7023 matches found
PT-2017-18015
Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.5-4 Description The issue allows remote attackers to consume an amount of available memory via a crafted file, specifically through the ReadAVSImage function in avs.c. Recommendations For ImageMagick version 7.0.5-4,...
CVE-2017-7941: Missing Release of Resource after Effective Lifetime
The ReadSGIImage function in sgi.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file...
CVE-2017-7942
The ReadAVSImage function in avs.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file...
CVE-2017-7941
The ReadSGIImage function in sgi.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file...
CVE-2017-7940: Uncontrolled Resource Consumption
The iwreadgiffile function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to consume an amount of available memory via a crafted file...
CVE-2017-7942: Missing Release of Resource after Effective Lifetime
The ReadAVSImage function in avs.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file...
CVE-2017-7696
SAP AS JAVA SSO Authentication Library 2.0 through 3.0 allow remote attackers to cause a denial of service memory consumption via large values in the width and height parameters to otplogonuiresources/qr, aka SAP Security Note 2389042...
CVE-2017-7696
SAP AS JAVA SSO Authentication Library 2.0 through 3.0 allow remote attackers to cause a denial of service memory consumption via large values in the width and height parameters to otplogonuiresources/qr, aka SAP Security Note 2389042...
CVE-2016-3104
mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a denial of service memory consumption and process termination by leveraging in-memory database representation when authenticating against a non-existent database...
CVE-2016-3104
mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a denial of service memory consumption and process termination by leveraging in-memory database representation when authenticating against a non-existent database...
Information disclosure
mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a denial of service memory consumption and process termination by leveraging in-memory database representation when authenticating against a non-existent database...
CVE-2017-7696
CVE-2017-7696 affects SAP AS JAVA SSO Authentication Library versions 2.0–3.0. A remote attacker can trigger a denial-of-service by sending a request that causes the server to generate a very large image via otp_logon_ui_resources/qr (e.g., width/height parameters). The issue is a memory exhausti...
CVE-2016-3104
mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a denial of service memory consumption and process termination by leveraging in-memory database representation when authenticating against a non-existent database...
CVE-2016-3104
mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a denial of service memory consumption and process termination by leveraging in-memory database representation when authenticating against a non-existent database...
CVE-2016-3104
Removed by vendor...
CVE-2016-3104: Uncontrolled Resource Consumption
mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a denial of service memory consumption and process termination by leveraging in-memory database representation when authenticating against a non-existent database...
CVE-2017-7696: Allocation of Resources Without Limits or Throttling
SAP AS JAVA SSO Authentication Library 2.0 through 3.0 allow remote attackers to cause a denial of service memory consumption via large values in the width and height parameters to otplogonuiresources/qr, aka SAP Security Note 2389042...
PT-2017-8335
Name of the Vulnerable Software and Affected Versions MongoDB versions 2.6, 2.4 Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption and process termination. This occurs when authenticating against a non-existent database, leveraging in-memor...
PT-2017-17894
Name of the Vulnerable Software and Affected Versions SAP AS JAVA SSO Authentication Library versions 2.0 through 3.0 Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, by providing large values in the width and height parameters to the "o...