8 matches found
CVE-2026-57576
The plone.app.dexterity and plone.app.contenttypes components of the Plone content management system are vulnerable to a denial of service (DoS) attack. An authenticated user can trigger this by creating content with excessively long titles , descriptions, or uploaded-file names, which causes the...
Allocation of Resources Without Limits or Throttling
Overview @joplin/lib is a joplin core library. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the title input. An attacker can cause the application to consume excessive memory and terminate unexpectedly by submitting an extremely long...
Linux Distros Unpatched Vulnerability : CVE-2022-29536
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow in ephystringshorten in the UI process via a long page...
Denial of Service (DoS)
Overview publifycore is a Core engine for the Publify blogging system, formerly known as Typo. Affected versions of this package are vulnerable to Denial of Service DoS when a user supplies an excessively long value for the title field of an article and convinces another user to access it. Detail...
CVE-2009-3622: Undefined Security Weakness
Algorithmic complexity vulnerability in wp-trackback.php in WordPress before 2.8.5 allows remote attackers to cause a denial of service CPU consumption and server hang via a long title parameter in conjunction with a charset parameter composed of many comma-separated "UTF-8" substrings, related t...
CVE-2008-6994
Stack-based buffer overflow in the SaveAs feature SaveFileAsWithFilter function in winutil.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long...
CVE-2005-4210: Undefined Security Weakness
Opera before 8.51, when running on Windows with Input Method Editor IME installed, allows remote attackers to cause a denial of service persistent application crash by bookmarking a site with a long title...
DEBIAN-CVE-2004-1204
FluxBox 0.9.10 and earlier versions allows local users to cause a denial of service application crash by calling Xman with a long -title value, possibly triggering a buffer overflow...