Lucene search
+L

811 matches found

Cvelist
Cvelist
added 2021/04/22 7:37 p.m.31 views

CVE-2021-0238 Junos OS: MX Series: Executing CLI command repetitively may cause the system to run out of disk space

When a MX Series is configured as a Broadband Network Gateway BNG based on Layer 2 Tunneling Protocol L2TP, executing certain CLI command may cause the system to run out of disk space, excessive disk usage may cause other complications. An administrator can use the following CLI command to monito...

5.5CVSS5.8AI score0.00232EPSS
Exploits0References1
CVE
CVE
added 2021/04/22 7:37 p.m.76 views

CVE-2021-0238

CVE-2021-0238 affects Junos OS on MX Series: repeatedly executing a CLI command may exhaust disk space, causing partial availability impact. Vulnerable versions include MX Series 17.3R1 and newer, up to but not including 17.4R3-S5, then 18.1–20.4 with various sub-versions listed; the issue does n...

5.5CVSS5.5AI score0.00232EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2021/04/22 12:0 a.m.13 views

IBM i Resource Management Error Vulnerability

IBM i is a set of operating systems from IBM in the United States that run on IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i SMTP, which can be exploited by an attacker to consume network bandwidth and disk space that may not be necessary and send spam...

8.2CVSS6.5AI score0.01338EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/04/21 12:5 p.m.31 views

CVE-2021-20501

IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to the SMTP server, caused by using a non-default configuration. An attacker could exploit this vulnerability to consume unnecessary network bandwidth and disk space, and allow remot...

5.9CVSS7.9AI score0.01338EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/04/20 12:0 a.m.4 views

IBM i 资源管理错误漏洞

IBM i is a set of operating systems from IBM in the United States that run on IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i SMTP, which can be exploited by an attacker to consume network bandwidth and disk space that may not be necessary and send spam...

8.2CVSS5.7AI score0.01338EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.25 views

SUSE: Security Advisory (SUSE-SU-2020:1842-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.1CVSS5.8AI score0.00429EPSS
Exploits0References13
Github Security Blog
Github Security Blog
added 2021/04/16 7:53 p.m.70 views

Sydent DoS (via resource exhaustion) due to improper input validation

Impact Missing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. Patches Fixed by 3175fd3. For more information If you have any questions or comments about this advisory,...

4.3CVSS4.6AI score0.00927EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2021/04/16 7:53 p.m.51 views

GHSA-PW4V-GR34-2553 Sydent DoS (via resource exhaustion) due to improper input validation

Impact Missing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. Patches Fixed by 3175fd3. For more information If you have any questions or comments about this advisory,...

5.3CVSS4.4AI score0.00927EPSS
Exploits0References6
Veracode
Veracode
added 2021/04/16 3:46 a.m.18 views

Denial Of Service (DoS)

matrixsydent is vulnerable to denial of service. Lack of validation of clientsecret and email parameters allows an attacker to cause excessive usage of disk space and memory via malicious input which can potentially lead to an application crash...

4.3CVSS5.8AI score0.00927EPSS
Exploits0References5Affected Software1
Veracode
Veracode
added 2021/04/16 1:55 a.m.13 views

Denial Of Service (DoS)

matrixsydent is vulnerable to denial of service DoS. The vulnerability exists as the body of the HTTP request is not limited, nor to limit the response size, causing the exhaustion of both disk space, and memory...

7.5CVSS1.3AI score0.01833EPSS
Exploits0References7Affected Software1
NVD
NVD
added 2021/04/15 6:15 p.m.26 views

CVE-2021-29433

Sydent is a reference Matrix identity server. In Sydent versions 2.2.0 and prior, sissing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. A patch for the vulnerability i...

4.3CVSS0.00927EPSS
Exploits0References2
OSV
OSV
added 2021/04/15 6:15 p.m.25 views

PYSEC-2021-24

Impact Missing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. Patches Fixed by 3175fd3. Workarounds There are no known workarounds. References n/a For more information ...

4.3CVSS4.3AI score0.00927EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/04/15 5:55 p.m.32 views

CVE-2021-29433 Denial of service (via resource exhaustion) due to improper input validation

Sydent is a reference Matrix identity server. In Sydent versions 2.2.0 and prior, sissing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. A patch for the vulnerability i...

4.3CVSS4.9AI score0.00927EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2021/04/15 5:55 p.m.52 views

CVE-2021-29433

Removed by vendor...

4.3CVSS4.8AI score0.00927EPSS
Exploits0
Github Security Blog
Github Security Blog
added 2021/04/13 3:12 p.m.40 views

Denial of service (via resource exhaustion) due to improper input validation on third-party identifier endpoints

Impact Missing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. Patches The issue is fixed by 9321. Workarounds Depending on the needs and configuration of the homeserver...

6.5CVSS2.9AI score0.01538EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2021/04/13 3:12 p.m.27 views

GHSA-JRH7-MHHX-6H88 Denial of service (via resource exhaustion) due to improper input validation on groups/communities endpoints

Impact Missing input validation of some parameters on the groups also known as communities endpoints could cause excessive use of disk space and memory leading to resource exhaustion. Additionally clients may have issues rendering large fields. Patches This issue is fixed by 9321 and 9393...

6CVSS6.3AI score0.01596EPSS
Exploits0References10
Github Security Blog
Github Security Blog
added 2021/04/13 3:12 p.m.35 views

Denial of service (via resource exhaustion) due to improper input validation on groups/communities endpoints

Impact Missing input validation of some parameters on the groups also known as communities endpoints could cause excessive use of disk space and memory leading to resource exhaustion. Additionally clients may have issues rendering large fields. Patches This issue is fixed by 9321 and 9393...

6.5CVSS2AI score0.01596EPSS
Exploits0References10Affected Software1
OSV
OSV
added 2021/04/12 10:15 p.m.19 views

CVE-2021-21393

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

6.5CVSS6.4AI score
Exploits0References5
NVD
NVD
added 2021/04/12 9:15 p.m.35 views

CVE-2021-21394

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

6.5CVSS0.01538EPSS
Exploits0References5
OSV
OSV
added 2021/04/12 9:15 p.m.4 views

DEBIAN-CVE-2021-21394

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

6.5CVSS6.7AI score0.01538EPSS
Exploits0References1
Rows per page
Query Builder