Lucene search
+L

10 matches found

OSV
OSV
added 2026/08/06 9:14 p.m.9 views

CVE-2026-48082 OpenReception's bootstrap challenge proof-of-work difficulty hardcoded to 16 bits, which enables abuse rate amplification

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.6, the bootstrap challenge endpoint at /api/tenants/id/appointments/bootstrap-challenge issues a SHA-256 proof-of-work with difficulty=4 hex zeros, equivalent to 16 bit...

3.7CVSS5.3AI score
SaveExploits0References4
CVE
CVE
added 2026/08/06 9:14 p.m.50 views

CVE-2026-48082

OpenReception’s OpenReception appointment-booking software before v1.0.6 uses a bootstrap-challenge PoW endpoint (/api/tenants/{id}/appointments/bootstrap-challenge) that requires SHA-256 with difficulty=4 hex zeros (≈16 bits). Modern hardware solves this quickly, undermining rate-limiting for un...

3.7CVSS5.4AI score0.0037EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/26 6:30 a.m.8 views

CVE-2024-14040 net: nexthop: Increase weight to u16

In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Increase weight to u16 In CLOS networks, as link failures occur at various points in the network, ECMP weights of the involved nodes are adjusted to compensate. With high fan-out of the involved nodes, and overall...

7.8CVSS5.6AI score
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/09/26 9:25 a.m.11 views

libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds write in the extractContigSamplesShifted16bits function in tools/tiffcrop.c, resulting in a Denial of Service and limited data modification...

6.8CVSS7.3AI score0.00425EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2023/09/26 9:25 a.m.15 views

libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds write in the extractContigSamplesShifted16bits function in tools/tiffcrop.c, resulting in a Denial of Service and limited data modification...

6.8CVSS7.3AI score0.00425EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2023/06/21 2:50 p.m.13 views

libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds write in the extractContigSamplesShifted16bits function in tools/tiffcrop.c, resulting in a Denial of Service and limited data modification...

6.8CVSS7.3AI score0.00425EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2023/06/21 2:50 p.m.10 views

libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds write in the extractContigSamplesShifted16bits function in tools/tiffcrop.c, resulting in a Denial of Service and limited data modification...

6.8CVSS7.3AI score0.00425EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2018/04/10 12:0 a.m.20 views

tcpdump: Heap buffer overflow in the EXTRACT_16BITS function

tcpdump 4.9.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packet data. The crash occurs in the EXTRACT16BITS function, called from the stpprint function for the Spanning Tree Protocol...

7.5CVSS7.5AI score0.04901EPSS
SaveExploits0References4
OSV
OSV
added 2017/07/08 5:29 p.m.6 views

DEBIAN-CVE-2017-11108

tcpdump 4.9.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packet data. The crash occurs in the EXTRACT16BITS function, called from the stpprint function for the Spanning Tree Protocol...

7.5CVSS7.7AI score0.04901EPSS
SaveExploits0References1
OSV
OSV
added 2017/07/08 5:29 p.m.7 views

ALPINE-CVE-2017-11108

tcpdump 4.9.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packet data. The crash occurs in the EXTRACT16BITS function, called from the stpprint function for the Spanning Tree Protocol...

7.5CVSS7.1AI score0.04901EPSS
SaveExploits0References1
Rows per page
Query Builder