Lucene search
+L

628 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/30 12:00 a.m.•4 views

CVE-2012-0881: Undefined Security Weakness

Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service CPU consumption via a crafted message to an XML service, which triggers hash table collisions...

7.8CVSS7.4AI score0.17013EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2017/10/23 9:19 a.m.•12 views

nodejs: Constant Hashtable Seeds vulnerability

It was found that Node.js was using a non-randomized seed when populating hash tables. An attacker, able to supply a large number of inputs, could send specially crafted entries to the Node.js application, maximizing hash collisions to trigger an excessive amount of CPU usage, resulting in a deni...

7.5CVSS7.1AI score0.05434EPSS
SaveExploits1References5
seebug.org
seebug.org
•added 2017/10/19 12:00 a.m.•49 views

Pidgin MXIT Markup Command Denial of Service Vulnerability(CVE-2016-2365)

DESCRIPTION A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in a null pointer dereference. A malicious server or an attacker who intercepts the network traffic can send invalid data t...

4.3CVSS7.4AI score0.02411EPSS
SaveExploits1
Prion
Prion
•added 2017/08/08 9:29 p.m.•29 views

Code injection

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

7.8CVSS8.9AI score0.04403EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2017/08/08 9:29 p.m.•44 views

CVE-2012-0880

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

7.8CVSS7.1AI score0.04403EPSS
SaveExploits0References2
OSV
OSV
•added 2017/08/08 9:29 p.m.•16 views

UBUNTU-CVE-2012-0880

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

7.5CVSS7.1AI score0.04403EPSS
SaveExploits0References3
OSV
OSV
•added 2017/08/08 9:29 p.m.•19 views

CVE-2012-0880

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

7.5CVSS6.7AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2017/08/08 9:00 p.m.•39 views

CVE-2012-0880

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

7.3AI score0.04403EPSS
SaveExploits0References2
CVE
CVE
•added 2017/08/08 9:00 p.m.•92 views

CVE-2012-0880

CVE-2012-0880 affects Apache Xerces-C++, allowing a remote attacker to cause a denial of service (CPU consumption) by sending a crafted XML message that triggers hash table collisions. Based on connected documents, impact is high (CVSS v3 base 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). remediatio...

7.8CVSS7.3AI score0.04403EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2017/08/08 9:00 p.m.•42 views

CVE-2012-0880

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

7.8CVSS5.9AI score0.04403EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/08/08 12:00 a.m.•4 views

CVE-2012-0880: Undefined Security Weakness

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

7.8CVSS5.8AI score0.04403EPSS
SaveExploits0References2
Elastic
Elastic
•added 2017/07/25 4:20 p.m.•14 views

Elastic Stack 5.5.1 and Kibana 4.6.5 security update

Kibana Node.js security flaw ESA-2017-14 The version of Node.js shipped in all versions of Kibana prior to 5.5.1 contains a Denial of Service flaw in it's HashTable random seed. This flaw could allow a remote attacker to consume resources within Node.js preventing Kibana from servicing requests...

7.5CVSS7.8AI score0.05434EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2017/07/14 12:00 a.m.•15 views

The vulnerability of the PHP interpreter allows attackers to execute arbitrary code.

The vulnerability of the PHP interpreter lies in the use of memory after it is freed, as a result of changes in the hash table of properties of the transformed object. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

7.5CVSS8.1AI score0.41674EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2017/07/07 2:29 p.m.•41 views

CVE-2017-10966

An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the GHashTable interface and free the nick while updating it. This would then result in use-after-free conditions on each access of the hash table...

9.8CVSS6.7AI score
SaveExploits0References3
OSV
OSV
•added 2017/07/07 2:29 p.m.•9 views

ALPINE-CVE-2017-10966

An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the GHashTable interface and free the nick while updating it. This would then result in use-after-free conditions on each access of the hash table...

9.8CVSS7AI score0.02935EPSS
SaveExploits0References1
Prion
Prion
•added 2017/07/07 2:29 p.m.•23 views

Race condition

An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the GHashTable interface and free the nick while updating it. This would then result in use-after-free conditions on each access of the hash table...

7.5CVSS9.3AI score0.02935EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2017/07/07 2:29 p.m.•7 views

DEBIAN-CVE-2017-10966

An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the GHashTable interface and free the nick while updating it. This would then result in use-after-free conditions on each access of the hash table...

9.8CVSS7AI score0.02935EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2017/07/07 2:00 p.m.•54 views

CVE-2017-10966

An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the GHashTable interface and free the nick while updating it. This would then result in use-after-free conditions on each access of the hash table...

9.8CVSS9.6AI score0.02935EPSS
SaveExploits0
OSV
OSV
•added 2017/07/07 12:00 a.m.•10 views

UBUNTU-CVE-2017-10966

An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the GHashTable interface and free the nick while updating it. This would then result in use-after-free conditions on each access of the hash table...

9.8CVSS7.3AI score0.02935EPSS
SaveExploits0References4
FreeBSD
FreeBSD
•added 2017/07/05 12:00 a.m.•34 views

irssi -- multiple vulnerabilities

irssi reports: When receiving messages with invalid time stamps, Irssi would try to dereference a NULL pointer. While updating the internal nick list, Irssi may incorrectly use the GHashTable interface and free the nick while updating it. This will then result in use-after-free conditions on each...

9.8CVSS9.1AI score0.03443EPSS
SaveExploits0References1
Rows per page
Query Builder