Lucene search
+L

2032 matches found

Veracode
Veracode
added 2023/07/11 2:32 a.m.22 views

Denial Of Service (DoS)

apache-any23-encoding is vulnerable to Denial Of Service DoS. The vulnerability exists due to the guessEncoding function of TikaEncodingDetector.java, which leads to excessive resource allocation, allowing an attacker to cause an application crash by providing a maliciously crafted input...

6.5CVSS6.7AI score0.01484EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/07/10 6:30 p.m.17 views

GHSA-6QQ7-3HQC-P5W4 Wallabag vulnerable to Allocation of Resources Without Limits or Throttling

A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /config of the component Profile Config. The manipulation of the argument Name leads to allocation of resources. The exploit has been disclosed ...

6.5CVSS6.4AI score0.01366EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2023/07/10 6:30 p.m.41 views

Wallabag vulnerable to Allocation of Resources Without Limits or Throttling

A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /config of the component Profile Config. The manipulation of the argument Name leads to allocation of resources. The exploit has been disclosed ...

6.5CVSS6.9AI score0.01366EPSS
SaveExploits1References6Affected Software1
NVD
NVD
added 2023/07/10 4:15 p.m.30 views

CVE-2023-3566

A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /config of the component Profile Config. The manipulation of the argument Name leads to allocation of resources. The exploit has been disclosed ...

6.5CVSS4.7AI score0.01366EPSS
SaveExploits1References4
NVD
NVD
added 2023/07/10 4:15 p.m.25 views

CVE-2023-27540

IBM Watson CP4D Data Stores 4.6.0 does not properly allocate resources without limits or throttling which could allow a remote attacker with information specific to the system to cause a denial of service. IBM X-Force ID: 248924...

7.5CVSS6.4AI score0.01301EPSS
SaveExploits0References2
Prion
Prion
added 2023/07/10 4:15 p.m.26 views

Design/Logic Flaw

A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /config of the component Profile Config. The manipulation of the argument Name leads to allocation of resources. The exploit has been disclosed ...

2.7CVSS6.5AI score0.01366EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2023/07/10 12:00 a.m.12 views

wallabag 安全漏洞

wallabag is a web application that allows you to save web pages for later reading. A security vulnerability exists in wallabag version 2.5.4, which stems from the parameter Name in the file /config that causes resource allocation...

6.5CVSS5.2AI score0.01366EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2023/07/08 5:31 p.m.45 views

CVE-2023-3566 wallabag Profile Config config allocation of resources

A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /config of the component Profile Config. The manipulation of the argument Name leads to allocation of resources. The exploit has been disclosed ...

3.5CVSS6.7AI score0.01366EPSS
SaveExploits1References4
CVE
CVE
added 2023/07/08 5:31 p.m.67 views

CVE-2023-3566

CVE-2023-3566 affects wallabag 2.5.4. The vulnerability targets an unknown functionality in the file /config of the Profile Config component, where manipulating the Name argument leads to allocation (resource exhaustion). The exploit has been disclosed publicly and may be used. Multiple connected...

6.5CVSS5.1AI score0.01366EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/08 12:00 a.m.11 views

PT-2023-25247 · Wallabag · Wallabag

Name of the Vulnerable Software and Affected Versions: wallabag version 2.5.4 Description: A vulnerability was found in the file /config of the component Profile Config, affecting an unknown functionality. The manipulation of the Name argument leads to allocation of resources. The exploit has bee...

6.5CVSS6.9AI score0.01366EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
added 2023/07/04 12:00 a.m.45 views

EulerOS 2.0 SP11 : curl (EulerOS-SA-2023-2262)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A cleartext transmission of sensitive information vulnerability exists in curl v7.88.0 that could cause HSTS functionality fail when multiple URLs...

9.1CVSS6.5AI score0.01703EPSS
SaveExploits2References4
F5 Networks
F5 Networks
added 2023/06/22 3:50 a.m.25 views

K000135156: Apache Struts vulnerability CVE-2023-34149

Security Advisory Description Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Upgrade to Struts 2.5.31 or 6.1.2.1 or greater. CVE-2023-34149 Impact There is no impact; F...

6.5CVSS6.4AI score0.05448EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/06/22 12:00 a.m.15 views

PT-2023-4039 · Siemens · Simatic Mv540 S +2

Name of the Vulnerable Software and Affected Versions: SIMATIC MV540 H versions prior to V3.3.4 SIMATIC MV540 S versions prior to V3.3.4 SIMATIC MV550 H versions prior to V3.3.4 SIMATIC MV550 S versions prior to V3.3.4 SIMATIC MV560 U versions prior to V3.3.4 SIMATIC MV560 X versions prior to...

8.6CVSS7.8AI score0.00626EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/06/15 12:54 a.m.6 views

SUSE CVE-2023-34149

Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Upgrade to Struts 2.5.31 or 6.1.2.1 or greater...

6.5CVSS7AI score0.05448EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/06/15 12:54 a.m.6 views

SUSE CVE-2023-34396

Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Upgrade to Struts 2.5.31 or 6.1.2.1 or greater...

7.5CVSS7AI score0.05512EPSS
SaveExploits0References3
NVD
NVD
added 2023/06/14 8:15 a.m.26 views

CVE-2023-34396

Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Upgrade to Struts 2.5.31 or 6.1.2.1 or greater...

7.5CVSS5.7AI score0.05512EPSS
SaveExploits0References3
NVD
NVD
added 2023/06/14 8:15 a.m.19 views

CVE-2023-34149

Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Upgrade to Struts 2.5.31 or 6.1.2.1 or greater...

6.5CVSS5.5AI score0.05448EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2023/06/14 8:15 a.m.28 views

CVE-2023-34396

Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Upgrade to Struts 2.5.31 or 6.1.2.1 or greater...

7.5CVSS7.1AI score0.05512EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/06/14 7:50 a.m.35 views

CVE-2023-34396 Apache Struts: DoS via OOM owing to no sanity limit on normal form fields in multipart forms

Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Upgrade to Struts 2.5.31 or 6.1.2.1 or greater...

4.3CVSS7.7AI score0.05512EPSS
SaveExploits0References3
OSV
OSV
added 2023/06/14 7:50 a.m.30 views

CVE-2023-34396 Apache Struts: DoS via OOM owing to no sanity limit on normal form fields in multipart forms

Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Upgrade to Struts 2.5.31 or 6.1.2.1 or greater...

4.3CVSS7.1AI score
SaveExploits0References5
Rows per page
Query Builder