Lucene search
+L

12438 matches found

CNNVD
CNNVD
added 2021/09/15 12:00 a.m.5 views

Apache Tomcat 输入验证错误漏洞

Apache Tomcat is the United States Apache Apache Foundation of a lightweight Web application server. The program implements support for Servlets and JavaServer Page JSP. An input validation error vulnerability exists in Apache Tomcat that stems from an infinite loop in the program's handling of...

7.5CVSS7.4AI score0.07182EPSS
SaveExploits0References24
OpenVAS
OpenVAS
added 2021/09/15 12:00 a.m.15 views

Huawei EulerOS: Security Advisory for avahi (EulerOS-SA-2021-2352)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6AI score0.00453EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/09/15 12:00 a.m.26 views

Huawei EulerOS: Security Advisory for qpdf (EulerOS-SA-2021-2442)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.8AI score0.01465EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/09/14 12:00 a.m.37 views

Oracle Linux 8 : libtirpc (ELSA-2021-9449)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-9449 advisory. 1.1.4-4.0.1 - Backport fix for CVE-2018-14621 in libtirpc Orabug: 33017925 Tenable has extracted the preceding description block directly from the Oracle Linux...

7.8CVSS6.5AI score0.02262EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2021/09/13 8:05 p.m.56 views

Infinite Loop in rencode

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.5CVSS4.8AI score0.05566EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
added 2021/09/13 4:10 a.m.7 views

Denial Of Service (DoS)

rencode is vulnerable to denial of service. Lack of checking validity of typecode in a sequence type allows an attacker to cause an infinite loop by sending a malformed input...

7.5CVSS6.4AI score0.05566EPSS
SaveExploits0References7Affected Software1
NVD
NVD
added 2021/09/10 2:15 a.m.20 views

CVE-2021-40839

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.5CVSS0.05566EPSS
SaveExploits0References7
OSV
OSV
added 2021/09/10 2:15 a.m.2 views

DEBIAN-CVE-2021-40839

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.5CVSS7.4AI score0.05566EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/09/10 2:15 a.m.7 views

CVE-2021-40839

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.5CVSS7.1AI score0.05566EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
added 2021/09/10 2:15 a.m.27 views

CVE-2021-40839

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.5CVSS7.1AI score0.05566EPSS
SaveExploits0References5
OSV
OSV
added 2021/09/10 2:15 a.m.6 views

UBUNTU-CVE-2021-40839

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.5CVSS5.8AI score0.05566EPSS
SaveExploits0References6
Prion
Prion
added 2021/09/10 2:15 a.m.28 views

Code injection

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

5CVSS7.4AI score0.05566EPSS
SaveExploits0References7Affected Software2
PyPA
PyPA
added 2021/09/10 2:15 a.m.11 views

PYSEC-2021-345

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.5CVSS7AI score0.05566EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2021/09/10 2:15 a.m.9 views

PYSEC-2021-345

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.5CVSS5.9AI score0.05566EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2021/09/10 1:03 a.m.36 views

CVE-2021-40839

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.7AI score0.05566EPSS
SaveExploits0References7
CVE
CVE
added 2021/09/10 1:03 a.m.156 views

CVE-2021-40839

CVE-2021-40839 affects the rencode package for Python up to 1.0.6, where an infinite loop in typecode decoding (e.g., via ;\x2f\x7f) enables a remote CPU/memory‑consuming attack. The vulnerability is documented across multiple advisories and vendor notes; several distributions issued patches (e.g...

7.5CVSS7.3AI score0.05566EPSS
SaveExploits0References7Affected Software1
AlpineLinux
AlpineLinux
added 2021/09/10 1:03 a.m.87 views

CVE-2021-40839

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.5CVSS7.5AI score0.05566EPSS
SaveExploits0
FreeBSD
FreeBSD
added 2021/09/09 12:00 a.m.22 views

py39-rencode -- infinite loop that could lead to Denial of Service

NIST reports: The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding such as via ;\x2f\x7f, enabling a remote attack that consumes CPU and memory...

7.5CVSS7.5AI score0.05566EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/09/07 12:00 a.m.11 views

charleskorn kaml 安全漏洞

charleskorn kaml is an open source implementation of the YAML format that supports kotlinx.serialization. A security vulnerability exists in versions of kaml prior to 0.35.3 that allows an attacker to provide arbitrary YAML input to an application using kaml An attacker could cause the applicatio...

6.5CVSS6.7AI score0.01658EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2021/09/07 12:00 a.m.14 views

Vulnerability of the dhcpattr2vp() function in the RADIUS-server FreeRADIUS, allowing a intruder to cause a service failure

The vulnerability of the dhcpattr2vp function in the RADIUS-server FreeRADIUS is related to an infinite loop. Exploiting this vulnerability could allow a malicious actor to cause service failure...

7.8CVSS7.4AI score0.02988EPSS
SaveExploits0References4Affected Software3
Rows per page
Query Builder