Lucene search
+L

23 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-0949

Malware in sbrugna...

5.5CVSS6.2AI score0.02752EPSS
SaveExploits0References10
OSV
OSV
•added 2021/05/10 3:23 p.m.•52 views

GHSA-567X-M4WM-87V8 Infinite loop in Apache Tika

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

5.5CVSS5.5AI score0.02752EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2021/05/10 3:23 p.m.•65 views

Infinite loop in Apache Tika

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

5.5CVSS3.1AI score0.02752EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2021/05/07 3:53 p.m.•169 views

GHSA-4PV3-63JW-4JW2 Missing Release of Memory after Effective Lifetime in Apache Tika

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

5.5CVSS5.9AI score0.02614EPSS
SaveExploits0References9
OpenVAS
OpenVAS
•added 2021/04/13 12:00 a.m.•37 views

Apache Tika < 1.26 DoS Vulnerability

Apache Tika is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tika";...

5.5CVSS6.2AI score0.02752EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/04/06 12:00 a.m.•36 views

Apache Tika Denial of Service Vulnerability (CNVD-2021-29474)

Apache Tika is integrated POI, Pdfbox and provides a unified interface for text extraction work for a collection of content extraction tools . A denial-of-service vulnerability exists in MP3Parser in Apache Tika that allows remote attackers to exploit the vulnerability by submitting a special...

5.5CVSS6.6AI score0.02752EPSS
SaveExploits0References1
OSV
OSV
•added 2021/03/31 8:15 a.m.•31 views

CVE-2021-28657

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

5.5CVSS6.6AI score
SaveExploits0References5
NVD
NVD
•added 2021/03/31 8:15 a.m.•28 views

CVE-2021-28657

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

5.5CVSS0.02752EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2021/03/31 8:15 a.m.•38 views

CVE-2021-28657

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

5.5CVSS6.8AI score0.02752EPSS
SaveExploits0References3
Prion
Prion
•added 2021/03/31 8:15 a.m.•40 views

Code injection

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

4.3CVSS5.5AI score0.02752EPSS
SaveExploits0References5Affected Software5
Cvelist
Cvelist
•added 2021/03/31 7:35 a.m.•51 views

CVE-2021-28657 Infinite loop in Apache Tika's MP3 parser

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

6AI score0.02752EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2021/03/31 7:35 a.m.•101 views

CVE-2021-28657

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

5.5CVSS6AI score0.02752EPSS
SaveExploits0
CVE
CVE
•added 2021/03/31 7:35 a.m.•205 views

CVE-2021-28657

CVE-2021-28657 affects Apache Tika MP3Parser. A carefully crafted or corrupt MP3 file can trigger an infinite loop in MP3Parser in Tika versions up to 1.25, potentially causing a denial of service (crash). Mitigation shown in sources is to upgrade to Tika 1.26 or later. Multiple connected documen...

5.5CVSS5.6AI score0.02752EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/31 12:00 a.m.•4 views

CVE-2021-28657: Loop with Unreachable Exit Condition

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

5.5CVSS5.8AI score0.02752EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/03/30 8:57 p.m.•53 views

CVE-2021-28657

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

5.5CVSS2.9AI score0.02752EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/03/30 12:00 a.m.•16 views

Apache Tika 安全漏洞

Apache Tika is integrated POI, Pdfbox and provides a unified interface for text extraction work for a collection of content extraction tools . A denial-of-service vulnerability exists in MP3Parser in Apache Tika that allows remote attackers to exploit the vulnerability by submitting a special...

5.5CVSS8.4AI score0.02752EPSS
SaveExploits0References15
IBM Security Bulletins
IBM Security Bulletins
•added 2020/06/19 5:12 a.m.•37 views

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Tika

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of Apache Tika. Vulnerability Details CVEID: CVE-2020-9489 DESCRIPTION: Apache Tika is vulnerable to a denial of service, caused by an out of memory error and infinite loop flaw in the ICNSParser, MP3Parser,...

5.5CVSS1.8AI score0.02986EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2020/04/27 2:15 p.m.•32 views

CVE-2020-9489

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

5.5CVSS5.7AI score0.02614EPSS
SaveExploits0References5
OSV
OSV
•added 2020/04/27 2:15 p.m.•42 views

CVE-2020-9489

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

5.5CVSS6.9AI score
SaveExploits0References5
OSV
OSV
•added 2020/04/27 2:15 p.m.•14 views

UBUNTU-CVE-2020-9489

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

5.5CVSS6.8AI score0.02614EPSS
SaveExploits0References3
Rows per page
Query Builder