Lucene search
+L

15 matches found

Github Security Blog
Github Security Blog
•added 2026/07/31 4:44 p.m.•13 views

Spring Data: Unbounded property-path cache keyed by externally-supplied path string

src/main/java/org/springframework/data/mapping/context/PersistentPropertyPathFactory.java:175 · Unbounded Resource Allocation Algorithmic DoS Impact When a consuming module routes user-supplied dot-paths sort parameters, projection paths, PATCH paths through...

7.5CVSS5.7AI score0.0046EPSS
SaveExploits0References8Affected Software1
OSV
OSV
•added 2026/07/31 4:44 p.m.•12 views

GHSA-88FW-V6X4-3F58 Spring Data: Unbounded property-path cache keyed by externally-supplied path string

src/main/java/org/springframework/data/mapping/context/PersistentPropertyPathFactory.java:175 · Unbounded Resource Allocation Algorithmic DoS Impact When a consuming module routes user-supplied dot-paths sort parameters, projection paths, PATCH paths through...

7.5CVSS5.7AI score0.0046EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2023-44242

Malicious code in bioql PyPI...

7.5CVSS7.4AI score0.00787EPSS
SaveExploits0References3
OSV
OSV
•added 2024/01/05 11:06 a.m.•10 views

OESA-2024-1026 mosquitto security update

Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...

7.5CVSS6.7AI score0.00787EPSS
SaveExploits0References2
OSV
OSV
•added 2024/01/05 11:06 a.m.•7 views

OESA-2024-1028 mosquitto security update

Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...

7.5CVSS6.7AI score0.00787EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2023/10/03 2:03 a.m.•7 views

SUSE CVE-2023-3592

In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types...

7.5CVSS6.9AI score0.00787EPSS
SaveExploits0References3
OSV
OSV
•added 2023/10/02 8:15 p.m.•10 views

DEBIAN-CVE-2023-3592

In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types...

7.5CVSS7.3AI score0.00787EPSS
SaveExploits0References1
OSV
OSV
•added 2023/10/02 8:15 p.m.•9 views

ALPINE-CVE-2023-3592

In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types...

7.5CVSS6.9AI score0.00787EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/02 8:15 p.m.•38 views

Memory corruption

In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types...

5CVSS7.3AI score0.00787EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2023/10/02 8:15 p.m.•36 views

CVE-2023-3592

In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types...

7.5CVSS7.1AI score0.00787EPSS
SaveExploits0References4
OSV
OSV
•added 2023/10/02 8:15 p.m.•15 views

UBUNTU-CVE-2023-3592

In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types...

7.5CVSS7.1AI score0.00787EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/02 12:00 a.m.•1 views

CVE-2023-3592: Missing Release of Memory after Effective Lifetime

In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types...

7.5CVSS7AI score0.00787EPSS
SaveExploits0References3
OSV
OSV
•added 2005/10/14 7:02 p.m.•9 views

DEBIAN-CVE-2005-3239

The OLE2 unpacker in clamd in Clam AntiVirus ClamAV 0.87-1 allows remote attackers to cause a denial of service segmentation fault via a DOC file with an invalid property tree, which triggers an infinite recursion in the ole2walkpropertytree function...

7.8CVSS8.7AI score0.04482EPSS
SaveExploits0References1
OSV
OSV
•added 2005/10/14 7:02 p.m.•16 views

CVE-2005-3239

The OLE2 unpacker in clamd in Clam AntiVirus ClamAV 0.87-1 allows remote attackers to cause a denial of service segmentation fault via a DOC file with an invalid property tree, which triggers an infinite recursion in the ole2walkpropertytree function...

6.3AI score
SaveExploits0References13
Debian CVE
Debian CVE
•added 2005/10/14 4:00 a.m.•50 views

CVE-2005-3239

The OLE2 unpacker in clamd in Clam AntiVirus ClamAV 0.87-1 allows remote attackers to cause a denial of service segmentation fault via a DOC file with an invalid property tree, which triggers an infinite recursion in the ole2walkpropertytree function...

7.8CVSS6.1AI score0.04482EPSS
SaveExploits0
Rows per page
Query Builder