Lucene search
+L

391 matches found

Tenable Nessus
Tenable Nessus
added 2022/06/29 12:0 a.m.27 views

FreeBSD : py-matrix-synapse -- unbounded recursion in urlpreview (07c0d782-f758-11ec-acaa-901b0e9408dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 07c0d782-f758-11ec-acaa-901b0e9408dc advisory. - Synapse is an open source home server implementation for the Matrix chat network. In versions prior t...

6.5CVSS6.4AI score0.01578EPSS
SaveExploits0References3
NVD
NVD
added 2022/06/28 5:15 p.m.17 views

CVE-2022-31052

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the reques...

6.5CVSS0.01578EPSS
SaveExploits0References5
OSV
OSV
added 2022/06/28 5:15 p.m.2 views

DEBIAN-CVE-2022-31052

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the reques...

6.5CVSS6.6AI score0.01578EPSS
SaveExploits0References1
OSV
OSV
added 2022/06/28 5:15 p.m.9 views

UBUNTU-CVE-2022-31052

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the reques...

6.5CVSS6.6AI score0.01578EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2022/06/28 5:10 p.m.75 views

CVE-2022-31052

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the reques...

6.5CVSS6.4AI score0.01578EPSS
SaveExploits0
OSV
OSV
added 2022/05/18 11:15 a.m.13 views

UBUNTU-CVE-2022-30974

compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413...

5.5CVSS6.8AI score0.01095EPSS
SaveExploits1References4
OSV
OSV
added 2022/04/05 4:15 p.m.5 views

CVE-2021-41752

Stack overflow vulnerability in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021 due to an unbounded recursive call to the new opt function...

9.8CVSS5.8AI score0.01195EPSS
SaveExploits1References1
OSV
OSV
added 2022/04/05 4:15 p.m.3 views

UBUNTU-CVE-2021-41752

Stack overflow vulnerability in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021 due to an unbounded recursive call to the new opt function...

9.8CVSS5.8AI score0.01195EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/04/05 12:0 a.m.6 views

PT-2022-11476 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript versions prior to commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 Description: The issue is caused by an unbounded recursive call to the new opt function, leading to a stack overflow. This occurs in Jerryscript before the specifie...

9.8CVSS9.3AI score0.01195EPSS
SaveExploits1References7
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.27 views

Mageia: Security Advisory (MGASA-2016-0411)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.07613EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2022/01/14 12:0 a.m.5 views

GCC 安全漏洞

Gcc is a collection of Gnu compilers. It is primarily used to compile the C and C++ languages. A security vulnerability exists in GCC that stems from the discovery that GCC v12.0 contains uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows an attacker to...

5.5CVSS6.1AI score0.00779EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2021/08/17 12:0 a.m.12 views

PT-2021-5778 · Ntfs-3G +7 · Ntfs-3G +7

Name of the Vulnerable Software and Affected Versions: NTFS-3G versions prior to 2021.8.22 Description: The issue is related to the ntfs attr pwrite function in the NTFS-3G file system driver, which is affected by uncontrolled recursion. This can be exploited by an attacker using a specially...

7.8CVSS6.4AI score0.04794EPSS
SaveExploits14References344
OSV
OSV
added 2021/07/18 4:15 a.m.10 views

UBUNTU-CVE-2021-36773

uBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter nesting for strict blocking, which allows crafted web sites to cause a denial of service unbounded recursion that can trigger memory consumption and a loss of all blocking functionality...

7.5CVSS5.9AI score0.01261EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2021/07/13 12:0 a.m.5 views

PT-2021-21349 · Unknown +2 · Ublock Origin +2

Name of the Vulnerable Software and Affected Versions: uBlock Origin versions prior to 1.36.2 nMatrix versions prior to 4.4.9 Description: The issue allows crafted web sites to cause a denial of service due to unbounded recursion, which can trigger memory consumption and a loss of all blocking...

7.5CVSS6.5AI score0.01261EPSS
SaveExploits1References20
Tenable Nessus
Tenable Nessus
added 2021/06/10 12:0 a.m.39 views

Oracle Linux 7 : krb5 (ELSA-2021-9294)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-9294 advisory. 1.15.1-50.0.1 - Add recursion limit for ASN.1 indefinite lengths Orabug: 32582360 Tenable has extracted the preceding description block directly from the Oracle...

7.5CVSS7.6AI score0.04365EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.18 views

SUSE: Security Advisory (SUSE-SU-2020:3377-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.04365EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2021/06/03 10:26 a.m.7 views

krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

A flaw was found in krb5. MIT Kerberos 5 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1encode.c support for BER indefinite lengths lacks a recursion limit...

7.5CVSS7.1AI score0.04365EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/05/19 12:0 a.m.33 views

RHEL 8 : krb5 (RHSA-2021:1593)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1593 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords...

7.5CVSS7.6AI score0.04365EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
added 2021/05/18 2:23 p.m.42 views

Moderate: Red Hat Security Advisory: krb5 security update

An update for krb5 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

7.5CVSS6.8AI score0.04365EPSS
SaveExploits0References7
AlmaLinux
AlmaLinux
added 2021/05/18 5:36 a.m.41 views

Moderate: krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the...

5CVSS1.5AI score0.04365EPSS
SaveExploits0References1
Rows per page
Query Builder