Lucene search
+L

59 matches found

attackerkb
attackerkb
•added 2026/01/15 8:23 p.m.•10 views

CVE-2026-21911

An Incorrect Calculation vulnerability in the Layer 2 Control Protocol Daemon l2cpd of Juniper Networks Junos OS Evolved allows an unauthenticated network-adjacent attacker flapping the management interface to cause the learning of new MACs over label-switched interfaces LSI to stop while...

7.1CVSS5.8AI score0.00239EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/01/15 12:00 a.m.•35 views

PT-2026-3125

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS Evolved versions prior to 21.4R3-S7-EVO Juniper Networks Junos OS Evolved versions 22.2 through 22.2R3-S4-EVO Juniper Networks Junos OS Evolved versions 22.3 through 22.3R3-S3-EVO Juniper Networks Junos OS Evolved...

7.1CVSS5.8AI score0.00239EPSS
SaveExploits0References6
osv_oesa
osv_oesa
•added 2025/10/31 11:09 a.m.•19 views

OESA-2025-2580 python-tornado security update

Tornado is a Python web framework and asynchronous networking library, originally developed at FriendFeed. By using non-blocking network I/O, Tornado can scale to tens of thousands of open connections, making it ideal for long polling, WebSockets, and other applications that require a long-lived...

7.5CVSS7.2AI score0.00745EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2022-28654

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - isclosingsession allows users to fill up apport.log CVE-2022-28654 - isclosingsession allows users to fill up apport.log. CVE-2022-28654 Note that Nessus relies...

5.5CVSS5.6AI score0.00252EPSS
SaveExploits0References2
osv_suse
osv_suse
•added 2025/06/24 8:53 a.m.•17 views

SUSE-SU-2025:20445-1 Security update for python-tornado6

This update for python-tornado6 fixes the following issues: - CVE-2024-52804: Fixed excessive CPU consumption by the algorithm used for parsing HTTP cookies bsc1233668 - CVE-2025-47287: Fixed denial-of-service via generation of an extremely high volume of logs due to multipart/form-data parser...

7.5CVSS7.1AI score0.01044EPSS
SaveExploits0References5
osv_suse
osv_suse
•added 2025/06/23 1:44 p.m.•14 views

SUSE-SU-2025:20430-1 Security update for python-tornado6

This update for python-tornado6 fixes the following issues: - CVE-2025-47287: Fixed denial of service via generation of an extremely high volume of logs due to multipart/form-data parser bsc1243268...

7.5CVSS6.6AI score0.00745EPSS
SaveExploits0References3
Amazon
Amazon
•added 2025/06/12 12:00 a.m.•10 views

Medium: python-tornado

Issue Overview: Tornado is a Python web framework and asynchronous networking library. When Tornado's multipart/form-data parser encounters certain errors, it logs a warning but continues trying to parse the remainder of the data. This allows remote attackers to generate an extremely high volume ...

7.5CVSS6.9AI score0.00745EPSS
SaveExploits0
Amazon
Amazon
•added 2025/06/12 12:00 a.m.•17 views

Medium: python3-tornado

Issue Overview: Tornado is a Python web framework and asynchronous networking library. When Tornado's multipart/form-data parser encounters certain errors, it logs a warning but continues trying to parse the remainder of the data. This allows remote attackers to generate an extremely high volume ...

7.5CVSS6.9AI score0.00745EPSS
SaveExploits0
Amazon
Amazon
•added 2025/06/10 12:00 a.m.•18 views

Medium: python-tornado

Issue Overview: Tornado is a Python web framework and asynchronous networking library. When Tornado's multipart/form-data parser encounters certain errors, it logs a warning but continues trying to parse the remainder of the data. This allows remote attackers to generate an extremely high volume ...

7.5CVSS6.8AI score0.00745EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/05/17 2:54 a.m.•17 views

SUSE CVE-2025-47287

Tornado is a Python web framework and asynchronous networking library. When Tornado's multipart/form-data parser encounters certain errors, it logs a warning but continues trying to parse the remainder of the data. This allows remote attackers to generate an extremely high volume of logs,...

7.5CVSS6.8AI score0.00745EPSS
SaveExploits0References33
osv_cve
osv_cve
•added 2025/04/17 6:15 a.m.•16 views

CVE-2024-13925

The Klarna Checkout for WooCommerce WordPress plugin before 2.13.5 exposes an unauthenticated WooCommerce Ajax endpoint that allows an attacker to flood the log files with data at the maximum size allowed for a POST parameter per request. This can result in rapid consumption of disk space,...

7.5CVSS5.8AI score0.00512EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•4 views

PT-2025-6063

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns a vulnerability in the Linux kernel where a persistent error in the hypervisor can cause the SCSI warning for failed I/O to flood the kernel log, maximizing CPU...

5.5CVSS0.00215EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2024/09/14 2:51 a.m.•15 views

SUSE CVE-2024-46681

In the Linux kernel, the following vulnerability has been resolved: pktgen: use cpusreadlock in pgnetinit I have seen the WARNONsmpprocessorid != cpu firing in pktgenthreadworker during tests. We must use cpusreadlock/cpusreadunlock around the foreachonlinecpucpu loop. While we are at it use...

2.5CVSS6.5AI score0.00203EPSS
SaveExploits0References16
RedHat Linux
RedHat Linux
•added 2023/10/19 1:19 p.m.•18 views

php: DoS vulnerability when parsing multipart request body

A vulnerability was found in PHP. This security flaw occurs when the request body parsing in PHP allows any unauthenticated attacker to consume a large amount of CPU time and trigger excessive logging. A large amount of CPU time required for processing requests can block all available worker...

7.5CVSS7.3AI score0.01408EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2023/08/08 3:15 p.m.•21 views

CVE-2023-2423

A vulnerability was discovered in the Rockwell Automation Armor PowerFlex device when the product sends communications to the local event log. Threat actors could exploit this vulnerability by sending an influx of network commands, causing the product to generate an influx of event log traffic at...

7.5CVSS5.8AI score0.01201EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/08/08 12:00 a.m.•23 views

Rockwell Automation Armor PowerFlex Security Breach

Rockwell Automation Armor PowerFlex is a line of inverters from Rockwell Automation, Inc. A security vulnerability exists in the Rockwell Automation Armor PowerFlex that stems from a vulnerability that allows an attacker to send network commands to cause the product to generate a large amount of...

8.6CVSS6.8AI score0.01201EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 5:42 a.m.•19 views

SUSE CVE-2013-0231

The pcibackenablemsi function in the PCI backend driver drivers/xen/pciback/confspacecapabilitymsi.c in Xen for the Linux kernel 2.6.18 and 3.8 allows guest OS users with PCI device access to cause a denial of service via a large number of kernel log messages. NOTE: some of these details are...

4.9CVSS6.7AI score0.00424EPSS
SaveExploits0References14
osv_cve
osv_cve
•added 2022/02/24 3:15 a.m.•18 views

CVE-2022-24678

An security agent resource exhaustion denial-of-service vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Security Services agents could allow an attacker to flood a temporary log locatio...

7.5CVSS7.1AI score0.02335EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2013/04/16 6:55 p.m.•15 views

kernel: xen: pciback DoS via not rate limited log messages

The pcibackenablemsi function in the PCI backend driver drivers/xen/pciback/confspacecapabilitymsi.c in Xen for the Linux kernel 2.6.18 and 3.8 allows guest OS users with PCI device access to cause a denial of service via a large number of kernel log messages. NOTE: some of these details are...

4.9CVSS6.7AI score0.00424EPSS
SaveExploits0References4
Rows per page
Query Builder