Lucene search
+L

3500 matches found

Veracode
Veracode
added 2019/03/14 3:23 a.m.32 views

Denial Of Service (DoS)

actionpack is vulnerable to information disclosure. A remote attacker is able crash to the application by sending malicious Accept headers that would cause the application to consume a large amount of resources...

7.5CVSS7AI score0.08671EPSS
SaveExploits3References15Affected Software9
NVD
NVD
added 2019/03/13 4:29 p.m.17 views

CVE-2019-9746

In libwebm before 2019-03-08, a NULL pointer dereference caused by the functions OutputCluster and OutputTracks in webminfo.cc will trigger an abort, which allows a DoS attack, a similar issue to CVE-2018-19212...

7.5CVSS6.6AI score0.01644EPSS
SaveExploits0References2
Prion
Prion
added 2019/03/13 4:29 p.m.21 views

Null pointer dereference

In libwebm before 2019-03-08, a NULL pointer dereference caused by the functions OutputCluster and OutputTracks in webminfo.cc will trigger an abort, which allows a DoS attack, a similar issue to CVE-2018-19212...

5CVSS6.6AI score0.01644EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
added 2019/03/13 4:29 p.m.36 views

CVE-2019-9746

In libwebm before 2019-03-08, a NULL pointer dereference caused by the functions OutputCluster and OutputTracks in webminfo.cc will trigger an abort, which allows a DoS attack, a similar issue to CVE-2018-19212...

7.5CVSS7.1AI score0.01644EPSS
SaveExploits0References4
CVE
CVE
added 2019/03/13 4:0 p.m.55 views

CVE-2019-9746

CVE-2019-9746 affects libwebm prior to 2019-03-08, where a NULL pointer dereference in webm_info.cc (OutputCluster/OutputTracks) can trigger an abort and cause a DoS. The issue is related to (and similar to) CVE-2018-19212; Red Hat’s RH:CVE-2019-9746 entry also documents the same abort-based DoS ...

7.5CVSS6.5AI score0.01644EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/03/13 4:0 p.m.25 views

CVE-2019-9746

In libwebm before 2019-03-08, a NULL pointer dereference caused by the functions OutputCluster and OutputTracks in webminfo.cc will trigger an abort, which allows a DoS attack, a similar issue to CVE-2018-19212...

6.6AI score0.01644EPSS
SaveExploits0References2
Veracode
Veracode
added 2019/03/11 3:49 a.m.11 views

Denial Of Service (DoS)

github.com/revel/revel is vulnerable to denial of service DoS. The vulnerability exists because it does not validate the size of maxIndex, allowing an attacker to use an illegal index to crash the application...

6.4AI score
SaveExploits0
Veracode
Veracode
added 2019/03/04 3:51 a.m.19 views

Denial Of Service (DoS)

libmatio.so is vulnerable to denial of service DoS attacks. The vulnerability exists through a stack-based buffer over-read in ReadNextCell in src/mat5.c, causing DoS attacks...

9.1CVSS8.8AI score0.0207EPSS
SaveExploits1References3Affected Software1
Hacker One
Hacker One
added 2019/02/26 4:59 p.m.21 views

Rootstock Labs: Traffic amplification attack via discovery protocol

A vulnerability was discovered in the RSKJ node's UDP discovery protocol that allowed for traffic amplification DDoS attacks. The ping-pong mechanism intended to protect against this was not properly implemented, allowing an attacker to successfully finish it even with a spoofed IP. By sending a...

7AI score
SaveExploits0
Veracode
Veracode
added 2019/02/26 2:21 a.m.17 views

Denial Of Service (DoS)

libmatio.so is vulnerable to denial of service DoS attack. The attack can be triggered when a malicious MAT file is passed to the function ReadNextStructField in mat5.c, resulting in a stack-based buffer overflow...

9.1CVSS8.8AI score0.02318EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2019/02/21 2:29 p.m.23 views

Design/Logic Flaw

Loop with Unreachable Exit Condition 'Infinite Loop' in McAfee GetSusp GetSusp 3.0.0.461 and earlier allows attackers to DoS a manual GetSusp scan via while scanning a specifically crafted file . GetSusp is a free standalone McAfee tool that runs on several versions of Microsoft Windows...

4.3CVSS6.3AI score0.00816EPSS
SaveExploits0References2Affected Software1
Veracode
Veracode
added 2019/02/15 7:13 a.m.9 views

Denial Of Service (DoS)

url-relative is vulnerable to denial of service DoS. The library does not check the to and from values in the function urlRelative in index.js, preventing the function from returning when a user provides the same values for to and from...

6.4AI score
SaveExploits0
Prion
Prion
added 2019/02/12 10:29 p.m.25 views

Authentication flaw

Denial of Service attack in airMAX 8.3.2 , airMAX 6.0.7 and EdgeMAX 1.9.7 allow attackers to use the Discovery Protocol in amplification attacks...

5CVSS7.4AI score0.20974EPSS
SaveExploits0References3Affected Software2
Tenable Nessus
Tenable Nessus
added 2019/02/06 12:0 a.m.42 views

Mozilla Firefox < 64 Multiple Vulnerabilities

Binary data 700411.prm...

9.8CVSS8.6AI score0.09646EPSS
SaveExploits1References13
zdt
zdt
added 2019/02/02 12:0 a.m.51 views

CUJO Firewall User Enumeration / Authorization Bypass Vulnerabilities

Exploit for multiple platform in category local exploits Despite CUJO Firewall is a cute device and quite challenging to break from hardware hacking point of view... the APIs which are just a click away, once bypassed pinning and apk's obfuscation suffer of authorization bypass issues. An attacke...

SaveExploits0
Packet Storm
Packet Storm
added 2019/02/02 12:0 a.m.318 views

CUJO Firewall User Enumeration / Authorization Bypass

TL;DR: Despite CUJO Firewall is a cute device and quite challenging to break from hardware hacking point of view... the APIs which are just a click away, once bypassed pinning and apk's obfuscation suffer of authorization bypass issues. An attacker could easily enumerate all existing users, and f...

0.9AI score
SaveExploits0
Debian CVE
Debian CVE
added 2019/01/25 11:45 p.m.35 views

CVE-2019-1000029

DoS due to changing of allowed users in root channel...

3.8AI score
SaveExploits0
OpenVAS
OpenVAS
added 2019/01/24 12:0 a.m.7 views

Linux: Broadcast ICMP echo requests

Broadcast ICMP echo requests are used by the ping command to find all hosts on the network or subnet. An attacker can use Broadcast ICMP echo requests for a DoS/DDoS attack on the network. This script tests whether the Linux host is configured to ignore Broadcast ICMP echo requests...

7.5AI score
SaveExploits0References4
Veracode
Veracode
added 2019/01/15 9:26 a.m.44 views

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service. A flaw named SegmentSmack was found in the way the Linux kernel handled specially crafted TCP packets. A remote attacker could use this flaw to trigger time and calculation expensive calls to tcpcollapseofoqueue and tcppruneofoqueue functions by...

7.5CVSS7AI score0.7372EPSS
SaveExploits0References45Affected Software3
Veracode
Veracode
added 2019/01/15 9:24 a.m.37 views

Denial Of Service (DoS)

rh-postgresql96-postgresql is vulnerable to denial of service DoS attacks. The vulnerability exists as invalid jsonpopulaterecordset or jsonbpopulaterecordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20 can...

8.1CVSS7.6AI score0.03723EPSS
SaveExploits0References9Affected Software3
Rows per page
Query Builder