Lucene search
+L

146 matches found

Vulnrichment
Vulnrichment
•added 2025/08/11 6:57 p.m.•1 views

CVE-2025-52931 Unexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin

Mattermost Confluence Plugin version 1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to update channel subscription endpoint with an invalid request body...

7.5CVSS7.1AI score0.00337EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/11 6:57 p.m.•21 views

CVE-2025-52931 Unexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin

Mattermost Confluence Plugin version 1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to update channel subscription endpoint with an invalid request body...

7.5CVSS0.00337EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/11 6:57 p.m.•12 views

CVE-2025-52931 Unexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin

Mattermost Confluence Plugin version 1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to update channel subscription endpoint with an invalid request body...

7.5CVSS7.1AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/11 12:00 a.m.•1 views

CVE-2025-54525: Improper Validation of Specified Type of Input

Mattermost Confluence Plugin version 1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to create channel subscription endpoint with an invalid request body...

7.5CVSS5.8AI score0.00337EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/11 12:00 a.m.•1 views

CVE-2025-52931: Improper Check for Unusual or Exceptional Conditions

Mattermost Confluence Plugin version 1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to update channel subscription endpoint with an invalid request body...

7.5CVSS5.8AI score0.00337EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/11 12:00 a.m.•1 views

CVE-2025-54463: Improper Check for Unusual or Exceptional Conditions

Mattermost Confluence Plugin version 1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body...

7.5CVSS5.8AI score0.00297EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/06 1:15 p.m.•14 views

CVE-2025-23323

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an integer overflow or wraparound, leading to a segmentation fault, by providing an invalid request. A successful exploit of this vulnerability might lead to denial of service...

7.5CVSS5.8AI score0.00536EPSS
SaveExploits0References3
OSV
OSV
•added 2025/08/06 1:15 p.m.•13 views

CVE-2025-23324

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an integer overflow or wraparound, leading to a segmentation fault, by providing an invalid request. A successful exploit of this vulnerability might lead to denial of service...

7.5CVSS5.8AI score0.00471EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/08/06 12:00 a.m.•15 views

NVIDIA Triton Inference Server 数字错误漏洞

NVIDIA Triton Inference Server is an open source software from NVIDIA that helps standardize model deployment and deliver fast and scalable AI in production. A denial of service vulnerability exists in NVIDIA Triton Inference Server, which stems from an invalid request that could result in a...

7.5CVSS6.6AI score0.00483EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/06 12:00 a.m.•0 views

CVE-2025-23323: Integer Overflow or Wraparound

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an integer overflow or wraparound, leading to a segmentation fault, by providing an invalid request. A successful exploit of this vulnerability might lead to denial of service...

7.5CVSS5.8AI score0.00536EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/06 12:00 a.m.•2 views

CVE-2025-23324: Integer Overflow or Wraparound

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an integer overflow or wraparound, leading to a segmentation fault, by providing an invalid request. A successful exploit of this vulnerability might lead to denial of service...

7.5CVSS5.8AI score0.00471EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/06 12:00 a.m.•1 views

CVE-2025-23331: Memory Allocation with Excessive Size Value

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a memory allocation with excessive size value, leading to a segmentation fault, by providing an invalid request. A successful exploit of this vulnerability might lead to denial of service...

7.5CVSS5.8AI score0.00584EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/06 12:00 a.m.•1 views

CVE-2025-23321: Divide By Zero

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a divide by zero issue by issuing an invalid request. A successful exploit of this vulnerability might lead to denial of service...

7.5CVSS5.8AI score0.00483EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/07/10 12:00 a.m.•8 views

PT-2025-32583

Name of the Vulnerable Software and Affected Versions: Mattermost Confluence Plugin versions prior to 1.5.0 Description: The Mattermost Confluence Plugin does not properly handle unexpected request bodies. This allows attackers to crash the plugin by repeatedly sending requests with invalid bodie...

7.8CVSS7.3AI score0.00337EPSS
SaveExploits0
OSV
OSV
•added 2025/04/11 2:06 p.m.•22 views

GHSA-356W-63V5-8WF4 Vite has an `server.fs.deny` bypass with an invalid `request-target`

Summary The contents of arbitrary files can be returned to the browser if the dev server is running on Node or Bun. Impact Only apps with the following conditions are affected. - explicitly exposing the Vite dev server to the network using --host or server.host config option - running the Vite de...

6CVSS6.7AI score0.01745EPSS
SaveExploits2References4
Github Security Blog
Github Security Blog
•added 2025/04/11 2:06 p.m.•45 views

Vite has an `server.fs.deny` bypass with an invalid `request-target`

Summary The contents of arbitrary files can be returned to the browser if the dev server is running on Node or Bun. Impact Only apps with the following conditions are affected. - explicitly exposing the Vite dev server to the network using --host or server.host config option - running the Vite de...

6CVSS6.4AI score0.01745EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
•added 2025/04/10 1:25 p.m.•35 views

CVE-2025-32395 Vite has an `server.fs.deny` bypass with an invalid `request-target`

Vite is a frontend tooling framework for javascript. Prior to 6.2.6, 6.1.5, 6.0.15, 5.4.18, and 4.5.13, the contents of arbitrary files can be returned to the browser if the dev server is running on Node or Bun. HTTP 1.1 spec RFC 9112 does not allow in request-target. Although an attacker can sen...

6CVSS0.01745EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
•added 2025/03/22 12:23 p.m.•16 views

CVE-2024-12761

A Denial of Service DoS vulnerability exists in the brycedrennan/imaginairy repository, version 15.0.0. The vulnerability is present in the /api/stablestudio/generate endpoint, which can be exploited by sending an invalid request. This causes the server process to terminate abruptly, outputting...

7.5CVSS6.8AI score0.00705EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/20 10:08 a.m.•11 views

CVE-2024-12761 Denial of Service in brycedrennan/imaginairy

A Denial of Service DoS vulnerability exists in the brycedrennan/imaginairy repository, version 15.0.0. The vulnerability is present in the /api/stablestudio/generate endpoint, which can be exploited by sending an invalid request. This causes the server process to terminate abruptly, outputting...

7.5CVSS7.5AI score0.00705EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/20 10:08 a.m.•87 views

CVE-2024-12761

The CVE-2024-12761 DoS affects imaginAIry (brycedrennan/imaginairy), v15.0.0. The vulnerability exists in the /api/stablestudio/generate endpoint and is triggered by sending an invalid request, causing the server process to terminate with KILLED and making the service unavailable. Connected docum...

7.5CVSS7.2AI score0.00705EPSS
SaveExploits0References1
Rows per page
Query Builder