Lucene search
+L

3 matches found

ATTACKERKB
ATTACKERKB
added 2024/01/04 9:15 p.m.3 views

CVE-2024-0241

encodedid-rails versions before 1.0.0.beta2 are affected by an uncontrolled resource consumption vulnerability. A remote and unauthenticated attacker might cause a denial of service condition by sending an HTTP request with an extremely long "id" parameter...

7.5CVSS5.8AI score0.01112EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2023/10/24 12:0 a.m.10 views

PT-2023-32940

Name of the Vulnerable Software and Affected Versions encoded id-rails versions before 1.0.0.beta2 Description The issue is an uncontrolled resource consumption vulnerability. A remote and unauthenticated attacker might cause a denial of service condition by sending an HTTP request with an...

7.5CVSS7.1AI score0.01112EPSS
SaveExploits1References14
OSV
OSV
added 2009/03/31 6:24 p.m.5 views

DEBIAN-CVE-2009-1176

mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 does not ensure that the string holding the id parameter ends in a '\0' character, which allows remote attackers to conduct buffer-overflow attacks or have unspecified other impact via a long id parameter in a query action...

10CVSS7.4AI score0.04086EPSS
SaveExploits2References1
Rows per page
Query Builder