Lucene search
+L

9556 matches found

BDU FSTEC
BDU FSTEC
•added 2025/08/27 12:00 a.m.•16 views

The vulnerability of Cisco IOS XE’s Wireless Network Control (wncd) operating system allows a hacker to trigger a service failure.

The vulnerability of Cisco IOS XE’s Wireless Network Control wncd operating system is related to uncontrolled memory allocation. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.4CVSS6.7AI score0.00239EPSS
SaveExploits0References2Affected Software1
Redos
Redos
•added 2025/08/26 12:00 a.m.•10 views

ROS-20250826-08

Apache Tomcat application server vulnerability involves uncontrolled resource consumption. Exploitation The vulnerability could allow an attacker acting remotely to cause a denial of service. Apache Tomcat application server vulnerability is related to integer overflow. Exploitation exploitation ...

7.2AI score0.02056EPSS
SaveExploits0
Snyk
Snyk
•added 2025/08/25 3:41 p.m.•9 views

Uncontrolled Recursion

Overview llama-index-core is an Interface between LLMs and your data Affected versions of this package are vulnerable to Uncontrolled Recursion via the JSONReader component. An attacker can cause excessive resource consumption and crash the process by submitting deeply nested JSON files...

8.8CVSS7AI score0.00285EPSS
SaveExploits0References2
NVD
NVD
•added 2025/08/25 3:15 p.m.•11 views

CVE-2025-5302

A denial of service vulnerability exists in the JSONReader component of the run-llama/llamaindex repository, specifically in version v0.12.37. The vulnerability is caused by uncontrolled recursion when parsing deeply nested JSON files, which can lead to Python hitting its maximum recursion depth...

8.6CVSS0.00285EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/08/25 3:03 p.m.•23 views

CVE-2025-5302 Denial of Service (DOS) in JSONReader in run-llama/llama_index

A denial of service vulnerability exists in the JSONReader component of the run-llama/llamaindex repository, specifically in version v0.12.37. The vulnerability is caused by uncontrolled recursion when parsing deeply nested JSON files, which can lead to Python hitting its maximum recursion depth...

8.6CVSS0.00285EPSS
SaveExploits0References2
OSV
OSV
•added 2025/08/25 3:03 p.m.•9 views

CVE-2025-5302 Denial of Service (DOS) in JSONReader in run-llama/llama_index

A denial of service vulnerability exists in the JSONReader component of the run-llama/llamaindex repository, specifically in version v0.12.37. The vulnerability is caused by uncontrolled recursion when parsing deeply nested JSON files, which can lead to Python hitting its maximum recursion depth...

8.6CVSS7.2AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/25 12:00 a.m.•0 views

CVE-2025-5302: Uncontrolled Recursion

A denial of service vulnerability exists in the JSONReader component of the run-llama/llamaindex repository, specifically in version v0.12.37. The vulnerability is caused by uncontrolled recursion when parsing deeply nested JSON files, which can lead to Python hitting its maximum recursion depth...

8.6CVSS7.7AI score0.00285EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/08/25 12:00 a.m.•17 views

The vulnerability of VMware ESXi and Cloud Foundation software lies in their uncontrolled resource consumption, which allows attackers to trigger service failures.

The vulnerability of VMware ESXi and Cloud Foundation software-related programs is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

6.8CVSS5.7AI score0.00241EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/08/25 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2019-9192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the GNU C Library aka glibc or libc6 through 2.29, checkdstlimitscalcpos1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '|\1\1' in grep, ...

7.5CVSS7.1AI score0.02427EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/08/24 9:29 a.m.•11 views

CVE-2025-9341

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All API modules, Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All API modules allows Excessive Allocation. This vulnerability is associated wi...

6.2CVSS6.8AI score0.0016EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/08/22 2:31 p.m.•9 views

CVE-2025-8449

CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service when an authenticated user sends a specially crafted request to a specific endpoint from within the BMS network...

4.1CVSS6.9AI score0.00259EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/22 11:09 a.m.•12 views

OESA-2025-2061 apache-commons-lang security update

The standard Java libraries fail to provide enough methods for manipulation of its core classes. Apache Commons Lang provides these extra methods. Security Fixes: A vulnerability classified as problematic has been found in Apache Commons Lang up to 2.6/3.17.x.CWE is classifying the issue as...

5.3CVSS6.3AI score0.0227EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/22 12:00 a.m.•0 views

CVE-2025-55634: Uncontrolled Resource Consumption

Incorrect access control in the RTMP server settings of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 allows unauthorized attackers to cause a Denial of Service DoS via initiating a large number of simultaneous ffmpeg-based stream pushes...

7.5CVSS5.8AI score0.00515EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/22 12:00 a.m.•1 views

CVE-2025-9341: Uncontrolled Resource Consumption

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All API modules, Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All API modules allows Excessive Allocation. This vulnerability is associated wi...

5.9CVSS5.9AI score0.0016EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/21 12:00 a.m.•0 views

CVE-2025-57751: Uncontrolled Resource Consumption

pyLoad is the free and open-source Download Manager written in pure Python. The jk parameter is received in pyLoad CNL Blueprint. Due to the lack of jk parameter verification, the jk parameter input by the user is directly determined as dykpy.evaljs, resulting in the server CPU being fully occupi...

8.7CVSS5.9AI score0.00325EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/21 12:00 a.m.•0 views

CVE-2025-55521: Uncontrolled Resource Consumption

An issue in the component /settings/localisation of Akaunting v3.1.18 allows authenticated attackers to cause a Denial of Service DoS via a crafted POST request...

6.5CVSS5.7AI score0.00485EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2025/08/21 12:00 a.m.•16 views

Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Foxit Reader...

7.8CVSS6.5AI score0.00182EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/21 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2017-5109

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remot...

4.3CVSS6.7AI score0.01247EPSS
SaveExploits0References2
CVE
CVE
•added 2025/08/20 1:55 p.m.•46 views

CVE-2025-8449

CVE-2025-8449 describes an CWE-400 Uncontrolled Resource Consumption vulnerability affecting Schneider Electric EcoStruxure Building Operation Enterprise Server/Enterprise Central/Workstation (BMS family). An authenticated user can send a specially crafted request to a specific endpoint within th...

4.1CVSS6.8AI score0.00259EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/20 1:55 p.m.•23 views

CVE-2025-8449

CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service when an authenticated user sends a specially crafted request to a specific endpoint from within the BMS network...

4.1CVSS0.00259EPSS
SaveExploits0References1
Rows per page
Query Builder