Lucene search
+L

12893 matches found

Positive Technologies
Positive Technologies
added 2023/01/12 12:00 a.m.20 views

PT-2023-13907 · Qt Company +1 · Qt +1

Name of the Vulnerable Software and Affected Versions: Qt versions 6.3.2 Description: An integer overflow issue exists in the QML QtScript Reflect API. This can be triggered by specially-crafted javascript code, leading to an integer overflow during memory allocation, which can result in arbitrar...

8.8CVSS8.8AI score0.01076EPSS
SaveExploits1References10
Veracode
Veracode
added 2023/01/11 6:43 a.m.19 views

Denial Of Service (DoS)

github.com/revel/revel is vulnerable to denial of service attacks. Unsanitized input in the query parser in bindSlice function allows remote attackers to cause resource exhaustion via unbounded memory allocation resulting in denial of service...

7.5CVSS7AI score0.01464EPSS
SaveExploits1References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/01/06 12:00 a.m.28 views

EulerOS Virtualization 3.0.2.6 : libwebp (EulerOS-SA-2023-1067)

According to the versions of the libwebp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The...

7.5CVSS7.2AI score0.01966EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2023/01/05 6:34 p.m.98 views

USN-5789-1: Linux kernel (OEM) vulnerabilities

It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-43945 Jann Horn discovered that the...

7.8CVSS7.3AI score0.21521EPSS
SaveExploits3
Positive Technologies
Positive Technologies
added 2023/01/05 12:00 a.m.18 views

PT-2023-9438 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc3+ Description: The issue is related to the arm64/mm component of the Linux kernel, where incorrect handling of memory allocation errors can lead to a denial of service. On arm64, the pmd leaf function...

5.5CVSS6.4AI score0.00205EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
added 2023/01/01 12:00 a.m.5 views

PT-2025-37685

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A null pointer dereference bug exists in the media subsystem, specifically within the tw68 driver during buffer preparation and finalization. A failure in dma alloc coherent can result...

6.3AI score0.00145EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2023/01/01 12:00 a.m.7 views

FTP 安全漏洞

FTP is a simple FTP client and server implementation by Rovin Bhandari, a personal developer. A security vulnerability in FTP version 96c1a35, which stems from the use of malloc instead of free, can be exploited by an attacker to cause a denial of service by engaging in client-side activity such ...

7.5CVSS7.3AI score0.01514EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2022/12/28 12:30 a.m.30 views

revel is vulnerable to resource exhaustion

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

7.5CVSS7.2AI score0.01464EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2022/12/28 12:30 a.m.44 views

GHSA-HGGR-P7V6-73P5 revel is vulnerable to resource exhaustion

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

6.4CVSS7.3AI score0.01464EPSS
SaveExploits1References6
OSV
OSV
added 2022/12/27 10:15 p.m.4 views

DEBIAN-CVE-2020-36568

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

7.5CVSS7.4AI score0.01464EPSS
SaveExploits1References1
NVD
NVD
added 2022/12/27 10:15 p.m.38 views

CVE-2020-36568

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

7.5CVSS0.01464EPSS
SaveExploits1References4
OSV
OSV
added 2022/12/27 10:15 p.m.22 views

CVE-2020-36568

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

7.5CVSS7.4AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2022/12/27 10:15 p.m.23 views

CVE-2020-36568

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

7.5CVSS7.1AI score0.01464EPSS
SaveExploits1References5
Prion
Prion
added 2022/12/27 10:15 p.m.18 views

Memory corruption

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

5CVSS7.4AI score0.01464EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2022/12/27 9:12 p.m.91 views

CVE-2020-36568

CVE-2020-36568 affects github.com/revel/revel, where the query parser accepts unsanitized input. The issue can trigger resource exhaustion via memory allocation, potentially impacting availability. Public details indicate exploitation would require network access and no user interaction. The vuln...

7.5CVSS7.4AI score0.01464EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/27 9:12 p.m.7 views

CVE-2020-36568 Resource exhaustion in github.com/revel/revel

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

7.5AI score0.01464EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2022/12/27 9:12 p.m.25 views

CVE-2020-36568 Resource exhaustion in github.com/revel/revel

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

7.4AI score0.01464EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2022/12/27 9:12 p.m.36 views

CVE-2020-36568

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

7.5CVSS7.4AI score0.01464EPSS
SaveExploits1
CNNVD
CNNVD
added 2022/12/27 12:00 a.m.7 views

Revel Framework 安全漏洞

Revel Framework is Revel Framework open source a high-productivity, full-stack web framework for the Go language. A security vulnerability exists in versions prior to Revel Framework v1.0.0. An attacker exploited the vulnerability to cause resource exhaustion via memory allocation...

7.5CVSS7.3AI score0.01464EPSS
SaveExploits1References5
OSV
OSV
added 2022/12/25 9:30 p.m.73 views

GHSA-QVX2-59G8-8HPH docconv vulnerable to Memory Allocation with Excessive Size Value

A vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory allocation. The attack may be initiated remotely. Upgrading to version 1.2.1 can...

6.5CVSS6.4AI score0.00763EPSS
SaveExploits0References8
Rows per page
Query Builder