Lucene search
+L

4 matches found

attackerkb
attackerkb
•added 2024/01/04 9:15 p.m.•8 views

CVE-2024-0241

encodedid-rails versions before 1.0.0.beta2 are affected by an uncontrolled resource consumption vulnerability. A remote and unauthenticated attacker might cause a denial of service condition by sending an HTTP request with an extremely long "id" parameter...

7.5CVSS5.8AI score0.01112EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2023/10/24 12:00 a.m.•14 views

PT-2023-32940

Name of the Vulnerable Software and Affected Versions encoded id-rails versions before 1.0.0.beta2 Description The issue is an uncontrolled resource consumption vulnerability. A remote and unauthenticated attacker might cause a denial of service condition by sending an HTTP request with an...

7.5CVSS7.1AI score0.01112EPSS
SaveExploits1References14
OSV
OSV
•added 2009/03/31 6:24 p.m.•9 views

DEBIAN-CVE-2009-1176

mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 does not ensure that the string holding the id parameter ends in a '\0' character, which allows remote attackers to conduct buffer-overflow attacks or have unspecified other impact via a long id parameter in a query action...

10CVSS7.4AI score0.04086EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/09/04 12:00 a.m.•4 views

CVE-2003-0347: Undefined Security Weakness

Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications VBA SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter...

10CVSS6.8AI score0.54873EPSS
SaveExploits2References1
Rows per page
Query Builder