Lucene search
K

160 matches found

OSV
OSV
added 2024/04/29 4:15 a.m.0 views

AZL-40055 CVE-2024-2757 affecting package php for versions less than 8.3.6-1

In PHP 8.3. before 8.3.5, function mbencodemimeheader runs endlessly for some inputs that contain long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function...

7.5CVSS7.1AI score0.00625EPSS
Exploits1References1
OSV
OSV
added 2024/04/29 4:15 a.m.0 views

UBUNTU-CVE-2024-2757

In PHP 8.3. before 8.3.5, function mbencodemimeheader runs endlessly for some inputs that contain long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function...

7.5CVSS5.8AI score0.00625EPSS
Exploits1References3
RedHat Linux
RedHat Linux
added 2024/04/18 1:56 a.m.0 views

Django: denial-of-service in ``intcomma`` template filter

A vulnerability was found in Django. When used with very long strings, the intcomma template filter was subject to a potential denial of service attack...

7.5CVSS7.1AI score0.01394EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2024/04/02 7:34 p.m.2 views

Django: denial-of-service in ``intcomma`` template filter

A vulnerability was found in Django. When used with very long strings, the intcomma template filter was subject to a potential denial of service attack...

7.5CVSS7.1AI score0.01394EPSS
Exploits0References6
OSV
OSV
added 2024/03/06 10:51 a.m.24 views

BIT-DJANGO-2024-24680

An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS7.3AI score0.01394EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2024/02/29 7:47 p.m.1 views

Django: denial-of-service in ``intcomma`` template filter

A vulnerability was found in Django. When used with very long strings, the intcomma template filter was subject to a potential denial of service attack...

7.5CVSS7.1AI score0.01394EPSS
Exploits0References6
OSV
OSV
added 2024/02/23 11:6 a.m.1 views

OESA-2024-1166 python-django security update

Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service...

7.5CVSS7AI score0.01394EPSS
Exploits0References2
OSV
OSV
added 2024/02/23 11:6 a.m.1 views

OESA-2024-1164 python-django security update

Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service...

7.5CVSS7AI score0.01394EPSS
Exploits0References2
OSV
OSV
added 2024/02/23 11:6 a.m.2 views

OESA-2024-1163 python-django security update

Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service...

7.5CVSS7AI score0.01394EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2024/02/08 3:20 a.m.1 views

SUSE CVE-2024-24680

An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS7.7AI score0.01394EPSS
Exploits0References5
OSV
OSV
added 2024/02/07 12:30 a.m.1 views

GHSA-XXJ9-F6RV-M3X4 Django denial-of-service attack in the intcomma template filter

An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings...

8.2CVSS6.8AI score0.01394EPSS
Exploits0References13
UbuntuCve
UbuntuCve
added 2024/02/06 3:0 p.m.31 views

CVE-2024-24680

An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS6.8AI score0.01394EPSS
Exploits0References2
OSV
OSV
added 2024/02/06 3:0 p.m.0 views

UBUNTU-CVE-2024-24680

An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS6.8AI score0.01394EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2024/02/06 12:0 a.m.28 views

CVE-2024-24680

An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS6.9AI score0.01394EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2024/02/06 12:0 a.m.2 views

CVE-2024-24680

An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings...

7.4AI score0.01394EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2024/01/25 8:3 a.m.0 views

python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS

A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int"text", a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits float, decimal, int.frombytes, and int for binary bases 2, 4, 8, 16, and 32 are no...

7.5CVSS6.7AI score0.00384EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2023/12/31 12:15 a.m.0 views

CVE-2023-52267

ehttp 1.0.6 before 17405b9 has a simplelog.cpp log out-of-bounds-read during error logging for long strings...

7.5CVSS5.8AI score0.00089EPSS
Exploits1References3
NVD
NVD
added 2023/12/31 12:15 a.m.8 views

CVE-2023-52267

ehttp 1.0.6 before 17405b9 has a simplelog.cpp log out-of-bounds-read during error logging for long strings...

7.5CVSS0.00089EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/12/30 12:0 a.m.12 views

CVE-2023-52267

ehttp 1.0.6 before 17405b9 has a simplelog.cpp log out-of-bounds-read during error logging for long strings...

7.7AI score0.00089EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/12/30 12:0 a.m.1 views

PT-2023-31950 · Ehttp · Ehttp

Name of the Vulnerable Software and Affected Versions: ehttp version 1.0.6 before 17405b9 Description: The issue is related to an out-of-bounds read in the simple log.cpp file during error logging for long strings. Recommendations: For ehttp version 1.0.6 before 17405b9, consider updating to a...

7.5CVSS7.2AI score0.00089EPSS
Exploits1References9
Rows per page
Query Builder