Lucene search
+L

2248 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/14 12:00 a.m.•3 views

CVE-2020-8285: Uncontrolled Recursion

curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing...

7.5CVSS7.3AI score0.0977EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/06 12:00 a.m.•6 views

CVE-2020-26882: Uncontrolled Recursion

In Play Framework 2.6.0 through 2.8.2, data amplification can occur when an application accepts multipart/form-data JSON input...

7.5CVSS5.7AI score0.01403EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/06 12:00 a.m.•4 views

CVE-2020-28242: Uncontrolled Recursion

An issue was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x before 17.8.1, and 18.x before 18.0.1 and Certified Asterisk before 16.8-cert5. If Asterisk is challenged on an outbound INVITE and the nonce is changed in each response, Asterisk will continually send...

6.5CVSS5.8AI score0.01516EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/11/05 12:00 a.m.•14 views

The vulnerability of the smb_fdata() function in the tcpdump utility for intercepting and analyzing network traffic allows a hacker to induce a service failure.

The vulnerability of the smbfdata function smbutil.c in the tool for capturing and analyzing network traffic, tcpdump, is caused by an uncontrolled recursion. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS6.3AI score0.04122EPSS
SaveExploits0References15Affected Software6
RedHat Linux
RedHat Linux
•added 2020/11/04 1:47 a.m.•15 views

tcpdump: Resource exhaustion in bgp_attr_print() function in print-bgp.c

An uncontrolled resource consumption flaw was discovered in the way tcpdump prints BGP packets. The BGP protocol allows ATTRSET to be nested as many times as the message can accommodate, however when a specially crafted packet is crafted and parsed by tcpdump, this may lead to stack exhaustion du...

7.5CVSS6.3AI score0.04122EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/02 12:00 a.m.•6 views

CVE-2020-9861: Uncontrolled Recursion

A stack overflow issue existed in Swift for Linux. The issue was addressed with improved input validation for dealing with deeply nested malicious JSON input...

7.5CVSS5.8AI score0.0145EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/10/14 12:00 a.m.•12 views

The vulnerability of the XACK DNS server, caused by uncontrolled recursion, allows attackers to trigger a service failure.

The vulnerability of the XACK DNS server stems from an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

8.6CVSS7.2AI score0.01639EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/10/07 12:00 a.m.•18 views

The vulnerability of the glibc library lies in its uncontrolled recursion during the search for matches using a regular expression, which allows an attacker to cause a service failure.

The vulnerability of the glibc library is related to uncontrolled recursion during the search for matches using a regular expression. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

7.8CVSS7.2AI score0.05757EPSS
SaveExploits1References8Affected Software1
NVD
NVD
•added 2020/09/09 9:15 p.m.•30 views

CVE-2020-25219

url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion...

7.5CVSS0.04367EPSS
SaveExploits1References9
OSV
OSV
•added 2020/09/09 9:15 p.m.•32 views

CVE-2020-25219

url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion...

7.5CVSS7.4AI score
SaveExploits0References9
AlpineLinux
AlpineLinux
•added 2020/09/09 8:30 p.m.•86 views

CVE-2020-25219

url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion...

7.5CVSS7.5AI score0.04367EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/09 12:00 a.m.•4 views

CVE-2020-25219: Uncontrolled Recursion

url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion...

7.5CVSS5.8AI score0.04367EPSS
SaveExploits1References2
Microsoft CVE
Microsoft CVE
•added 2020/08/18 7:00 a.m.•13 views

In the GNU C Library (aka glibc or libc6) through 2.29 check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion as demonstrated by '(\227|)(\\1\\1|t1|\\\2537)+' in grep.

...

7.5CVSS7.7AI score0.05757EPSS
SaveExploits1
OSV
OSV
•added 2020/08/12 4:15 p.m.•36 views

CVE-2020-12100

In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource consumption via a crafted e-mail message with deeply nested MIME parts...

7.5CVSS5.3AI score
SaveExploits0References12
OSV
OSV
•added 2020/08/12 4:15 p.m.•3 views

DEBIAN-CVE-2020-12100

In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource consumption via a crafted e-mail message with deeply nested MIME parts...

7.5CVSS7AI score0.05258EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/12 12:00 a.m.•4 views

CVE-2020-12100: Uncontrolled Recursion

In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource consumption via a crafted e-mail message with deeply nested MIME parts...

7.5CVSS6.4AI score0.05258EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/10 12:00 a.m.•5 views

CVE-2020-9243: Uncontrolled Recursion

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a denial of service vulnerability. The system does not properly limit the depth of recursion, an attacker should trick the user installing and execute a malicious application. Successful exploit could cause a denial of service...

5.5CVSS5.9AI score0.00469EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/28 12:00 a.m.•3 views

CVE-2020-16094: Uncontrolled Recursion

In imapscantreerecursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree...

7.5CVSS7.2AI score0.01781EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2020/06/29 5:20 p.m.•39 views

CVE-2019-18797

LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operatorSass::BinaryExpression in eval.cpp...

6.5CVSS3AI score0.01512EPSS
SaveExploits1References3
OpenVAS
OpenVAS
•added 2020/06/16 12:00 a.m.•52 views

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2020-1667)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.3AI score0.05926EPSS
SaveExploits4References2
Rows per page
Query Builder