Lucene search
K

14 matches found

Positive Technologies
Positive Technologies
added 2026/05/16 12:0 a.m.7 views

PT-2026-41455

Name of the Vulnerable Software and Affected Versions Color Notes version 1.4 Description A denial of service issue allows attackers to crash the application by pasting excessively long character strings into note fields. Specifically, pasting a payload containing 350,000 repeated characters twic...

8.7CVSS5.8AI score0.00052EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/05/10 12:0 a.m.2 views

memono Notepad 安全漏洞

Memono Notepad is a lightweight note-taking app developed by Memono Corporation, designed for concise recording and text management. Version 4.2 of Memono Notepad contains a security vulnerability. This vulnerability stems from the practice of pasting excessively long characters into note fields,...

8.7CVSS5.8AI score0.00052EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/04/09 7:23 p.m.0 views

CVE-2026-33459

Uncontrolled Resource Consumption CWE-400 in Kibana can lead to denial of service via Excessive Allocation CAPEC-130. An authenticated user with access to the automatic import feature can submit specially crafted requests with excessively large input values. When multiple such requests are sent...

6.5CVSS5.9AI score0.00053EPSS
Exploits0References1
CVE
CVE
added 2026/04/08 4:46 p.m.9 views

CVE-2026-33459

CVE-2026-33459 affects Kibana via Uncontrolled Resource Consumption (CWE-400) in the automatic import feature. An authenticated user with Fleet/Integrations privileges can submit specially crafted, very large inputs; when multiple requests run concurrently, backend services can become unstable, c...

6.5CVSS5.9AI score0.00053EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/05 8:45 p.m.1 views

CVE-2019-25660

LanHelper 1.74 contains a local buffer overflow vulnerability that allows attackers to crash the application by sending excessively long input strings. Attackers can exploit the Form Send Message feature by pasting 6000 bytes of data into the Message text field to trigger a denial of service...

6.9CVSS6.2AI score0.00005EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2026/04/04 1:51 p.m.2 views

CVE-2018-25244

The CVE-2018-25244 entry affects Microsoft Eco Search 1.0.2.0. A denial-of-service condition arises when an attacker with local access submits an excessively long string (buff­er of ≥950 characters) in the search functionality, triggering a crash. Both CVSS-derived metrics indicate LOCAL attack v...

6.9CVSS6.1AI score0.00006EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/03/28 12:0 a.m.3 views

BOCHS 缓冲区错误漏洞

BOCHS is a x86 architecture computer simulator developed by BOCHS company. Version 2.6-5 of BOCHS contains a buffer overflow vulnerability, which stems from a stack buffer overflow. This vulnerability could allow attackers to execute arbitrary code by providing the application with an excessively...

9.8CVSS6.6AI score0.00107EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2019-10568

Malware in sbrugna...

6.5CVSS6.4AI score0.00577EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2024/10/28 1:27 p.m.0 views

python-django: Potential denial-of-service vulnerability in django.utils.html.urlize()

A flaw was found in Python's Django urlize and urlizetrunc functions. Excessive input with a specific sequence of characters may lead to denial of service...

7.5CVSS7.1AI score0.02254EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/03/05 12:0 a.m.1 views

Google Go Security Vulnerability

Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google, Inc. A security vulnerability exists in Google Go that stems from allowing users to enter a large number of characters, resulting in the allocation of a large amount of memory,...

6.5CVSS8.8AI score0.00443EPSS
Exploits0References2
OSV
OSV
added 2016/11/17 5:59 a.m.0 views

UBUNTU-CVE-2016-9372

In Wireshark 2.2.0 to 2.2.1, the Profinet I/O dissector could loop excessively, triggered by network traffic or a capture file. This was addressed in plugins/profinet/packet-pn-rtc-one.c by rejecting input with too many I/O objects...

5.9CVSS6.6AI score0.00382EPSS
Exploits0References5
CNVD
CNVD
added 2016/07/08 12:0 a.m.0 views

Empire Download System V2.5 Information Disclosure Vulnerability

Empire Download System" is a code completely open source, dedicated to the website information download and online video site to provide solutions. Empire Download System receives user error feedback report function flaws and vulnerabilities, the user by submitting a large number of characters ca...

6.7AI score
Exploits0
seebug.org
seebug.org
added 2007/12/05 12:0 a.m.17 views

MS Internet Explorer (inetconn.dll) Stack Overflow Crash

No description provided by source. DEFAULT BASEURL= InternetShortcut...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2004/08/11 12:0 a.m.14 views

Internet Security Systems BlackICE PC Protection 3.6 - Firewall.INI Local Buffer Overrun

Internet Security Systems BlackICE PC Protection 3.6 - Firewall.INI Local Buffer Overrun source: https://www.securityfocus.com/bid/10915/info It is reported that BlackICE PC Protection is prone to a local buffer overrun when handling excessive input in certain configuration directives parsed from...

0.1AI score
Exploits0
Rows per page
Query Builder