Lucene search
+L

7641 matches found

OSV
OSV
added 2017/12/27 5:08 p.m.7 views

DEBIAN-CVE-2017-17846

An issue was discovered in Enigmail before 1.9.9. Regular expressions are exploitable for Denial of Service, because of attempts to match arbitrarily long strings, aka TBE-01-003...

7.5CVSS7AI score0.02184EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2017/12/27 5:08 p.m.6 views

CVE-2017-17846

An issue was discovered in Enigmail before 1.9.9. Regular expressions are exploitable for Denial of Service, because of attempts to match arbitrarily long strings, aka TBE-01-003...

7.5CVSS5.5AI score0.02184EPSS
SaveExploits0References7
Prion
Prion
added 2017/12/27 5:08 p.m.13 views

Buffer overflow

A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long response...

10CVSS9.7AI score0.19015EPSS
SaveExploits9References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2017/12/27 5:08 p.m.3 views

CVE-2017-17849

A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long response...

10CVSS6.5AI score0.19015EPSS
SaveExploits9References4
CNVD
CNVD
added 2017/12/25 12:00 a.m.8 views

Enigmail Denial of Service Vulnerability

Enigmail is a data encryption and decryption extension for Mozilla Thunderbird and SeaMonkey web packages that provides OpenPGP's email public key encryption and signing capabilities. A denial of service vulnerability exists in versions of Enigmail prior to 1.9.9. The vulnerability arises because...

7.5CVSS6.7AI score0.02184EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2017/12/24 6:00 p.m.32 views

CVE-2017-17849

A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long response...

9.8AI score0.19015EPSS
SaveExploits9References3
RedHat Linux
RedHat Linux
added 2017/12/19 8:37 a.m.14 views

rubygems: No size limit in summary length of gem spec

It was found that rubygems could use an excessive amount of CPU while parsing a sufficiently long gem summary. A specially crafted gem from a gem repository could freeze gem commands attempting to parse its summary...

7.5CVSS7.3AI score0.08491EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2017/12/13 6:26 p.m.8 views

undertow: Long URL proxy request lead to java.nio.BufferOverflowException and DoS

It was discovered that a long URL sent to EAP 7 Server operating as a reverse proxy with default buffer sizes causes a Denial of Service...

7.1CVSS7.5AI score0.0248EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2017/12/13 5:57 p.m.8 views

undertow: Long URL proxy request lead to java.nio.BufferOverflowException and DoS

It was discovered that a long URL sent to EAP 7 Server operating as a reverse proxy with default buffer sizes causes a Denial of Service...

7.1CVSS7.5AI score0.0248EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2017/12/13 5:48 p.m.8 views

undertow: Long URL proxy request lead to java.nio.BufferOverflowException and DoS

It was discovered that a long URL sent to EAP 7 Server operating as a reverse proxy with default buffer sizes causes a Denial of Service...

7.1CVSS7.5AI score0.0248EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2017/12/13 5:31 p.m.8 views

undertow: Long URL proxy request lead to java.nio.BufferOverflowException and DoS

It was discovered that a long URL sent to EAP 7 Server operating as a reverse proxy with default buffer sizes causes a Denial of Service...

7.1CVSS7.5AI score0.0248EPSS
SaveExploits0References4
OSV
OSV
added 2017/12/05 9:29 a.m.7 views

CVE-2017-16930

The remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated remote attacker to execute arbitrary code due to a stack-based buffer overflow in the request handler. This can be exploited via a long API request that is mishandled during logging...

9.8CVSS6.5AI score0.3434EPSS
SaveExploits5References3
CNVD
CNVD
added 2017/12/05 12:00 a.m.9 views

Flexense SyncBreeze Enterprise HTTP Server Buffer Overflow Vulnerability

Flexense SyncBreeze Enterprise is a set of file synchronization tools from Flexense Canada. The tool has features such as file management and data synchronization.HTTP server is one of the HTTP servers. A buffer overflow vulnerability exists in the HTTP server in Flexense SyncBreeze Enterprise...

7.8CVSS7.5AI score0.11831EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2017/11/30 12:00 a.m.13 views

PT-2017-14693 · D Link · D-Link Dir-605L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-605L Model B versions prior to FW2.11betaB06 hbrf Description: An issue was discovered related to the code that handles the authentication values for HNAP. An attacker can cause a denial of service device crash or possibly have...

7.8CVSS8.2AI score0.01414EPSS
SaveExploits0References2
OSV
OSV
added 2017/11/29 6:29 p.m.8 views

ALPINE-CVE-2017-8816

The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service integer overflow and resultant buffer overflow, and application crash or possibly have unspecified other impact via vectors involving long user and password fields...

9.8CVSS8.1AI score0.08523EPSS
SaveExploits0References1
OSV
OSV
added 2017/11/29 6:29 p.m.8 views

DEBIAN-CVE-2017-8816

The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service integer overflow and resultant buffer overflow, and application crash or possibly have unspecified other impact via vectors involving long user and password fields...

9.8CVSS10AI score0.08523EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2017/11/29 6:00 p.m.76 views

CVE-2017-8816

The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service integer overflow and resultant buffer overflow, and application crash or possibly have unspecified other impact via vectors involving long user and password fields...

9.8CVSS8.2AI score0.08523EPSS
SaveExploits0
CNVD
CNVD
added 2017/11/24 12:00 a.m.11 views

Vonage VDV-23 115 Denial of Service Vulnerability

The Vonage VDV-23 115 is a routing repeater from Vonage USA. A security vulnerability exists in the Vonage VDV-23 115 version 3.2.11-0.9.40. An attacker can exploit this vulnerability to cause a router reboot by sending a loginPassword and/or loginUsername field with a long string to goform/login...

7.8CVSS6.8AI score0.07999EPSS
SaveExploits3References1
NVD
NVD
added 2017/11/20 6:29 p.m.21 views

CVE-2017-16902

On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes the router to reboot...

7.8CVSS7.5AI score0.07999EPSS
SaveExploits3References2
OSV
OSV
added 2017/11/10 2:29 a.m.8 views

CVE-2017-11309

Buffer overflow in the SoftConsole client in Avaya IP Office before 10.1.1 allows remote servers to execute arbitrary code via a long response...

9.6CVSS6.1AI score0.09404EPSS
SaveExploits5References5
Rows per page
Query Builder