Lucene search
+L

6 matches found

Cvelist
Cvelist
added 2026/07/14 3:43 p.m.33 views

CVE-2026-59203 Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service

Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a negative byte count in the %%BeginBinary directive, allowing a crafted EPS file to cause Image.open to seek backwards to the same directive and parse it repeatedly in an infinite...

5.3CVSS0.00399EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2006-0482

Malware in sbrugna...

5CVSS6.4AI score0.01591EPSS
SaveExploits0References5
OSV
OSV
added 2025/04/16 3:16 p.m.7 views

UBUNTU-CVE-2025-22074

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix rcount dec/increment mismatch rcount is only increased when there is an oplock break wait, so rcount inc/decrement are not paired. This can cause rcount to become negative, which can lead to a problem where the ksmbd...

7.1CVSS6.2AI score0.00189EPSS
SaveExploits0References11
Vulnrichment
Vulnrichment
added 2024/09/04 6:35 p.m.16 views

CVE-2024-44958 sched/smt: Fix unbalance sched_smt_present dec/inc

In the Linux kernel, the following vulnerability has been resolved: sched/smt: Fix unbalance schedsmtpresent dec/inc I got the following warn report while doing stress test: jump label: negative count! WARNING: CPU: 3 PID: 38 at kernel/jumplabel.c:263 statickeyslowtrydec+0x9d/0xb0 Call Trace:...

7.1AI score0.00213EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:38 a.m.6 views

SUSE CVE-2013-2175

HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdrip or other "hdr" functions with a negative occurrence count, allows remote attackers to cause a denial of service negative array index usage and crash via an HTTP header with a certain number of values, related to the...

5CVSS6.9AI score0.03519EPSS
SaveExploits0References3
Prion
Prion
added 2006/01/31 11:3 a.m.16 views

Code injection

PHP-Ping 1.3 does not properly validate ping counts, which allows remote attackers to cause a denial of service ping flood via a negative count parameter...

5CVSS7.1AI score0.01591EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder