.3CVSS5.2AI score0.00566EPSS
SaveExploits0References1
OSV
OSV
•added 2024/01/12 8:46 p.m.•37 views

CVE-2024-21655 Insufficient control of custom field value sizes

Discourse is a platform for community discussion. For fields that are client editable, limits on sizes are not imposed. This allows a malicious actor to cause a Discourse instance to use excessive disk space and also often excessive bandwidth. The issue is patched 3.1.4 and 3.2.0.beta4...

4.3CVSS4.8AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/12 12:00 a.m.•4 views

CVE-2024-21655: Uncontrolled Resource Consumption

Discourse is a platform for community discussion. For fields that are client editable, limits on sizes are not imposed. This allows a malicious actor to cause a Discourse instance to use excessive disk space and also often excessive bandwidth. The issue is patched 3.1.4 and 3.2.0.beta4...

4.3CVSS5.6AI score0.00566EPSS
SaveExploits0References3
Citrix
Citrix
•added 2023/11/27 12:00 a.m.•19 views

How to verify disk space warnings on Storefront servers.

To verify what may be using disk space on a storefront server where the admin has received an alert that the server is low on disk space...

7.1AI score
SaveExploits0
OSV
OSV
•added 2023/11/20 9:15 a.m.•11 views

DEBIAN-CVE-2022-46337

A cleverly devised username might bypass LDAP authentication checks. In LDAP-authenticated Derby installations, this could let an attacker fill up the disk by creating junk Derby databases. In LDAP-authenticated Derby installations, this could also allow the attacker to execute malware which was...

9.8CVSS7.1AI score0.01418EPSS
SaveExploits0References1
Amazon
Amazon
•added 2023/11/03 12:00 a.m.•41 views

Important: php56

Issue Overview: In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or dis...

7.5CVSS6.8AI score0.01408EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2023/11/03 12:00 a.m.•61 views

Amazon Linux AMI : php56 (ALAS-2023-1879)

The version of php56 installed on the remote host is prior to 5.6.40-1.144. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1879 advisory. In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause...

7.5CVSS6.9AI score0.01408EPSS
SaveExploits0References4
OSV
OSV
•added 2023/10/23 6:17 a.m.•79 views

BIT-2023-44388

Discourse is an open source platform for community discussion. A malicious request can cause production log files to quickly fill up and thus result in the server running out of disk space. This problem has been patched in the 3.1.1 stable and 3.2.0.beta2 versions of Discourse. It is possible to...

7.5CVSS6.8AI score0.00531EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2023/10/16 10:15 p.m.•55 views

CVE-2023-44388

Discourse is an open source platform for community discussion. A malicious request can cause production log files to quickly fill up and thus result in the server running out of disk space. This problem has been patched in the 3.1.1 stable and 3.2.0.beta2 versions of Discourse. It is possible to...

7.5CVSS7.5AI score0.00531EPSS
SaveExploits0References2
Prion
Prion
•added 2023/10/16 10:15 p.m.•35 views

Design/Logic Flaw

Discourse is an open source platform for community discussion. A malicious request can cause production log files to quickly fill up and thus result in the server running out of disk space. This problem has been patched in the 3.1.1 stable and 3.2.0.beta2 versions of Discourse. It is possible to...

5CVSS7.5AI score0.00531EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/10/16 9:11 p.m.•59 views

CVE-2023-44388 Malicious requests can fill up the log files resulting in a deinal of service in Discourse

Discourse is an open source platform for community discussion. A malicious request can cause production log files to quickly fill up and thus result in the server running out of disk space. This problem has been patched in the 3.1.1 stable and 3.2.0.beta2 versions of Discourse. It is possible to...

7.5CVSS7.8AI score0.00531EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/10/16 9:11 p.m.•20 views

CVE-2023-44388 Malicious requests can fill up the log files resulting in a deinal of service in Discourse

Discourse is an open source platform for community discussion. A malicious request can cause production log files to quickly fill up and thus result in the server running out of disk space. This problem has been patched in the 3.1.1 stable and 3.2.0.beta2 versions of Discourse. It is possible to...

7.5CVSS7.5AI score0.00531EPSS
SaveExploits0References2
OSV
OSV
•added 2023/10/16 9:11 p.m.•35 views

CVE-2023-44388 Malicious requests can fill up the log files resulting in a deinal of service in Discourse

Discourse is an open source platform for community discussion. A malicious request can cause production log files to quickly fill up and thus result in the server running out of disk space. This problem has been patched in the 3.1.1 stable and 3.2.0.beta2 versions of Discourse. It is possible to...

7.5CVSS7.4AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/16 12:00 a.m.•2 views

CVE-2023-44388: Uncontrolled Resource Consumption

Discourse is an open source platform for community discussion. A malicious request can cause production log files to quickly fill up and thus result in the server running out of disk space. This problem has been patched in the 3.1.1 stable and 3.2.0.beta2 versions of Discourse. It is possible to...

7.5CVSS6.9AI score0.00531EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/10/16 12:00 a.m.•20 views

Discourse Resource Management Error Vulnerability

Discourse is an open source community discussion platform. The platform includes community, email, and chat room features. Discourse suffers from a resource management error vulnerability that stems from the fact that a malicious request could cause the production log file to fill up quickly,...

7.5CVSS6.8AI score0.00531EPSS
SaveExploits0References3
Rows per page
Query Builder