Lucene search
+L

7161 matches found

OSV
OSV
added 2021/12/20 8:32 p.m.19 views

MGASA-2021-0572 Updated log4j packages fix security vulnerability

Updated log4j packages fix security vulnerability: Apache Log4j2 versions 2.0-alpha1 through 2.16.0 did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is...

5.9CVSS6.3AI score0.99999EPSS
SaveExploits21References2
GithubExploit
GithubExploit
added 2021/12/19 11:22 p.m.275 views

Exploit for Improper Input Validation in Apache Log4J

tejas-nagchandi/CVE-2021-45105 Replicating CVE-2021-45105...

5.9CVSS8.8AI score0.99999EPSS
SaveExploits21
OSV
OSV
added 2021/12/19 12:26 p.m.11 views

MGASA-2021-0557 Updated dovecot packages fix security vulnerabilities

Updated dovecot packages fix security vulnerabilities: The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular expression for the regex extension CVE-2020-28200. Dovecot before 2.3.15 allows ../ Path Traversal. An...

7.5CVSS5.8AI score0.0285EPSS
SaveExploits0References9
Mageia
Mageia
added 2021/12/19 12:26 p.m.48 views

Updated dovecot packages fix security vulnerabilities

Updated dovecot packages fix security vulnerabilities: The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular expression for the regex extension CVE-2020-28200. Dovecot before 2.3.15 allows ../ Path Traversal. An...

7.5CVSS5.1AI score0.0285EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2021/12/19 12:00 a.m.71 views

CVE-2021-45105

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 excluding 2.12.3 and 2.3.1 did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue wa...

5.9CVSS7AI score0.99999EPSS
SaveExploits21References5
Zero Day Initiative
Zero Day Initiative
added 2021/12/19 12:00 a.m.72 views

Apache Log4j StrSubstitutor Uncontrolled Recursion Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Apache Log4j. Authentication is not required to exploit this vulnerability. The specific flaw exists within the StrSubstitutor class. The issue results from the lack of proper validatio...

5.3CVSS2.9AI score0.99999EPSS
SaveExploits21References1
Github Security Blog
Github Security Blog
added 2021/12/18 6:00 p.m.72 views

Apache Log4j2 vulnerable to Improper Input Validation and Uncontrolled Recursion

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 excluding 2.12.3 did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in...

5.9CVSS4.9AI score0.99999EPSS
SaveExploits21References19Affected Software2
NVD
NVD
added 2021/12/18 12:15 p.m.38 views

CVE-2021-45105

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 excluding 2.12.3 and 2.3.1 did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue wa...

5.9CVSS0.99999EPSS
SaveExploits21References13
attackerkb
attackerkb
added 2021/12/18 12:15 p.m.73 views

CVE-2021-45105

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 excluding 2.12.3 and 2.3.1 did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue wa...

5.9CVSS6.9AI score0.99999EPSS
SaveIn wildExploits21References14
GithubExploit
GithubExploit
added 2021/12/15 10:30 p.m.64 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Pot A honeypot for the Log4Shell vulnerability CVE-2021-...

10CVSS6.7AI score0.99999EPSS
SaveExploits375
Prion
Prion
added 2021/12/14 3:15 p.m.33 views

Input validation

Rapid7 Insight Agent, versions 3.0.1 to 3.1.2.34, suffer from a local privilege escalation due to an uncontrolled DLL search path. Specifically, when Insight Agent versions 3.0.1 to 3.1.2.34 start, the Python interpreter attempts to load python3.dll at "C:\DLLs\python3.dll," which normally is...

7.2CVSS7.5AI score0.00939EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
added 2021/12/14 10:08 a.m.32 views

Denial Of Service

wireshark:sid is vulnerable to denial of service attacks.Uncontrolled Recursion in the Bluetooth DHT dissector allows denial of service via packet injection or crafted capture file...

7.5CVSS4.1AI score0.0381EPSS
SaveExploits1References11Affected Software1
GithubExploit
GithubExploit
added 2021/12/13 4:41 p.m.46 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Ansible role - log4shell !Maintainerhttps://img.shields.io...

10CVSS8.6AI score0.99999EPSS
SaveExploits375
GithubExploit
GithubExploit
added 2021/12/13 6:53 a.m.41 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4j-RCE-Exploiter Scanner for Log4j RCE CVE-2021-44228 !L...

10CVSS7.2AI score0.99999EPSS
SaveExploits375
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:00 a.m.11 views

The vulnerability of the Security component of the HarmonyOS operating system, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.

The vulnerability of the Security component of the HarmonyOS operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

7.8CVSS7.2AI score0.00655EPSS
SaveExploits0References2Affected Software1
GithubExploit
GithubExploit
added 2021/12/12 3:30 p.m.55 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

cve-2021-44228-qingteng-online-patch What is this Hot-pa...

10CVSS7.2AI score0.99999EPSS
SaveExploits375
GithubExploit
GithubExploit
added 2021/12/11 1:56 p.m.54 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4j-vulnerable-app-cve-2021-44228-terraform A Terraform to d...

10CVSS8.6AI score0.99999EPSS
SaveExploits375
GithubExploit
GithubExploit
added 2021/12/11 11:37 a.m.23 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

!Not Maintainedhttps://img.shields.io/badge/Maintenance%20Le...

10CVSS7.1AI score0.99999EPSS
SaveExploits375
GithubExploit
GithubExploit
added 2021/12/11 2:45 a.m.36 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

sample-ldap-exploit A short demo of CVE-2021-44228 Build...

10CVSS7.9AI score0.99999EPSS
SaveExploits375
OSV
OSV
added 2021/12/10 8:05 p.m.30 views

GHSA-P33M-7W7F-GMJ8 Uncontrolled Resource Consumption in fun-map

fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload...

8.1CVSS5.9AI score0.01216EPSS
SaveExploits1References3
Rows per page
Query Builder