Lucene search
+L

24553 matches found

Redos
Redos
•added 2026/07/14 12:00 a.m.•20 views

ROS-20260714-73-0024

The vulnerability of the DLMS/COSEM protocol implementation in the Wireshark network traffic analyzer involves executing a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS6.1AI score0.0018EPSS
SaveExploits1
Redos
Redos
•added 2026/07/14 12:00 a.m.•21 views

ROS-20260714-73-0017

The vulnerability in Wireshark relates to executing a loop with an unavailable exit condition. Exploiting this vulnerability can allow a hacker to cause a service failure...

7.5CVSS6.5AI score0.00193EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•27 views

PT-2026-58210

Name of the Vulnerable Software and Affected Versions Azure Active Directory versions prior to 8.19.2 Description An infinite loop occurs when an unreachable exit condition is triggered, allowing an unauthorized attacker to remotely cause a denial of service over a network. Recommendations Update...

7.8CVSS7.1AI score0.01174EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•28 views

PT-2026-58316

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description An infinite loop occurs due to an unreachable exit condition, which allows an unauthorized attacker to cause a denial of service over a network. Recommendations A...

5.9CVSS6AI score0.00855EPSS
SaveExploits0References6
Redos
Redos
•added 2026/07/14 12:00 a.m.•16 views

ROS-20260714-73-0032

The vulnerability of the OpenFlow v5 protocol analyzer used by Wireshark for analyzing computer network traffic involves executing a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS6.1AI score0.00143EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•7 views

PT-2026-64455

wolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the client component by sending crafted traffic from a Machine-in-the-Middle MITM position. The root cause is that the client module accepts TLS messages that normally are only sent to TLS servers...

5.9CVSS5.9AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•6 views

CVE-2026-50324: Loop with Unreachable Exit Condition

Loop with unreachable exit condition 'infinite loop' in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

5.9CVSS6.2AI score0.00855EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/07/14 12:00 a.m.•15 views

EulerOS 2.0 SP10 : expat (EulerOS-SA-2026-2687)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted X...

7.5CVSS6.3AI score0.00479EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
•added 2026/07/14 12:00 a.m.•11 views

EulerOS 2.0 SP10 : expat (EulerOS-SA-2026-2647)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted X...

7.5CVSS6.3AI score0.00479EPSS
SaveExploits2References4
Snyk
Snyk
•added 2026/07/13 11:41 p.m.•33 views

Infinite loop

Overview json-repair is an A package to repair broken json strings Affected versions of this package are vulnerable to Infinite loop via the resolveschema function. An attacker can cause the application to enter an infinite loop and exhaust CPU resources by submitting a specially crafted JSON...

8.7CVSS6.1AI score
SaveExploits0References2
EUVD
EUVD
•added 2026/07/13 10:12 p.m.•20 views

EUVD-2026-43572

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, HedgeDoc was vulnerable to a YAML alias bomb due to unsafe processing of the note frontmatter. HedgeDoc parsed frontmatter with js-yaml.load js-yaml v3 via @hedgedoc/meta-marked, which...

8.3CVSS5.9AI score0.00397EPSS
SaveExploits0References2
osv_mal
osv_mal
•added 2026/07/13 7:44 p.m.•31 views

MAL-2026-10480 Malicious code in node-fsmetrics-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9958558a30dea32a3b0fc2e48bb775433e1f12b339030a8d21872ad058bc28ff On require, index.js hex-decodes the URL http://152.53.120.90/cmd and starts a background loop that polls /cmd/commands, executes returned strings vi...

6.1AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/13 5:37 p.m.•43 views

Malicious code in node-procmetrics-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ea7e26b73fb4fa21cdd545045f2a360a02d1013efe25cd6ab7aedb1fec72c9b [email protected] ships archive-sender.js which, at install/execution, tars the installer's root filesystem excluding /proc, /sys, /dev,...

6.1AI score
SaveExploits0References1
osv_pysec
osv_pysec
•added 2026/07/13 3:46 p.m.•25 views

PYSEC-2026-3018 pypdf: Possible infinite loop when processing threads/articles in writer

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires merging a file with threads/articles into a writer. Patches This has been fixed in pypdf==6.13.1. Workarounds If users cannot upgrade yet, consider applying the changes from PR 3839...

6.9CVSS5.9AI score0.00158EPSS
SaveExploits0References7
PyPA
PyPA
•added 2026/07/13 3:46 p.m.•32 views

pypdf: Possible infinite loop when processing threads/articles in writer

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires merging a file with threads/articles into a writer. PatchesThis has been fixed in pypdf==6.13.1. WorkaroundsIf users cannot upgrade yet, consider applying the changes from PR 3839...

6.9CVSS5.9AI score0.00158EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
•added 2026/07/13 3:46 p.m.•31 views

Python Liquid: Infinite loop when parsing malformed `{% case %}` tags

ImpactGiven a malformed % case % tag without associated % when % or % else % block, and no terminating % endcase % tag, Python Liquid hangs in an infinite loop at parse time. This allows malicious template authors to craft templates for a denial of service attack. PatchesThe issue is fixed in...

7.1CVSS5.9AI score0.00451EPSS
SaveExploits0References5Affected Software1
osv_pysec
osv_pysec
•added 2026/07/13 3:46 p.m.•25 views

PYSEC-2026-3035 Python Liquid: Infinite loop when parsing malformed `{% case %}` tags

Impact Given a malformed % case % tag without associated % when % or % else % block, and no terminating % endcase % tag, Python Liquid hangs in an infinite loop at parse time. This allows malicious template authors to craft templates for a denial of service attack. Patches The issue is fixed in...

5.3CVSS5.9AI score0.00451EPSS
SaveExploits0References5
PyPA
PyPA
•added 2026/07/13 3:46 p.m.•32 views

pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. PatchesThis has been fixed in pypdf==6.13.0. WorkaroundsIf you cannot upgrade yet, consider applying the changes from PR 3830...

6.9CVSS5.8AI score0.00174EPSS
SaveExploits0References7Affected Software1
osv_pysec
osv_pysec
•added 2026/07/13 3:46 p.m.•27 views

PYSEC-2026-3022 pypdf: Possible infinite loop when processing outlines/bookmarks in writer

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires merging a file with outlines into a writer. Patches This has been fixed in pypdf==6.13.0. Workarounds If you cannot upgrade yet, consider applying the changes from PR 3830...

6.9CVSS5.7AI score0.00174EPSS
SaveExploits0References7
PyPA
PyPA
•added 2026/07/13 3:46 p.m.•34 views

pypdf: Possible infinite loop when processing outlines/bookmarks in writer

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires merging a file with outlines into a writer. PatchesThis has been fixed in pypdf==6.13.0. WorkaroundsIf you cannot upgrade yet, consider applying the changes from PR 3830...

6.9CVSS5.7AI score0.00174EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder