Lucene search
+L

6221 matches found

OSV
OSV
added 2022/05/24 4:55 p.m.14 views

GHSA-MCPW-CP35-P3H8 OpenStack os-vif Ageing time of 0 disables linuxbridge MAC learning

In OpenStack os-vif 1.15.x before 1.15.2, and 1.16.0, a hard-coded MAC aging time of 0 disables MAC learning in linuxbridge, forcing obligatory Ethernet flooding of non-local destinations, which both impedes network performance and allows users to possibly view the content of packets for instance...

9.1CVSS9.2AI score0.02612EPSS
SaveExploits0References9
Prion
Prion
added 2022/05/05 5:15 p.m.21 views

Race condition

OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition...

4.3CVSS7.8AI score0.02104EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/05/05 5:15 p.m.26 views

Design/Logic Flaw

eProsima Fast DDS versions prior to 2.4.0 2269 are susceptible to exploitation when an attacker sends a specially crafted packet to flood a target device with unwanted traffic, which may result in a denial-of-service condition and information exposure...

6.4CVSS8.9AI score0.05082EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/05/05 5:15 p.m.26 views

Design/Logic Flaw

RTI Connext DDS Professional, Connext DDS Secure versions 4.2x to 6.1.0, and Connext DDS Micro versions 2.4 and later are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information...

6.4CVSS8.9AI score0.03331EPSS
SaveExploits0References2Affected Software3
Vulnrichment
Vulnrichment
added 2022/05/05 3:18 p.m.12 views

CVE-2021-38447 OCI OpenDDS Secure Amplification

OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition...

8.6CVSS6.7AI score0.02104EPSS
SaveExploits0References2
Veracode
Veracode
added 2022/03/22 2:33 p.m.27 views

Denial Of Service (DoS)

org.jboss.resteasy:resteasy-core is vulnerable to denial of service DoS attacks. A malicious user is able to cause a hash flooding, leading to slower requests with higher CPU time spent searching and adding the entry, resulting in denial of service conditions...

7.5CVSS2.2AI score0.01222EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2022/03/18 5:58 p.m.42 views

RESTEasy 4.5.5.Final in hash flooding

A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requests with higher CPU time spent searching and adding the entry. This flaw allows an attacker to cause a denial of service...

7.5CVSS2.6AI score0.01222EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2022/03/18 5:58 p.m.50 views

GHSA-37G7-8VJJ-PJPJ RESTEasy 4.5.5.Final in hash flooding

A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requests with higher CPU time spent searching and adding the entry. This flaw allows an attacker to cause a denial of service...

7.5CVSS7.1AI score0.01222EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2022/02/21 1:46 p.m.18 views

CVE-2020-35210

A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service DoS via a Raft session flooding attack using Raft OpenSessionRequest messages...

6.5CVSS5.7AI score0.0088EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/01/28 12:00 a.m.11 views

YzmCMS 安全漏洞

Yzmcms is an open source CMS content management system for Yzmcms individual developers. an uncontrolled recursive vulnerability exists in YzmCMS v6.3, which stems from the fact that the comment function can operate concurrently and an attacker can use this vulnerability to create an unusually...

5.3CVSS5.6AI score0.01082EPSS
SaveExploits1References2
OSV
OSV
added 2022/01/04 4:15 p.m.10 views

CVE-2022-20023

In Bluetooth, there is a possible application crash due to bluetooth flooding a device with LMPAUrand packet. This could lead to remote denial of service of bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06198608; Issue ID:...

6.5CVSS5.9AI score0.00267EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/04 4:15 p.m.9 views

CVE-2022-20023

In Bluetooth, there is a possible application crash due to bluetooth flooding a device with LMPAUrand packet. This could lead to remote denial of service of bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06198608; Issue ID:...

6.5CVSS6.7AI score0.00267EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/12/26 12:15 a.m.8 views

CVE-2021-41788

MediaTek microchips, as used in NETGEAR devices through 2021-12-13 and other devices, mishandle attempts at Wi-Fi authentication flooding. Affected Chipsets MT7603E, MT7612, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0...

7.8CVSS7.1AI score0.01764EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2021/12/25 11:18 p.m.44 views

CVE-2021-41788

MediaTek microchips, as used in NETGEAR devices through 2021-12-13 and other devices, mishandle attempts at Wi-Fi authentication flooding. Affected Chipsets MT7603E, MT7612, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0...

6.5CVSS7.9AI score0.01764EPSS
SaveExploits0References2
Veracode
Veracode
added 2021/12/20 9:08 a.m.25 views

Denial Of Service (DoS)

atomix-raft is vulnerable to denial of service. An attacker can cause raft session flooding attack via sending large number of messages to 'OpenSessionRequest' by using a malicious Atomix node to crash the application...

6.5CVSS3.4AI score0.0088EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2021/12/17 8:41 p.m.35 views

A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessionRequest messages.

A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service DoS via a Raft session flooding attack using Raft OpenSessionRequest messages...

6.5CVSS6AI score0.0088EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/12/17 8:41 p.m.18 views

GHSA-MF27-WG66-M8F5 A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessionRequest messages.

A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service DoS via a Raft session flooding attack using Raft OpenSessionRequest messages...

6.5CVSS5.9AI score0.0088EPSS
SaveExploits0References3
NVD
NVD
added 2021/12/16 8:15 p.m.14 views

CVE-2020-35210

A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service DoS via a Raft session flooding attack using Raft OpenSessionRequest messages...

6.5CVSS0.0088EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/16 8:15 p.m.11 views

CVE-2020-35210

A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service DoS via a Raft session flooding attack using Raft OpenSessionRequest messages...

6.5CVSS6.6AI score0.0088EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/16 8:15 p.m.22 views

Session fixation

A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service DoS via a Raft session flooding attack using Raft OpenSessionRequest messages...

4CVSS6.2AI score0.0088EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder