Lucene search
+L

7759 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/07/23 12:00 a.m.•4 views

CVE-2017-11554: Uncontrolled Recursion

There is a stack consumption vulnerability in the lex function in parser.hpp as used in sassc in LibSass 3.4.5. A crafted input will lead to a remote denial of service...

7.5CVSS5.9AI score0.01879EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/07/23 12:00 a.m.•4 views

CVE-2017-11556: Uncontrolled Recursion

There is a stack consumption vulnerability in the Parser::advanceToNextToken function in parser.cpp in LibSass 3.4.5. A crafted input may lead to remote denial of service...

7.5CVSS5.8AI score0.01201EPSS
SaveExploits1References2
NVD
NVD
•added 2017/07/17 1:18 p.m.•40 views

CVE-2016-6312

The moddontdothat component of the moddavsvn Apache module in Subversion as packaged in Red Hat Enterprise Linux 5.11 does not properly detect recursion during entity expansion, which allows remote authenticated users with access to the webdav repository to cause a denial of service memory...

6.5CVSS6.7AI score0.02199EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/07/17 12:00 a.m.•4 views

CVE-2016-6312: Uncontrolled Resource Consumption

The moddontdothat component of the moddavsvn Apache module in Subversion as packaged in Red Hat Enterprise Linux 5.11 does not properly detect recursion during entity expansion, which allows remote authenticated users with access to the webdav repository to cause a denial of service memory...

6.5CVSS5.9AI score0.02199EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/07/14 12:00 a.m.•16 views

PT-2017-8960 · Apache +1 · Subversion +3

Name of the Vulnerable Software and Affected Versions: Subversion as packaged in Red Hat Enterprise Linux 5.11 Description: The issue allows remote authenticated users with access to the webdav repository to cause a denial of service, resulting in memory consumption and httpd crash, due to improp...

6.5CVSS6.3AI score0.02199EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2017/07/12 12:19 p.m.•44 views

CVE-2017-11164

In PCRE 8.41, the OPKETRMAX feature in the match function in pcreexec.c allows stack exhaustion uncontrolled recursion when processing a crafted regular expression...

7.8CVSS7.3AI score0.03076EPSS
SaveExploits0References1
Prion
Prion
•added 2017/07/11 3:29 a.m.•27 views

Code injection

In PCRE 8.41, the OPKETRMAX feature in the match function in pcreexec.c allows stack exhaustion uncontrolled recursion when processing a crafted regular expression...

7.8CVSS7.3AI score0.03076EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
•added 2017/07/11 3:29 a.m.•43 views

CVE-2017-11164

In PCRE 8.41, the OPKETRMAX feature in the match function in pcreexec.c allows stack exhaustion uncontrolled recursion when processing a crafted regular expression...

7.8CVSS7.1AI score0.03076EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2017/07/11 12:00 a.m.•78 views

CVE-2017-11164

In PCRE 8.41, the OPKETRMAX feature in the match function in pcreexec.c allows stack exhaustion uncontrolled recursion when processing a crafted regular expression...

7.3AI score0.03076EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/07/11 12:00 a.m.•4 views

CVE-2017-11164: Uncontrolled Recursion

In PCRE 8.41, the OPKETRMAX feature in the match function in pcreexec.c allows stack exhaustion uncontrolled recursion when processing a crafted regular expression...

7.8CVSS5.8AI score0.03076EPSS
SaveExploits0References2
CVE
CVE
•added 2017/07/11 12:00 a.m.•176 views

CVE-2017-11164

The CVE-2017-11164 entry affects PCRE 8.41 where OP_KETRMAX in the match function (pcre_exec.c) can cause stack exhaustion (uncontrolled recursion) when processing a crafted regular expression. The connected IBM/collection remains at high impact with IBM X-Force CVSS vector showing HIGH/Network/N...

7.8CVSS7.2AI score0.03076EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/07/06 12:00 a.m.•6 views

CVE-2017-0692: Uncontrolled Recursion

A denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36725407...

5.5CVSS5.8AI score0.00343EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2017/06/30 12:00 a.m.•19 views

The vulnerability of the crypto/ahash.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the crypto/ahash.c component in the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows a remote attacker to cause a service failure the API interface calls its own callback and triggers infinit...

7.8CVSS6.8AI score0.04257EPSS
SaveExploits0References23Affected Software1
Prion
Prion
•added 2017/06/21 7:29 a.m.•28 views

Stack overflow

In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service stack exhaustion in the dissectIODWriteReq function in plugins/profinet/packet-dcerpc-pn-io.c...

5CVSS6.9AI score0.03422EPSS
SaveExploits0References4Affected Software2
OSV
OSV
•added 2017/06/21 7:29 a.m.•10 views

DEBIAN-CVE-2017-9766

In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service stack exhaustion in the dissectIODWriteReq function in plugins/profinet/packet-dcerpc-pn-io.c...

7.5CVSS6.5AI score0.03422EPSS
SaveExploits0References1
CVE
CVE
•added 2017/06/21 7:00 a.m.•176 views

CVE-2017-9766

CVE-2017-9766 : In Wireshark, version 2.2.7 is vulnerable to a denial of service caused by stack exhaustion via PROFINET IO data with excessive recursion. The issue occurs in the dissect_IODWriteReq function (plugins/profinet/packet-dcerpc-pn-io.c). Remote attackers could trigger the vulnerabilit...

7.5CVSS7.1AI score0.03422EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/06/21 12:00 a.m.•4 views

CVE-2017-9766: Uncontrolled Recursion

In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service stack exhaustion in the dissectIODWriteReq function in plugins/profinet/packet-dcerpc-pn-io.c...

7.5CVSS6.8AI score0.03422EPSS
SaveExploits0References2
Apple
Apple
•added 2017/06/20 10:43 a.m.•88 views

About the security content of tvOS 10.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

9.8CVSS1AI score0.09283EPSS
SaveExploits100Affected Software1
OSV
OSV
•added 2017/06/19 4:29 p.m.•20 views

CVE-2017-1000378

The NetBSD qsort function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in...

9.8CVSS6.3AI score0.04123EPSS
SaveExploits0References3
CNVD
CNVD
•added 2017/06/19 12:00 a.m.•16 views

Apache Thrift Client Library Denial of Service Vulnerability

Apache Thrift is an interface definition language and binary communication protocol for defining and creating services for multiple languages. The Apache Thrift client inventory is vulnerable to a denial of service. A remote authenticated user can cause a denial of service infinite recursion via ...

6.5CVSS6.8AI score0.05335EPSS
SaveExploits0References1
Rows per page
Query Builder