Lucene search
+L

7017 matches found

GitLab Advisory Database
GitLab Advisory Database
added 2020/06/15 12:00 a.m.37 views

Uncontrolled Resource Consumption

GNU Bison allows attackers to cause a denial of service application crash...

5.5CVSS4.6AI score0.00385EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/06/11 12:15 a.m.20 views

CVE-2020-11090

In Indy Node 1.12.2, there is an Uncontrolled Resource Consumption vulnerability. Indy Node has a bug in TAA handling code. The current primary can be crashed with a malformed transaction from a client, which leads to a view change. Repeated rapid view changes have the potential of bringing down...

7.5CVSS7.4AI score
SaveExploits0References3
Prion
Prion
added 2020/06/11 12:15 a.m.19 views

Code injection

In Indy Node 1.12.2, there is an Uncontrolled Resource Consumption vulnerability. Indy Node has a bug in TAA handling code. The current primary can be crashed with a malformed transaction from a client, which leads to a view change. Repeated rapid view changes have the potential of bringing down...

5CVSS7.3AI score0.02125EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2020/06/11 12:15 a.m.12 views

PYSEC-2020-47

In Indy Node 1.12.2, there is an Uncontrolled Resource Consumption vulnerability. Indy Node has a bug in TAA handling code. The current primary can be crashed with a malformed transaction from a client, which leads to a view change. Repeated rapid view changes have the potential of bringing down...

7.5CVSS6.7AI score0.02125EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2020/06/11 12:05 a.m.87 views

CVE-2020-11090

Indy Node 1.12.2 contains an Uncontrolled Resource Consumption vulnerability in the TAA handling code. A malformed client transaction can crash the current primary, triggering view changes that, if repeated rapidly, may disrupt the network. The issue is fixed in version 1.12.3; users should upgra...

7.5CVSS7.3AI score0.02125EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2020/06/11 12:04 a.m.58 views

Uncontrolled Resource Consumption in Indy Node

Summary Indy Node has a bug in TAA handling code. The current primary can be crashed with a malformed transaction from a client, which leads to a view change. Repeated rapid view changes have the potential of bringing down the network. Discovery On May 18, Evernym's monitoring of Sovrin StagingNe...

7.5CVSS7.4AI score0.02125EPSS
SaveExploits0References6Affected Software1
ICS
ICS
added 2020/06/09 12:00 a.m.78 views

Siemens SIMATIC, SINAMICS (Update C)

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: SIMATIC, SINAMICS Vulnerabilities: Uncontrolled Search Path Element, Heap-based Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-20-161-05...

7.8CVSS8.3AI score0.00452EPSS
SaveExploits0References11
OpenVAS
OpenVAS
added 2020/06/05 12:00 a.m.33 views

Huawei Data Communication: Two Vulnerabilities of License Module in Some Huawei Products (huawei-sa-20171206-01-license)

There is a uncontrolled format string vulnerability when the license module of some Huawei products output the log information. This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced...

5.5CVSS5.5AI score0.00207EPSS
SaveExploits0References1
Prion
Prion
added 2020/06/03 2:15 p.m.22 views

Remote code execution

Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelectors or getSelectorsBySpecificity is called with input from an attacker...

7.5CVSS9.8AI score0.49797EPSS
SaveExploits4References4Affected Software1
Debian CVE
Debian CVE
added 2020/06/03 1:46 p.m.21 views

CVE-2020-13756

Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelectors or getSelectorsBySpecificity is called with input from an attacker...

9.8CVSS9.9AI score0.49797EPSS
SaveExploits4
zdt
zdt
added 2020/06/03 12:00 a.m.155 views

Sabberworm PHP CSS Code Injection Vulnerability

Exploit for php platform in category web applications Sabberworm PHP CSS parser - Code injection =============================================================================== Identifiers ------------------------------------------------- CVE-2020-13756 CVSSv3 score...

7.5CVSS0.3AI score0.49797EPSS
SaveExploits4
Tenable Nessus
Tenable Nessus
added 2020/06/03 12:00 a.m.41 views

PostgreSQL 9.5.x < 9.5.22 / 9.6.x < 9.6.18 / 10.x < 10.13 / 11.x < 11.8 / 12.x < 12.3 Arbitrary Code Execution Vulnerability

The version of PostgreSQL installed on the remote host is 9.5 prior to 9.5.22, 9.6 prior to 9.6.18, 10 prior to 10.13, 11 prior to 11.8, or 12 prior to 12.3. As such, it is potentially affected by a which allows a Windows installer the ability to run executables from uncontrolled directories,...

7.3CVSS8.3AI score0.0053EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/06/02 12:00 a.m.11 views

The vulnerability of the Border Gateway Protocol implementation in microprogramming-based network interface controllers from Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense allows attackers to induce service failures.

The vulnerability of the Border Gateway Protocol implementation in microprogramming systems for Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely...

7.8CVSS6.8AI score0.01233EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:00 a.m.12 views

The vulnerability in the implementation of the FUSE file system in Linux kernels allows a hacker to cause a service failure.

The vulnerability of the FUSE file system implementation in Linux operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS6.6AI score0.00512EPSS
SaveExploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/05/27 12:00 a.m.27 views

Beckhoff Bk9000 Uncontrolled Resource Consumption

A Denial-of-Service vulnerability exists in BECKHOFF Ethernet TCP/IP Bus Coupler BK9000. After an attack has occurred, the device's functionality can be restored by rebooting. File data ot500372.nasl...

7.8CVSS2.2AI score0.01383EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/05/27 12:00 a.m.28 views

Mitsubishielectric Q03\/04\/06\/13\/26udvcpu Uncontrolled Resource Consumption

In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior, MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior,...

4.3CVSS2.1AI score0.01521EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/05/27 12:00 a.m.23 views

Siemens Simatic Uncontrolled Resource Consumption

A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions = V2.5 and = V2.5 and = V2.5 and V20.8. Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a Denial-of-Service condition. The...

7.8CVSS3.6AI score0.01677EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2020/05/27 12:00 a.m.37 views

Siemens Dk Uncontrolled Resource Consumption

A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller All versions, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 All Versions V4.5, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P All Versions V4.6, PROFINET...

7.8CVSS1.5AI score0.0146EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2020/05/27 12:00 a.m.17 views

Siemens Ktk Uncontrolled Resource Consumption

A vulnerability has been identified in KTK ATE530S All versions, SIDOOR ATD430W All versions, SIDOOR ATE530S COATED All versions, SIDOOR ATE531S All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC incl. SIPLUS variants All versions = V4.2, SIMATIC ET200SP IM155-6 MF HF All versions,...

5CVSS1.9AI score0.01722EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2020/05/20 2:25 a.m.31 views

CVE-2018-21232

re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags...

5.5CVSS3.9AI score0.01432EPSS
SaveExploits1References2
Rows per page
Query Builder