Lucene search
+L

12924 matches found

OSV
OSV
added 2022/12/27 10:15 p.m.4 views

DEBIAN-CVE-2020-36568

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

7.5CVSS7.4AI score0.01464EPSS
SaveExploits1References1
NVD
NVD
added 2022/12/27 10:15 p.m.38 views

CVE-2020-36568

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

7.5CVSS0.01464EPSS
SaveExploits1References4
OSV
OSV
added 2022/12/27 10:15 p.m.22 views

CVE-2020-36568

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

7.5CVSS7.4AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2022/12/27 10:15 p.m.23 views

CVE-2020-36568

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

7.5CVSS7.1AI score0.01464EPSS
SaveExploits1References5
Prion
Prion
added 2022/12/27 10:15 p.m.18 views

Memory corruption

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

5CVSS7.4AI score0.01464EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2022/12/27 9:12 p.m.91 views

CVE-2020-36568

CVE-2020-36568 affects github.com/revel/revel, where the query parser accepts unsanitized input. The issue can trigger resource exhaustion via memory allocation, potentially impacting availability. Public details indicate exploitation would require network access and no user interaction. The vuln...

7.5CVSS7.4AI score0.01464EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/27 9:12 p.m.7 views

CVE-2020-36568 Resource exhaustion in github.com/revel/revel

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

7.5AI score0.01464EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2022/12/27 9:12 p.m.25 views

CVE-2020-36568 Resource exhaustion in github.com/revel/revel

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

7.4AI score0.01464EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2022/12/27 9:12 p.m.38 views

CVE-2020-36568

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

7.5CVSS7.4AI score0.01464EPSS
SaveExploits1
CNNVD
CNNVD
added 2022/12/27 12:00 a.m.7 views

Revel Framework 安全漏洞

Revel Framework is Revel Framework open source a high-productivity, full-stack web framework for the Go language. A security vulnerability exists in versions prior to Revel Framework v1.0.0. An attacker exploited the vulnerability to cause resource exhaustion via memory allocation...

7.5CVSS7.3AI score0.01464EPSS
SaveExploits1References5
OSV
OSV
added 2022/12/25 9:30 p.m.76 views

GHSA-QVX2-59G8-8HPH docconv vulnerable to Memory Allocation with Excessive Size Value

A vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory allocation. The attack may be initiated remotely. Upgrading to version 1.2.1 can...

6.5CVSS6.4AI score0.00763EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2022/12/25 9:30 p.m.37 views

docconv vulnerable to Memory Allocation with Excessive Size Value

A vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory allocation. The attack may be initiated remotely. Upgrading to version 1.2.1 can...

6.5CVSS6.4AI score0.00763EPSS
SaveExploits0References8Affected Software2
NVD
NVD
added 2022/12/25 8:15 p.m.22 views

CVE-2022-4741

A vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory allocation. The attack may be initiated remotely. Upgrading to version 1.2.1 is...

6.5CVSS0.00763EPSS
SaveExploits0References5
Prion
Prion
added 2022/12/25 8:15 p.m.20 views

Design/Logic Flaw

A vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory allocation. The attack may be initiated remotely. Upgrading to version 1.2.1 is...

4.3CVSS6.5AI score0.00763EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2022/12/25 7:47 p.m.17 views

CVE-2022-4741 docconv XMLToText memory allocation

A vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory allocation. The attack may be initiated remotely. Upgrading to version 1.2.1 is...

4.3CVSS5.1AI score
SaveExploits0References7
CVE
CVE
added 2022/12/25 7:47 p.m.72 views

CVE-2022-4741

Docconv (up to 1.2.0) contains a vulnerability in ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText that leads to uncontrolled memory allocation. Root cause: improper handling in memory allocation during document-to-text conversion. Impact is availability degradation; potential remote init...

6.5CVSS5.4AI score0.00763EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2022/12/25 7:47 p.m.26 views

CVE-2022-4741 docconv XMLToText memory allocation

A vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory allocation. The attack may be initiated remotely. Upgrading to version 1.2.1 is...

4.3CVSS6.7AI score0.00763EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/12/25 12:00 a.m.8 views

PT-2022-28060 · Docconv · Docconv

Name of the Vulnerable Software and Affected Versions: docconv versions up to 1.2.0 Description: A vulnerability was found in docconv, classified as problematic, affecting the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory...

6.5CVSS5AI score0.00763EPSS
SaveExploits0References13
GitLab Advisory Database
GitLab Advisory Database
added 2022/12/25 12:00 a.m.57 views

Memory Allocation with Excessive Size Value

A vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory allocation. The attack may be initiated remotely. Upgrading to version 1.2.1 is...

6.5CVSS4.2AI score0.00763EPSS
SaveExploits0References8Affected Software1
CNNVD
CNNVD
added 2022/12/25 12:00 a.m.11 views

docconv 安全漏洞

docconv is Search.io open source a library . PDF, DOC, DOCX, XML, HTML, RTF , etc. will be converted to plain text . docconv 1.2.0 and previous versions of a security vulnerability , the vulnerability stems from its ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText function of the operatio...

6.5CVSS5.3AI score0.00763EPSS
SaveExploits0References6
Rows per page
Query Builder