Lucene search
+L

2285 matches found

Github Security Blog
Github Security Blog
•added 2022/04/03 12:01 a.m.•88 views

Allocation of Resources Without Limits or Throttling in Spring Framework

In Spring Framework versions 5.3.0 - 5.3.16, 5.2.0.RELEASE - 5.2.19.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition...

6.5CVSS6.7AI score0.36081EPSS
SaveExploits0References8Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/03/25 12:00 a.m.•13 views

The vulnerability of the Polkit library, related to uncontrolled resource allocation, allows a perpetrator to trigger a service failure.

The vulnerability of the Polkit library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

5.5CVSS6.2AI score0.00525EPSS
SaveExploits1References5Affected Software2
The Hacker News
The Hacker News
•added 2022/03/24 1:06 p.m.•29 views

How to Build a Custom Malware Analysis Sandbox

Before hunting malware, every researcher needs to find a system where to analyze it. There are several ways to do it: build your own environment or use third-party solutions. Today we will walk through all the steps of creating a custom malware sandbox where you can perform a proper analysis...

6.7AI score
SaveExploits0
OSV
OSV
•added 2022/03/18 11:18 p.m.•88 views

GHSA-JX8F-CPX7-FV47 Allocation of Resources Without Limits or Throttling in nvflare

Impact NVIDIA FLARE contains a vulnerability in Admin Interface, where an un-authorized attacker can cause Allocation of Resources Without Limits or Throttling, which may lead to cause system unavailable All versions before 2.0.16 are affected. Patches The patch will be included in nvflare==2.0.1...

7.5CVSS7.4AI score0.01067EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/03/17 9:15 p.m.•10 views

CVE-2022-21822

NVIDIA FLARE contains a vulnerability in the admin interface, where an un-authorized attacker can cause Allocation of Resources Without Limits or Throttling, which may lead to cause system unavailable...

7.8CVSS7.1AI score0.01067EPSS
SaveExploits0References2
NVD
NVD
•added 2022/03/17 9:15 p.m.•40 views

CVE-2022-21822

NVIDIA FLARE contains a vulnerability in the admin interface, where an un-authorized attacker can cause Allocation of Resources Without Limits or Throttling, which may lead to cause system unavailable...

7.8CVSS0.01067EPSS
SaveExploits0References1
Prion
Prion
•added 2022/03/17 9:15 p.m.•27 views

Design/Logic Flaw

NVIDIA FLARE contains a vulnerability in the admin interface, where an un-authorized attacker can cause Allocation of Resources Without Limits or Throttling, which may lead to cause system unavailable...

7.8CVSS7.4AI score0.01067EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/03/17 8:30 p.m.•140 views

CVE-2022-21822

NVIDIA FLARE (NVFlare) admin interface vulnerability (CVE-2022-21822) exposes an unauthenticated network-facing flaw that can enable an attacker to trigger Allocation of Resources Without Limits or Throttling, potentially rendering the system unavailable. Affected: NVFlare/NVFlare Admin Interface...

7.8CVSS7.3AI score0.01067EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/03/17 12:00 a.m.•18 views

NVIDIA FLARE 安全漏洞

NVIDIA FLARE is an open source FL SDK from NVIDIA, Inc. that allows researchers and data scientists to adapt existing ML/DL workflows to a federated paradigm and enables platform developers to build secure, privacy-preserving products for distributed multi-party collaboration. A security...

7.8CVSS7.3AI score0.01067EPSS
SaveExploits0References2
OSV
OSV
•added 2022/03/01 12:00 a.m.•35 views

GHSA-3382-R9Q8-4HFG HashiCorp Nomad vulnerable to Allocation of Resources Without Limits or Throttling

HashiCorp Nomad and Nomad Enterprise 1.x before 1.0.17, 1.1.x before 1.1.12, and 1.2.x before 1.2.6 is vulnerable to Allocation of Resources Without Limits or Throttling...

7.5CVSS7.4AI score0.01548EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2022/03/01 12:00 a.m.•33 views

HashiCorp Nomad vulnerable to Allocation of Resources Without Limits or Throttling

HashiCorp Nomad and Nomad Enterprise 1.x before 1.0.17, 1.1.x before 1.1.12, and 1.2.x before 1.2.6 is vulnerable to Allocation of Resources Without Limits or Throttling...

7.5CVSS1AI score0.01548EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2022/02/11 11:15 a.m.•32 views

CVE-2021-30325

Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure an...

6.7CVSS0.00145EPSS
SaveExploits0References1
Prion
Prion
•added 2022/02/11 11:15 a.m.•31 views

Design/Logic Flaw

Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure an...

4.6CVSS6.7AI score0.00145EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/02/11 10:40 a.m.•46 views

CVE-2021-30325

Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure an...

6.7CVSS6.8AI score0.00145EPSS
SaveExploits0References1
Veracode
Veracode
•added 2022/01/07 4:42 a.m.•38 views

Denial Of Service (DoS)

org.apache.avro is vulnerable to denial of service. A remote attacker is able to crash the system by allocate excessive resources via an invalid input...

7.5CVSS4.1AI score0.0296EPSS
SaveExploits0References6Affected Software4
GitLab Advisory Database
GitLab Advisory Database
•added 2022/01/06 12:00 a.m.•46 views

Allocation of Resources Without Limits or Throttling in Apache Avro

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro and prior versions. Users should update to which addresses this issue...

7.5CVSS5.4AI score0.0296EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2022/01/03 8:15 a.m.•30 views

CVE-2021-1918

Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

6.5CVSS0.00142EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/01/03 7:25 a.m.•43 views

CVE-2021-1918

Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

6.5CVSS6.7AI score0.00142EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2022/01/03 7:25 a.m.•12 views

CVE-2021-1918

Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

6.5CVSS6.5AI score0.00142EPSS
SaveExploits0References1
CVE
CVE
•added 2022/01/03 7:25 a.m.•73 views

CVE-2021-1918

CVE-2021-1918 is a vulnerability described as an improper handling of resource allocation in virtual machines that can lead to information exposure on Qualcomm Snapdragon platforms. The primary affected products are Qualcomm closed‑source components (notably in Snapdragon devices) as documented i...

6.5CVSS6.4AI score0.00142EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder