Lucene search
+L

12355 matches found

CNNVD
CNNVD
added 2021/10/07 12:00 a.m.11 views

Zammad 安全漏洞

Zammad is an open source web-based help desk/customer support system. a denial of service vulnerability exists in versions of Zammad prior to 4.1.1. An attacker could exploit the vulnerability by sending a series of specially crafted requests to cause an infinite loop, which could lead to a denia...

6.5CVSS6.6AI score0.00928EPSS
SaveExploits0References2
OSV
OSV
added 2021/10/06 9:15 p.m.27 views

CVE-2021-42040

An issue was discovered in MediaWiki through 1.36.2. A parser function related to loop control allowed for an infinite loop and php-fpm hang within the Loops extension because egLoopsCountLimit is mishandled. This could lead to memory exhaustion...

7.5CVSS6.7AI score
SaveExploits0References2
NVD
NVD
added 2021/10/06 9:15 p.m.29 views

CVE-2021-42040

An issue was discovered in MediaWiki through 1.36.2. A parser function related to loop control allowed for an infinite loop and php-fpm hang within the Loops extension because egLoopsCountLimit is mishandled. This could lead to memory exhaustion...

7.5CVSS0.01159EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/10/06 9:15 p.m.5 views

CVE-2021-42040

An issue was discovered in MediaWiki through 1.36.2. A parser function related to loop control allowed for an infinite loop and php-fpm hang within the Loops extension because egLoopsCountLimit is mishandled. This could lead to memory exhaustion...

7.5CVSS6.6AI score0.01159EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2021/10/06 9:15 p.m.34 views

CVE-2021-42040

An issue was discovered in MediaWiki through 1.36.2. A parser function related to loop control allowed for an infinite loop and php-fpm hang within the Loops extension because egLoopsCountLimit is mishandled. This could lead to memory exhaustion...

7.5CVSS6.7AI score0.01159EPSS
SaveExploits0References3
OSV
OSV
added 2021/10/06 9:15 p.m.30 views

UBUNTU-CVE-2021-42040

An issue was discovered in MediaWiki through 1.36.2. A parser function related to loop control allowed for an infinite loop and php-fpm hang within the Loops extension because egLoopsCountLimit is mishandled. This could lead to memory exhaustion...

7.5CVSS6AI score0.01159EPSS
SaveExploits0References4
Prion
Prion
added 2021/10/06 9:15 p.m.21 views

Design/Logic Flaw

An issue was discovered in MediaWiki through 1.36.2. A parser function related to loop control allowed for an infinite loop and php-fpm hang within the Loops extension because egLoopsCountLimit is mishandled. This could lead to memory exhaustion...

5CVSS7.4AI score0.01159EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/10/06 8:28 p.m.66 views

CVE-2021-42040

CVE-2021-42040 affects MediaWiki up to 1.36.2, where a loop-control parser function in the Loops extension mishandles egLoopsCountLimit, allowing an infinite loop and potential memory exhaustion. Public references from PT-Security indicate upgrades to fixed branches: update to MediaWiki 1.36.3+ f...

7.5CVSS7.4AI score0.01159EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/10/06 8:28 p.m.31 views

CVE-2021-42040

An issue was discovered in MediaWiki through 1.36.2. A parser function related to loop control allowed for an infinite loop and php-fpm hang within the Loops extension because egLoopsCountLimit is mishandled. This could lead to memory exhaustion...

7.6AI score0.01159EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2021/10/06 2:22 p.m.5 views

tomcat: Infinite loop while reading an unexpected TLS packet when using OpenSSL JSSE engine

A flaw was found in Apache Tomcat. When Tomcat was configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS, a specially crafted packet can trigger an infinite loop, resulting in a denial of service. The highest threat from this vulnerability is to system availability...

7.5CVSS7.1AI score0.07182EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2021/10/06 1:38 p.m.15 views

tomcat: Infinite loop while reading an unexpected TLS packet when using OpenSSL JSSE engine

A flaw was found in Apache Tomcat. When Tomcat was configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS, a specially crafted packet can trigger an infinite loop, resulting in a denial of service. The highest threat from this vulnerability is to system availability...

7.5CVSS7.1AI score0.07182EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2021/10/06 12:00 a.m.6 views

PT-2021-23479 · Mediawiki +1 · Mediawiki +2

Name of the Vulnerable Software and Affected Versions: MediaWiki versions through 1.36.2 Description: An issue was discovered in a parser function related to loop control, which allowed for an infinite loop and php-fpm hang within the Loops extension because egLoopsCountLimit is mishandled. This...

8.8CVSS5.9AI score0.01807EPSS
SaveExploits5References48
OSV
OSV
added 2021/10/02 6:57 p.m.13 views

MGASA-2021-0457 Updated python packages fix security vulnerability

Denial of service when identifying crafted invalid RFCs Security fix for CVE-2021-3737: python client can enter an infinite loop on a 100 Continue response from the server...

6.5CVSS6.9AI score0.04675EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2021/10/01 12:00 a.m.64 views

RHEL 8 : virt:av and virt-devel:av (RHSA-2021:3703)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3703 advisory. The Advanced Virtualization module provides the user-space component for running virtual machines that use KVM in environments managed by Re...

8.5CVSS6.9AI score0.0288EPSS
SaveExploits1References54
RedHat Linux
RedHat Linux
added 2021/09/30 4:59 p.m.8 views

QEMU: net: Infinite loop in loopback mode may lead to stack overflow

A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU process on the host resulting in DoS...

6CVSS6.8AI score0.00459EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2021/09/30 1:26 a.m.38 views

Security Bulletin: [All] Apache PDFBox (Publicly disclosed vulnerability)

Summary This Security Bulletin provides steps to manually upgrade ApachePDFBox for IBM DataQuant. Vulnerability Details CVEID: CVE-2021-31811 DESCRIPTION: Apache PDFBox is vulnerable to a denial of service, caused by an out-of-memory exception while loading a file. By persuading a victim to open ...

5.5CVSS0.1AI score0.03445EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2021/09/29 12:00 a.m.48 views

Irfanview infinite loop vulnerability

IrfanView is an image viewer that supports image browsing, image editing, image format conversion, etc. Irfanview suffers from an infinite loop vulnerability that can be exploited by attackers to cause a denial of service DOS...

5.5CVSS4.1AI score0.00659EPSS
SaveExploits0References1
NVD
NVD
added 2021/09/28 4:15 p.m.26 views

CVE-2021-29365

Irfanview 4.57 is affected by an infinite loop when processing a crafted BMP file in the EFFECTS!AutoCropW component. This can cause a denial of service DOS...

5.5CVSS0.00659EPSS
SaveExploits0References1
OSV
OSV
added 2021/09/28 4:15 p.m.12 views

CVE-2021-29365

Irfanview 4.57 is affected by an infinite loop when processing a crafted BMP file in the EFFECTS!AutoCropW component. This can cause a denial of service DOS...

5.5CVSS6.1AI score0.00659EPSS
SaveExploits0References1
Prion
Prion
added 2021/09/28 4:15 p.m.19 views

Design/Logic Flaw

Irfanview 4.57 is affected by an infinite loop when processing a crafted BMP file in the EFFECTS!AutoCropW component. This can cause a denial of service DOS...

4.3CVSS5.4AI score0.00659EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder