Lucene search
+L

2434 matches found

BDU FSTEC
BDU FSTEC
•added 2021/10/27 12:00 a.m.•15 views

The vulnerability of the ati-vga hardware emulation component in QEMU, related to uncontrolled recursion, allows a hacker to trigger a service failure.

The vulnerability of the ati-vga hardware emulation component in QEMU is related to an uncontrolled recursion. Exploiting this vulnerability can allow an attacker to cause a system failure...

6CVSS6.9AI score0.00486EPSS
SaveExploits0References7Affected Software3
ICS
ICS
•added 2021/10/21 12:00 a.m.•77 views

ICONICS GENESIS64 and Mitsubishi Electric MC Works64 OPC UA

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendors: ICONICS, Mitsubishi Electric Equipment: ICONICS GENESIS64, Mitsubishi Electric MC Works64 Vulnerability: Uncontrolled Recursion 2. RISK EVALUATION Successful exploitation of this vulnerability could...

7.5CVSS7.8AI score0.0195EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•22 views

The vulnerability of the lyxml_parse_mem() function in the syntax analyzer and data modeling tool YANG Libyang, related to an uncontrolled recursion, allows attackers to cause service failures.

The vulnerability of the lyxmlparsemem function, a syntax analyzer and tool for data modeling in the YANG Libyang language, is related to an uncontrolled recursion in the lyxmlparseelem function. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS7.2AI score0.02425EPSS
SaveExploits1References4Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/07 12:00 a.m.•6 views

CVE-2021-39257: Uncontrolled Recursion

A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain starting from ntfsattrpwrite, causing stack consumption in NTFS-3G 2021.8.22...

5.5CVSS5.7AI score0.00396EPSS
SaveExploits0References2
OSV
OSV
•added 2021/08/25 9:00 p.m.•14 views

GHSA-39VW-QP34-RMWF Uncontrolled recursion leads to abort in deserialization

Affected versions of this crate did not properly check for recursion while deserializing aliases. This allows an attacker to make a YAML file with an alias referring to itself causing an abort. The flaw was corrected by checking the recursion depth...

6.9AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2021/08/25 9:00 p.m.•27 views

Uncontrolled recursion leads to abort in deserialization

Affected versions of this crate did not properly check for recursion while deserializing aliases. This allows an attacker to make a YAML file with an alias referring to itself causing an abort. The flaw was corrected by checking the recursion depth...

6.7AI score
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
•added 2021/08/25 8:44 p.m.•43 views

Uncontrolled recursion in ammonia

An issue was discovered in the ammonia crate before 2.1.0 for Rust. There is uncontrolled recursion during HTML DOM tree serialization...

7.5CVSS2.7AI score0.01411EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
•added 2021/08/25 8:43 p.m.•43 views

Uncontrolled recursion in rust-yaml

Affected versions of this crate did not prevent deep recursion while deserializing data structures. This allows an attacker to make a YAML file with deeply nested structures that causes an abort while deserializing it. The flaw was corrected by checking the recursion depth...

7.5CVSS7.2AI score0.01411EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/11 12:00 a.m.•6 views

CVE-2021-38569: Uncontrolled Recursion

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects...

7.5CVSS5.8AI score0.00961EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/11 12:00 a.m.•7 views

CVE-2021-38566: Uncontrolled Recursion

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows stack consumption during recursive processing of embedded XML nodes...

7.5CVSS5.7AI score0.00961EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/08/05 12:00 a.m.•13 views

The vulnerability of the Moodle management system, related to uncontrolled recursion, allows a hacker to trigger a service failure.

The vulnerability of the Moodle administration system is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform a denial-of-service attack by creating a specially crafted URL address...

5CVSS7.2AI score0.00734EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2021/07/26 12:15 p.m.•40 views

Design/Logic Flaw

In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that...

4CVSS6.4AI score0.0218EPSS
SaveExploits0References3Affected Software2
OSV
OSV
•added 2021/07/26 12:15 p.m.•17 views

UBUNTU-CVE-2021-22144

In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that...

6.5CVSS7.4AI score0.0218EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/07/26 12:15 p.m.•9 views

CVE-2021-22144

In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that...

6.5CVSS7.3AI score0.0218EPSS
SaveExploits0References4
CVE
CVE
•added 2021/07/26 11:48 a.m.•193 views

CVE-2021-22144

CVE-2021-22144 affects Elasticsearch Grok parser. The vulnerability is an uncontrolled recursion that enables a DoS via specially crafted Grok queries submitted by an authenticated user, potentially crashing the node. Affected versions are Elasticsearch before 7.13.3 and 6.8.17. Public references...

6.5CVSS6.3AI score0.0218EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2021/07/26 11:48 a.m.•0 views

CVE-2021-22144

In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that...

7.1CVSS0.0218EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/26 12:00 a.m.•3 views

CVE-2021-22144: Uncontrolled Recursion

In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that...

6.5CVSS5.8AI score0.0218EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/07/13 12:00 a.m.•2 views

PT-2021-3684

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description The issue is related to uncontrolled recursion in the system, which can be exploited by a remote attacker to cause a denial of service by creating a specially crafted URL. The file repository'...

7.5CVSS0.00734EPSS
SaveExploits0References15
BDU FSTEC
BDU FSTEC
•added 2021/07/13 12:00 a.m.•24 views

The vulnerability of the Oniguruma regular expression library, related to an uncontrolled recursion, allows a hacker to trigger a service failure.

The vulnerability of the Oniguruma regular expression library is related to an uncontrolled recursion. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.5CVSS6.5AI score0.02752EPSS
SaveExploits1References12Affected Software4
OSV
OSV
•added 2021/07/09 12:15 p.m.•34 views

CVE-2021-36154

HTTP2ToRawGRPCServerCodec in gRPC Swift 1.1.1 and earlier allows remote attackers to deny service via the delivery of many small messages within a single HTTP/2 frame, leading to Uncontrolled Recursion and stack consumption...

7.5CVSS6.9AI score
SaveExploits0References3
Rows per page
Query Builder