Lucene search
K

72 matches found

OSV
OSV
added 2026/06/03 4:16 p.m.7 views

UBUNTU-CVE-2026-3276

unicodedata.normalize can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canonical Combining Class values. This affects all normalization forms...

6.3CVSS5.2AI score0.00492EPSS
Exploits0References4
OSV
OSV
added 2026/06/03 2:29 p.m.7 views

PSF-2026-25

unicodedata.normalize can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canonical Combining Class values. This affects all normalization forms...

6.3CVSS5.8AI score0.00492EPSS
Exploits0References8
OSV
OSV
added 2026/05/22 4:16 p.m.4 views

UBUNTU-CVE-2026-25680

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

6.5CVSS5.9AI score0.00248EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2026/05/22 12:0 a.m.7 views

PT-2026-42779

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Parsing arbitrary HTML can consume excessive CPU time, which may lead to a denial of service a condition where a system becomes unavailable to its intended users...

9.1CVSS5.9AI score0.00573EPSS
Exploits0References280
OSV
OSV
added 2026/04/14 12:44 a.m.8 views

CLEANSTART-2026-QZ16523 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the modelmesh-runtime-adapter package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

9.8CVSS6.9AI score0.00586EPSS
Exploits0References25
Positive Technologies
Positive Technologies
added 2026/03/02 12:0 a.m.3 views

PT-2026-23002

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.7.5 Description A crafted PDF file can cause excessive processing time when accessing a stream that utilizes the /ASCIIHexDecode filter. This issue affects the pypdf library. Recommendations Update to version 6.7.5 or...

6.9CVSS5.8AI score0.00399EPSS
Exploits0References25
OSV
OSV
added 2026/02/27 12:53 a.m.2 views

CLEANSTART-2026-AJ16639 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the argo-cd-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

9.8CVSS5.8AI score0.04518EPSS
Exploits3References43
OSV
OSV
added 2026/02/24 12:45 a.m.2 views

CLEANSTART-2026-YQ79300 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the argo-cd package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

9.8CVSS5.6AI score0.04518EPSS
Exploits3References39
OSV
OSV
added 2026/01/30 4:35 p.m.4 views

CLEANSTART-2026-VV68546 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the k8ssandra-client-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

9.8CVSS5.6AI score0.00586EPSS
Exploits2References25
OSV
OSV
added 2026/01/30 4:19 p.m.2 views

CLEANSTART-2026-KZ60560 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the argo-cd package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

9.8CVSS5.6AI score0.04518EPSS
Exploits3References40
OSV
OSV
added 2026/01/30 3:57 p.m.7 views

CLEANSTART-2026-OA33370 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the argo-cd-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

9.8CVSS5.8AI score0.04518EPSS
Exploits3References33
OSV
OSV
added 2026/01/30 3:31 p.m.3 views

CLEANSTART-2026-CT39828 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the chartmuseum-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

9.8CVSS5.6AI score0.00586EPSS
Exploits2References36
OSV
OSV
added 2026/01/30 3:29 p.m.2 views

CLEANSTART-2026-TS42581 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the chartmuseum-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

9.8CVSS5.6AI score0.00586EPSS
Exploits2References32
SUSE CVE
SUSE CVE
added 2025/11/29 12:23 a.m.1 views

SUSE CVE-2025-66382

In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time...

4CVSS6.8AI score0.0018EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/11/28 8:46 a.m.3 views

CVE-2025-66382

A flaw was found in libexpat. This vulnerability allows a denial of service DoS by processing a crafted file with an approximate size of 2 MiB, leading to dozens of seconds of processing time...

5.5CVSS6.3AI score0.0018EPSS
Exploits0References4
OSV
OSV
added 2025/11/28 7:15 a.m.2 views

UBUNTU-CVE-2025-66382

In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time...

5.5CVSS5.8AI score0.0018EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/11/28 12:0 a.m.5 views

libexpat 安全漏洞

libexpat is a streaming XML parser written in C by the libexpat team. A security vulnerability exists in libexpat 2.7.3 and earlier versions, which stems from specially crafted files that may result in excessive processing times...

5.5CVSS6.5AI score0.0018EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/28 12:0 a.m.3 views

PT-2025-48315

Name of the Vulnerable Software and Affected Versions libexpat versions through 2.7.3 Description A specially crafted file, approximately 2 MiB in size, can cause significant processing delays, potentially lasting for dozens of seconds. Recommendations Update to a version later than 2.7.3...

5.5CVSS6.5AI score0.0018EPSS
Exploits0References13
OSV
OSV
added 2025/10/29 11:16 p.m.2 views

CVE-2025-58187

Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains...

7.5CVSS6AI score
Exploits0References5
Packet Storm News
Packet Storm News
added 2025/10/21 12:0 a.m.14 views

CLASP: Cost-Optimized LLM-Based Agentic System for Phishing Detection

Phishing websites remain a significant cybersecurity threat, necessitating accurate and cost-effective detection mechanisms. In this paper, we present CLASP, a novel system that effectively identifies phishing websites by leveraging multiple intelligent agents, built using large language models...

6.8AI score
Exploits0
Rows per page
Query Builder