Lucene search
+L

12498 matches found

CNVD
CNVD
added 2021/03/25 12:00 a.m.15 views

Unspecified Vulnerability in Apache PDFBox

Apache PDFBox is the United States Apache Apache Foundation of a Java-based open source language tool library . The product provides PDF document creation and editing and other functions. Apache PDFBox has a security vulnerability that stems from the fact that a well-crafted PDF file can trigger ...

5.5CVSS6.6AI score0.02979EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/03/25 12:00 a.m.10 views

Pygments Denial of Service Attack Vulnerability

Pygments is a general-purpose syntax highlighting tool for code hosting, forums, wikis, or other applications that need to beautify their source code. A denial of service vulnerability exists in Pygments versions 1.5 through 2.7.3. The vulnerability arises due to an infinite loop in the SMLLexer ...

7.5CVSS6.8AI score0.02759EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2021/03/24 3:39 p.m.82 views

Moderate: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.1.5 security and bug fix update

Red Hat Advanced Cluster Management for Kubernetes 2.1.5 General Availability release images, which fix several bugs and security issues. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

7.5CVSS6.8AI score0.0184EPSS
SaveExploits0References8
OSV
OSV
added 2021/03/24 11:23 a.m.2 views

SUSE-SU-2021:0938-1 Security update for go1.15

This update for go1.15 fixes the following issues: - go1.15.10 released 2021-03-11 bsc1175132 - go1.15.9 released 2021-03-10 bsc1175132 - CVE-2021-27918: Fixed an infinite loop when using xml.NewTokenDecoder with a custom TokenReader bsc1183333...

7.5CVSS7.5AI score0.02474EPSS
SaveExploits0References4
OSV
OSV
added 2021/03/24 11:22 a.m.5 views

SUSE-SU-2021:0937-1 Security update for go1.16

This update for go1.16 fixes the following issues: - go1.16.2 released 2021-03-11 bsc1182345 - go1.16.1 released 2021-03-10 bsc1182345 - CVE-2021-27918: Fixed an infinite loop when using xml.NewTokenDecoder with a custom TokenReader bsc1183333. - CVE-2021-27919: Fixed an issue where archive/zip:...

7.5CVSS6.5AI score0.02474EPSS
SaveExploits0References6
Veracode
Veracode
added 2021/03/24 8:27 a.m.33 views

Denial Of Service (DoS)

Apache PDFBox is vulnerable to denial of service. An attacker can cause the application to go into an infinite loop by submitting a malicious PDF file...

5.5CVSS3AI score0.03337EPSS
SaveExploits0References39Affected Software2
OSV
OSV
added 2021/03/23 5:15 p.m.10 views

AZL-6811 CVE-2021-20270 affecting package python-pygments for versions less than 2.4.2-7

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS6.9AI score0.02759EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/23 5:15 p.m.13 views

AZL-35137 CVE-2021-20270 affecting package python-pygments for versions less than 2.7.4-1

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS6.9AI score0.02759EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/23 5:15 p.m.2 views

DEBIAN-CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS7.4AI score0.02759EPSS
SaveExploits0References1
PyPA
PyPA
added 2021/03/23 5:15 p.m.11 views

PYSEC-2021-140

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS6.7AI score0.02759EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/03/23 5:15 p.m.7 views

CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS6.8AI score0.02759EPSS
SaveExploits0References6
OSV
OSV
added 2021/03/23 5:15 p.m.16 views

PYSEC-2021-140

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS6.9AI score0.02759EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2021/03/23 4:40 p.m.51 views

CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS8.1AI score0.02759EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2021/03/23 4:40 p.m.60 views

CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS7.6AI score0.02759EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2021/03/23 12:00 a.m.66 views

Ubuntu 18.04 LTS / 20.04 LTS : Python vulnerabilities (USN-4754-3)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4754-3 advisory. USN-4754-1 fixed vulnerabilities in Python. This update provides the corresponding updates for Ubuntu 18.04 and Ubuntu 20.04. In the case of...

9.8CVSS7.3AI score0.23293EPSS
SaveExploits4References8
Veracode
Veracode
added 2021/03/22 1:39 a.m.34 views

Denial Of Service (DoS)

Apache PDFBox is vulnerable to denial of service. An attacker can cause the application to go into an infinite loop by submitting a malicious PDF file...

5.5CVSS3AI score0.02979EPSS
SaveExploits0References38Affected Software2
OSV
OSV
added 2021/03/21 10:43 a.m.16 views

MGASA-2021-0150 Updated glibc packages fixes security vulnerabilities

Updated glibc packages fix a security vulnerabilities: The iconv function in the GNU C Library aka glibc or libc6 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead t...

7.5CVSS5.7AI score0.03093EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:00 a.m.9 views

The vulnerability of the “Commons Compress” compression tool’s reading method, related to the infinite loop that allows a hacker to cause a service failure.

The vulnerability of the “toolset for compressing Commons” reading method is related to an error during the return of the EOF indicator. Exploiting this vulnerability could allow an attacker to cause a service failure...

6.5CVSS6.5AI score0.05253EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:00 a.m.9 views

The vulnerability of the Rbm dissector component in the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the Rbm dissector component in the Wireshark network traffic analyzer is related to the infinite operation of a loop. Exploiting this vulnerability can allow an attacker operating remotely to cause service interruptions...

7.5CVSS7.1AI score0.04519EPSS
SaveExploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:00 a.m.16 views

The vulnerability of the PointerHolder function in the command-line PDF conversion tool QPDF allows a malicious actor to cause a service failure.

The vulnerability of the PointerHolder function in the command-line PDF conversion tool QPDF is related to the infinite execution of a loop. Exploiting this vulnerability could allow an attacker to cause service interruptions...

6.5CVSS6.7AI score0.01265EPSS
SaveExploits1References7Affected Software4
Rows per page
Query Builder