Lucene search
K

16 matches found

OSV
OSV
added 2019/07/19 4:12 p.m.39 views

GHSA-5WV5-4VPF-PJ6M Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage

The Pallets Project Flask before 1.0 is affected by unexpected memory usage. The impact is denial of service. The attack vector is crafted encoded JSON data. The fixed version is 1. NOTE this may overlap CVE-2018-1000656...

8.7CVSS7.4AI score0.00469EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2019/07/19 4:12 p.m.40 views

Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage

The Pallets Project Flask before 1.0 is affected by unexpected memory usage. The impact is denial of service. The attack vector is crafted encoded JSON data. The fixed version is 1. NOTE this may overlap CVE-2018-1000656...

7.5CVSS7.5AI score0.00469EPSS
Exploits1References4Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2019/07/19 12:0 a.m.32 views

Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage

The Pallets Project Flask before 1.0 is affected by unexpected memory usage. The impact is denial of service. The attack vector is crafted encoded JSON data. The fixed version is 1. NOTE this may overlap CVE-2018-1000656...

7.5CVSS7.4AI score0.00644EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2019/07/17 2:15 p.m.29 views

CVE-2019-1010083

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656...

7.5CVSS7.5AI score
Exploits0References1
NVD
NVD
added 2019/07/17 2:15 p.m.18 views

CVE-2019-1010083

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656...

7.5CVSS7.5AI score0.00469EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2019/07/17 2:15 p.m.29 views

CVE-2019-1010083

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656...

7.5CVSS6.7AI score0.00469EPSS
Exploits1References2
OSV
OSV
added 2019/07/17 2:15 p.m.52 views

PYSEC-2019-179

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656...

7.5CVSS5.9AI score0.00469EPSS
Exploits1References2
PyPA
PyPA
added 2019/07/17 2:15 p.m.4 views

PYSEC-2019-179

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656...

7.5CVSS6.9AI score0.00644EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2019/07/17 1:59 p.m.111 views

CVE-2019-1010083

CVE-2019-1010083 affects the Pallets Project Flask before 1.0, where crafted encoded JSON data can cause unexpected memory usage leading to denial of service. The fix is upgrading to Flask 1.0 (or later). This entry may overlap with CVE-2018-1000656 per multiple sources.

7.5CVSS7.3AI score0.00469EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2019/07/17 1:59 p.m.22 views

CVE-2019-1010083

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656...

7.4AI score0.00469EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2018/08/28 2:49 p.m.32 views

CVE-2018-1000656

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...

7.5CVSS6.2AI score0.00644EPSS
Exploits1References1
OSV
OSV
added 2018/08/20 7:31 p.m.27 views

CVE-2018-1000656

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...

7.5CVSS7.5AI score
Exploits0References5
OSV
OSV
added 2018/08/20 7:31 p.m.17 views

PYSEC-2018-53

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...

6.8AI score
Exploits0References5
UbuntuCve
UbuntuCve
added 2018/08/20 7:31 p.m.31 views

CVE-2018-1000656

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...

7.5CVSS6.7AI score0.00644EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2018/08/20 7:0 p.m.27 views

CVE-2018-1000656

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...

7.5CVSS7.7AI score0.00644EPSS
Exploits1
Cvelist
Cvelist
added 2018/08/20 7:0 p.m.18 views

CVE-2018-1000656

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...

7.5AI score0.00644EPSS
Exploits1References5
Rows per page
Query Builder