Lucene search
+L

12348 matches found

Cvelist
Cvelist
added 2022/02/01 11:52 a.m.29 views

CVE-2022-23596 Infinite loop in junrar

Junrar is an open source java RAR archive library. In affected versions A carefully crafted RAR archive can trigger an infinite loop while extracting said archive. The impact depends solely on how the application uses the library, and whether files can be provided by malignant users. The problem ...

7.5CVSS7.7AI score0.01632EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2022/02/01 11:52 a.m.6 views

CVE-2022-23596 Infinite loop in junrar

Junrar is an open source java RAR archive library. In affected versions A carefully crafted RAR archive can trigger an infinite loop while extracting said archive. The impact depends solely on how the application uses the library, and whether files can be provided by malignant users. The problem ...

7.5CVSS7.5AI score0.01632EPSS
SaveExploits1References3
OSV
OSV
added 2022/02/01 11:52 a.m.35 views

CVE-2022-23596 Infinite loop in junrar

Junrar is an open source java RAR archive library. In affected versions A carefully crafted RAR archive can trigger an infinite loop while extracting said archive. The impact depends solely on how the application uses the library, and whether files can be provided by malignant users. The problem ...

7.5CVSS7.6AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2022/02/01 8:00 a.m.29 views

CVE-2022-23833

An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files...

7.5CVSS7.1AI score0.49246EPSS
SaveExploits0References4
OSV
OSV
added 2022/02/01 8:00 a.m.7 views

UBUNTU-CVE-2022-23833

An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files...

7.5CVSS7.1AI score0.49246EPSS
SaveExploits0References5
OSV
OSV
added 2022/02/01 12:47 a.m.14 views

GHSA-M6CJ-93V6-CVR5 Junrar vulnerable to infinite loop via extracting carefully crafted RAR archive

Impact A carefully crafted RAR archive can trigger an infinite loop while extracting said archive. The impact depends solely on how the application uses the library, and whether files can be provided by malignant users. Patches The problem is partially patched in 7.4.1 Workarounds None References...

7.5CVSS7.1AI score0.01632EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2022/02/01 12:47 a.m.42 views

Junrar vulnerable to infinite loop via extracting carefully crafted RAR archive

Impact A carefully crafted RAR archive can trigger an infinite loop while extracting said archive. The impact depends solely on how the application uses the library, and whether files can be provided by malignant users. Patches The problem is partially patched in 7.4.1 Workarounds None References...

7.5CVSS1.8AI score0.01632EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2022/02/01 12:00 a.m.10 views

Junrar 安全漏洞

Junrar is a general Java Unrar library. It is used to read and extract .Rar files. Junrar suffers from a security vulnerability that originates from an infinite loop triggered by building a RAR archive...

7.5CVSS7.5AI score0.01632EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2022/02/01 12:00 a.m.15 views

Django 代码问题漏洞

Django is the Django Foundation's set of open source web application framework based on the Python language . The framework includes an object-oriented mapper, view system, template system, etc. A code issue vulnerability exists in Django, which stems from an error in the product's MultiPartParse...

7.5CVSS5.7AI score0.49246EPSS
SaveExploits0References14
OSV
OSV
added 2022/01/28 4:15 p.m.3 views

DEBIAN-CVE-2022-23098

An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation has an infinite loop if no data is received...

7.5CVSS7.5AI score0.02485EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/01/28 4:15 p.m.9 views

CVE-2022-23098

An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation has an infinite loop if no data is received...

7.5CVSS5.8AI score0.02485EPSS
SaveExploits1References6
NVD
NVD
added 2022/01/28 4:15 p.m.22 views

CVE-2022-23098

An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation has an infinite loop if no data is received...

7.5CVSS0.02485EPSS
SaveExploits1References5
OSV
OSV
added 2022/01/28 4:15 p.m.6 views

UBUNTU-CVE-2022-23098

An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation has an infinite loop if no data is received...

7.5CVSS7.1AI score0.02485EPSS
SaveExploits1References4
Prion
Prion
added 2022/01/28 4:15 p.m.27 views

Information disclosure

An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation has an infinite loop if no data is received...

5CVSS8.1AI score0.02485EPSS
SaveExploits1References5Affected Software2
UbuntuCve
UbuntuCve
added 2022/01/28 4:15 p.m.33 views

CVE-2022-23098

An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation has an infinite loop if no data is received...

7.5CVSS7.1AI score0.02485EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2022/01/28 12:00 a.m.45 views

RHEL 7 : java-1.8.0-openjdk (RHSA-2022:0306)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0306 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...

5.3CVSS6.5AI score0.08346EPSS
SaveExploits0References28
Debian CVE
Debian CVE
added 2022/01/28 12:00 a.m.39 views

CVE-2022-23098

An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation has an infinite loop if no data is received...

7.5CVSS7.5AI score0.02485EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.31 views

Mageia: Security Advisory (MGASA-2021-0289)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS7.6AI score0.04006EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.24 views

Mageia: Security Advisory (MGASA-2021-0184)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.9AI score0.03337EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.8 views

Mageia: Security Advisory (MGASA-2019-0282)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References6
Rows per page
Query Builder