12272 matches found
CVE-2014-125127
The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service DoS attacks due to eager loading of request bodies in the Request class constructor. The framework automatically reads the entire request body on every HTTP request, regardless of whether the application...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to eager loading of request bodies in the Request constructor. An attacker can cause excessive memory consumption and potentially exhaust server resources by sending requests with...
CVE-2014-125127 Denial of Service (DoS) vulnerability in mikecao/flight
The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service DoS attacks due to eager loading of request bodies in the Request class constructor. The framework automatically reads the entire request body on every HTTP request, regardless of whether the application...
CVE-2014-125127
The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service DoS attacks due to eager loading of request bodies in the Request class constructor. The framework automatically reads the entire request body on every HTTP request, regardless of whether the application...
CVE-2014-125127
The CVE-2014-125127 entry concerns the mikecao/flight PHP framework. Affected versions prior to v1.2 are vulnerable to Denial of Service due to eager loading of request bodies in the Request constructor, causing the framework to read the entire body on every HTTP request and risking memory exhaus...
CVE-2014-125127 Denial of Service (DoS) vulnerability in mikecao/flight
The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service DoS attacks due to eager loading of request bodies in the Request class constructor. The framework automatically reads the entire request body on every HTTP request, regardless of whether the application...
The vulnerability of SonicWall SMA 100 series network intrusion prevention systems’ microprogramming software lies in their ability to download files of a malicious nature without limitation, allowing attackers to execute arbitrary codes.
The vulnerability of SonicWall SMA 100 network firewall microprogramming software is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2021-20066
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled...
PT-2025-35706
Name of the Vulnerable Software and Affected Versions: mikecao/flight versions prior to v1.2 Description: The mikecao/flight PHP framework is susceptible to Denial of Service DoS attacks. This is due to the eager loading of request bodies within the Request class constructor. The framework...
Flight 安全漏洞
Flight is a PHP microframework by Mike Cao's personal developer. A security vulnerability exists in versions prior to Flight v1.2, which stems from eager loading of the request body in the constructor of the Request class, which could lead to a denial-of-service attack...
CVE-2014-125127: Allocation of Resources Without Limits or Throttling
The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service DoS attacks due to eager loading of request bodies in the Request class constructor. The framework automatically reads the entire request body on every HTTP request, regardless of whether the application...
USN-7730-1: PIM Messagelib vulnerabilities
Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, and Jörg Schwenk discovered that PIM Messagelib could be made to leak the plaintext of S/MIME encrypted emails when retrieving external content in emails. Under certain...
Linux Distros Unpatched Vulnerability : CVE-2025-32386
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g...
Arbitrary Code Execution
Keras is vulnerable to Arbitrary Code Execution. The vulnerability is due to improper validation in the Model.loadmodel method when loading specially crafted .keras model archives...
Alibaba Cloud Linux 3 : 0146: python-cryptography (ALINUX3-SA-2025:0146)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0146 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-49083: cryptography is a package designed ...
RHEL 8 : gdk-pixbuf2 (RHSA-2025:14618)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:14618 advisory. The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits suc...
RHEL 8 : gdk-pixbuf2 (RHSA-2025:14646)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:14646 advisory. The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits suc...
Integer Overflow
executorch is vulnerable to integer overflow. The vulnerability is due to improper handling in model loading that causes smaller-than-expected memory allocation, which allows an attacker to achieve code execution or other malicious effects...
The vulnerability of Dell EMC AppSync’s data storage and protection software lies in its ability to allow unlimited loading of malicious files, enabling attackers to execute arbitrary code.
The vulnerability of the Dell EMC AppSync data storage and protection software is related to the unlimited download of malicious files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
