Lucene search
+L

2455 matches found

CVE
CVE
•added 2025/08/08 4:32 p.m.•197 views

CVE-2025-8732

CVE-2025-8732 affects libxml2 up to 2.14.5, with a vulnerability in xmlParseSGMLCatalog that can trigger uncontrolled recursion during SGML catalog processing. Local attackers are required, and exploit details have circulated publicly; the real-world impact remains debated in some sources. Severa...

4.8CVSS4AI score0.00216EPSS
SaveExploits1References7Affected Software1
AlpineLinux
AlpineLinux
•added 2025/08/08 4:32 p.m.•22 views

CVE-2025-8732

A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to...

4.8CVSS4.8AI score0.00216EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
•added 2025/08/08 1:25 p.m.•12 views

CVE-2025-23325

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause uncontrolled recursion through a specially crafted input. A successful exploit of this vulnerability might lead to denial of service...

7.5CVSS6.2AI score0.0049EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/08 12:00 a.m.•14 views

PT-2025-32375

Name of the Vulnerable Software and Affected Versions libxml2 versions up to 2.14.5 Description A vulnerability exists in libxml2 related to uncontrolled recursion within the xmlParseSGMLCatalog function of the xmlcatalog component. The issue can be triggered with untrusted SGML catalogs. The...

4.8CVSS4AI score0.00216EPSS
SaveExploits1References78
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/08 12:00 a.m.•2 views

CVE-2025-8732: Uncontrolled Recursion

A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to...

4.8CVSS4.7AI score0.00216EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/08/08 12:00 a.m.•12 views

libxml2 安全漏洞

libxml2 is a GNOME open source library for parsing XML documents. It is written in C and can be called by many languages, such as C, C++, and XSH. A security vulnerability exists in libxml2 version 2.14.5 and earlier, which stems from an uncontrolled recursion problem...

4.8CVSS4.2AI score0.00216EPSS
SaveExploits1References7
OSV
OSV
•added 2025/08/06 1:15 p.m.•11 views

CVE-2025-23325

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause uncontrolled recursion through a specially crafted input. A successful exploit of this vulnerability might lead to denial of service...

7.5CVSS5.8AI score0.0049EPSS
SaveExploits0References3
NVD
NVD
•added 2025/08/06 1:15 p.m.•16 views

CVE-2025-23325

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause uncontrolled recursion through a specially crafted input. A successful exploit of this vulnerability might lead to denial of service...

7.5CVSS0.0049EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/08/06 12:40 p.m.•5 views

CVE-2025-23325

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause uncontrolled recursion through a specially crafted input. A successful exploit of this vulnerability might lead to denial of service...

7.5CVSS6.3AI score0.0049EPSS
SaveExploits0References3
CVE
CVE
•added 2025/08/06 12:40 p.m.•43 views

CVE-2025-23325

CVE-2025-23325 affects NVIDIA Triton Inference Server for Windows and Linux. The vulnerability is an attacker-caused uncontrolled recursion via crafted input, with a stated potential impact of denial of service. The entry lists a CVSS v3.1 base score of 7.5 (High) with network attack vector and n...

7.5CVSS6.8AI score0.0049EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/06 12:00 a.m.•1 views

CVE-2025-23325: Uncontrolled Recursion

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause uncontrolled recursion through a specially crafted input. A successful exploit of this vulnerability might lead to denial of service...

7.5CVSS5.8AI score0.0049EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/08/04 5:46 p.m.•13 views

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the pdfseparate process. An attacker can cause the application to enter an infinite recursion by supplying a specially crafted PDF file, resulting in resource exhaustion and service disruption. Remediation...

7.5CVSS6.4AI score0.00319EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/08/04 5:45 p.m.•11 views

Uncontrolled Recursion

Overview mupdf is a MuPDF.js Affected versions of this package are vulnerable to Uncontrolled Recursion when processing a crafted PDF file containing cyclic /Next references in the outline structure via the stripoutline function. An attacker can cause the application to enter an infinite recursio...

6.9CVSS6.5AI score0.0041EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/08/04 5:45 p.m.•7 views

Uncontrolled Recursion

Overview PyMuPDFPro is a Commercial extensions for PyMuPDF; enables Office document handling, including doc, docx, hwp, hwpx, ppt, pptx, xls, xls, and others. Supports text and table extraction, document conversion and more. Affected versions of this package are vulnerable to Uncontrolled Recursi...

6.9CVSS6.5AI score0.0041EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/08/04 5:45 p.m.•5 views

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion when processing a crafted PDF file containing cyclic /Next references in the outline structure via the stripoutline function. An attacker can cause the application to enter an infinite recursion and crash by...

6.9CVSS6.5AI score0.0041EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/08/04 5:45 p.m.•9 views

Uncontrolled Recursion

Overview PyMuPDF is an A high performance Python library for data extraction, analysis, conversion & manipulation of PDF and other documents. Affected versions of this package are vulnerable to Uncontrolled Recursion when processing a crafted PDF file containing cyclic /Next references in the...

6.9CVSS6.5AI score0.0041EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/08/04 12:00 a.m.•16 views

PT-2025-32164 · Nvidia · Nvidia Triton Inference Server

Name of the Vulnerable Software and Affected Versions: NVIDIA Triton Inference Server for Windows and Linux affected versions not specified Description: The NVIDIA Triton Inference Server contains a flaw that allows an attacker to trigger uncontrolled recursion with a crafted input. Successful...

7.8CVSS6AI score0.0049EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2025/08/04 12:00 a.m.•15 views

Amazon Linux 2023 : cargo, clippy, rust (ALAS2023-2025-1092)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1092 advisory. The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::codedinputstream::CodedInputStream::skipgroup parsing of unknown fields in untrusted input. CVE-2025-53605 Tenabl...

5.9CVSS5.3AI score0.00473EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2025/08/01 5:42 p.m.•17 views

com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT

A denial of service flaw has been discovered in Connect2id Nimbus JOSE + JWT. This issue can allow a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT claim set...

5.8CVSS7.1AI score0.00913EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2025/07/31 12:00 a.m.•16 views

Amazon Linux 2 : rust (ALAS-2025-2933)

The version of rust installed on the remote host is prior to 1.86.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2933 advisory. The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::codedinputstream::CodedInputStream::skipgroup...

5.9CVSS5.5AI score0.00473EPSS
SaveExploits0References4
Rows per page
Query Builder