CVE-2023-4138 Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.0...

CVE-2023-4138 Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.0...

Allocation of Resources Without Limits or Throttling

The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit this to cause a small image both in terms of pixel width/height, and encoded size to make the decoder decode large amounts of compressed data, consuming excessive memory and CPU...

CVE-2023-3242

The CVE-2023-3242 issue concerns B&R Automation Runtime’s Portmapper. Affected product: B&R Industrial Automation Automation Runtime (prior to G4.93). Vulnerable component: Portmapper service with improper initialization. Impact: unauthenticated network-based attackers can cause permanent denial-...

The vulnerability of the semget() function in the ipc/sem.c module of the Linux kernel’s interprocess communication subsystem allows a attacker to cause a service failure.

The vulnerability of the semget function in the ipc/sem.c module of the Linux interprocess communication subsystem is related to the lack of control over the amount of resources allocated. Exploiting this vulnerability could allow a attacker to cause service failures...

Denial Of Service (DoS)

apache-any23-encoding is vulnerable to Denial Of Service DoS. The vulnerability exists due to the guessEncoding function of TikaEncodingDetector.java, which leads to excessive resource allocation, allowing an attacker to cause an application crash by providing a maliciously crafted input...

GHSA-6QQ7-3HQC-P5W4 Wallabag vulnerable to Allocation of Resources Without Limits or Throttling

A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /config of the component Profile Config. The manipulation of the argument Name leads to allocation of resources. The exploit has been disclosed ...

Wallabag vulnerable to Allocation of Resources Without Limits or Throttling

A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /config of the component Profile Config. The manipulation of the argument Name leads to allocation of resources. The exploit has been disclosed ...

CVE-2023-3566

A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /config of the component Profile Config. The manipulation of the argument Name leads to allocation of resources. The exploit has been disclosed ...

CVE-2023-27540

IBM Watson CP4D Data Stores 4.6.0 does not properly allocate resources without limits or throttling which could allow a remote attacker with information specific to the system to cause a denial of service. IBM X-Force ID: 248924...

Design/Logic Flaw

A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /config of the component Profile Config. The manipulation of the argument Name leads to allocation of resources. The exploit has been disclosed ...

wallabag 安全漏洞

wallabag is a web application that allows you to save web pages for later reading. A security vulnerability exists in wallabag version 2.5.4, which stems from the parameter Name in the file /config that causes resource allocation...

CVE-2023-3566 wallabag Profile Config config allocation of resources

A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /config of the component Profile Config. The manipulation of the argument Name leads to allocation of resources. The exploit has been disclosed ...

CVE-2023-3566

CVE-2023-3566 affects wallabag 2.5.4. The vulnerability targets an unknown functionality in the file /config of the Profile Config component, where manipulating the Name argument leads to allocation (resource exhaustion). The exploit has been disclosed publicly and may be used. Multiple connected...

PT-2023-25247 · Wallabag · Wallabag

Name of the Vulnerable Software and Affected Versions: wallabag version 2.5.4 Description: A vulnerability was found in the file /config of the component Profile Config, affecting an unknown functionality. The manipulation of the Name argument leads to allocation of resources. The exploit has bee...

EulerOS 2.0 SP11 : curl (EulerOS-SA-2023-2262)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A cleartext transmission of sensitive information vulnerability exists in curl v7.88.0 that could cause HSTS functionality fail when multiple URLs...

K000135156: Apache Struts vulnerability CVE-2023-34149

Security Advisory Description Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Upgrade to Struts 2.5.31 or 6.1.2.1 or greater. CVE-2023-34149 Impact There is no impact; F...

PT-2023-4039 · Siemens · Simatic Mv540 S +2

Name of the Vulnerable Software and Affected Versions: SIMATIC MV540 H versions prior to V3.3.4 SIMATIC MV540 S versions prior to V3.3.4 SIMATIC MV550 H versions prior to V3.3.4 SIMATIC MV550 S versions prior to V3.3.4 SIMATIC MV560 U versions prior to V3.3.4 SIMATIC MV560 X versions prior to...

SUSE CVE-2023-34149

Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Upgrade to Struts 2.5.31 or 6.1.2.1 or greater...

SUSE CVE-2023-34396

Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Upgrade to Struts 2.5.31 or 6.1.2.1 or greater...