Lucene search
K

46 matches found

RedhatCVE
RedhatCVE
added 2026/06/04 10:3 a.m.13 views

CVE-2026-48597

Allocation of Resources Without Limits or Throttling vulnerability in elixir-tesla tesla allows denial of service via atom table exhaustion in Tesla.Adapter.Mint. Tesla.Adapter.Mint.openconn/2 converts the URL scheme of every outgoing request to a BEAM atom via String.toatomuri.scheme with no...

8.2CVSS5.8AI score0.00301EPSS
Exploits0References1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.5 views

Astra Linux - уязвимость в tomcat9

Improper handling of exceptional conditions, and uncontrolled resource consumption vulnerabilities in Apache Tomcat. When processing an HTTP/2 stream, Tomcat failed to correctly handle some cases of excessive HTTP headers. This resulted in an incorrect count of active HTTP/2 streams, leading to t...

7.5CVSS6.8AI score0.04602EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/05/01 8:24 p.m.3 views

CVE-2026-31711

A flaw was found in the Linux kernel's ksmbd server. An unauthenticated remote attacker can exploit this by holding open connections with large data lengths, leading to a leak of connection resources. This resource exhaustion can prevent new legitimate connections from being established, resultin...

7.5CVSS5.8AI score0.00549EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/03/04 12:0 a.m.4 views

PT-2026-23084

Name of the Vulnerable Software and Affected Versions Traefik versions prior to 2.11.38 and versions prior to 3.6.9 Description Traefik, an HTTP reverse proxy and load balancer, has an issue in its handling of TLS handshakes on TCP routers. The read deadline used for protocol sniffing is cleared...

9.9CVSS6.1AI score0.22162EPSS
Exploits68References138
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2017-18213

Malware in sbrugna...

7.5CVSS6.1AI score0.0135EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/10/23 12:0 a.m.2 views

Cisco Firepower Threat Defense 安全漏洞

Cisco Firepower Threat Defense FTD is a suite of unified software that provides next-generation firewall services from Cisco USA. A security vulnerability exists in Cisco Firepower Threat Defense that originates from a logic error when processing an initial half-open TCP connection...

5.8CVSS6.8AI score0.00391EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/09/06 12:0 a.m.2 views

The vulnerability of the Aardvark-dns DNS server lies in its uncontrolled resource consumption during open TCP connections that are not time-limited. This allows attackers to cause service failures.

The vulnerability of the Aardvark-dns DNS server is related to an uncontrolled resource consumption during open TCP connections with unlimited duration. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS7.1AI score0.00759EPSS
Exploits1References7Affected Software2
RedHat Linux
RedHat Linux
added 2024/08/21 11:56 a.m.7 views

tomcat: Improper Handling of Exceptional Conditions

A vulnerability was found in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This issue led to a miscounting of active HTTP/2 streams, which in turn led to using an incorrect infinite timeout that allowed connections to remain...

7.5CVSS6.8AI score0.04602EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/08/21 11:56 a.m.6 views

tomcat: Improper Handling of Exceptional Conditions

A vulnerability was found in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This issue led to a miscounting of active HTTP/2 streams, which in turn led to using an incorrect infinite timeout that allowed connections to remain...

7.5CVSS6.8AI score0.04602EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/08/21 11:53 a.m.8 views

tomcat: Improper Handling of Exceptional Conditions

A vulnerability was found in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This issue led to a miscounting of active HTTP/2 streams, which in turn led to using an incorrect infinite timeout that allowed connections to remain...

7.5CVSS6.8AI score0.04602EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/08/21 11:53 a.m.2 views

tomcat: Improper Handling of Exceptional Conditions

A vulnerability was found in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This issue led to a miscounting of active HTTP/2 streams, which in turn led to using an incorrect infinite timeout that allowed connections to remain...

7.5CVSS6.8AI score0.04602EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/08/06 1:51 p.m.5 views

tomcat: Improper Handling of Exceptional Conditions

A vulnerability was found in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This issue led to a miscounting of active HTTP/2 streams, which in turn led to using an incorrect infinite timeout that allowed connections to remain...

7.5CVSS6.8AI score0.04602EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/08/06 11:7 a.m.2 views

tomcat: Improper Handling of Exceptional Conditions

A vulnerability was found in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This issue led to a miscounting of active HTTP/2 streams, which in turn led to using an incorrect infinite timeout that allowed connections to remain...

7.5CVSS6.8AI score0.04602EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/08/06 10:49 a.m.5 views

tomcat: Improper Handling of Exceptional Conditions

A vulnerability was found in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This issue led to a miscounting of active HTTP/2 streams, which in turn led to using an incorrect infinite timeout that allowed connections to remain...

7.5CVSS6.8AI score0.04602EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2024/07/05 3:27 a.m.2 views

SUSE CVE-2024-34750

Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of...

7.5CVSS7.4AI score0.04602EPSS
Exploits0References7
OSV
OSV
added 2024/07/03 9:39 p.m.1 views

GHSA-WM9W-RJJ3-J356 Apache Tomcat - Denial of Service

Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of...

8.7CVSS6.8AI score0.04602EPSS
Exploits0References11
OSV
OSV
added 2024/07/03 8:15 p.m.1 views

DEBIAN-CVE-2024-34750

Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of...

7.5CVSS7.2AI score0.04602EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2024/06/11 5:34 p.m.4 views

Tomcat: WebSocket DoS with incomplete closing handshake

A denial of service DoS vulnerability present in the Apache Tomcat package arises from an incomplete cleanup process. Specifically, WebSocket clients can perpetuate WebSocket connections without proper termination, thereby causing a sustained drain on system resources. This vulnerability...

6.3CVSS7.2AI score0.02313EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/05/07 1:7 p.m.2 views

Tomcat: WebSocket DoS with incomplete closing handshake

A denial of service DoS vulnerability present in the Apache Tomcat package arises from an incomplete cleanup process. Specifically, WebSocket clients can perpetuate WebSocket connections without proper termination, thereby causing a sustained drain on system resources. This vulnerability...

6.3CVSS7.2AI score0.02313EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2024/03/15 3:29 a.m.3 views

SUSE CVE-2024-23672

Denial of Service via incomplete cleanup vulnerability in Apache Tomcat. It was possible for WebSocket clients to keep WebSocket connections open leading to increased resource consumption.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M16, from 10.1.0-M1 through 10.1.18, from...

7.5CVSS7.6AI score0.02313EPSS
Exploits0References7
Rows per page
Query Builder