Lucene search
+L

10747 matches found

BDU FSTEC
BDU FSTEC
•added 2021/07/20 12:00 a.m.•13 views

The vulnerability of the library for EXIF file grammar analysis in libexif, related to uncontrolled resource consumption, allows a violator to cause a service failure.

The vulnerability of the library for EXIF file parsing in libexif is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS7.1AI score0.02301EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
•added 2021/07/20 12:00 a.m.•11 views

The vulnerability of the Pygments syntax highlighting program lies in its uncontrolled resource consumption, which allows a hacker to trigger a service failure.

The vulnerability of the Pygments syntax highlighter program is related to the use of regular expressions. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

7.5CVSS6.8AI score0.03906EPSS
SaveExploits1References13Affected Software5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/19 12:00 a.m.•3 views

CVE-2020-20248: Uncontrolled Resource Consumption

Mikrotik RouterOs before stable 6.47 suffers from an uncontrolled resource consumption in the memtest process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU...

6.5CVSS5.9AI score0.01823EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/19 12:00 a.m.•4 views

CVE-2020-20230: Uncontrolled Resource Consumption

Mikrotik RouterOs before stable 6.47 suffers from an uncontrolled resource consumption in the sshd process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU...

6.5CVSS5.9AI score0.01938EPSS
SaveExploits1References2
OSV
OSV
•added 2021/07/17 11:04 a.m.•9 views

OESA-2021-1270 dovecot security update

Dovecot is an IMAP server for Linux/UNIX-like systemsa wrapper package that will just handle common things for all versioned dovecot packages. Security Fixes: The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular...

6.1CVSS7.3AI score0.0285EPSS
SaveExploits0References3
Prion
Prion
•added 2021/07/15 8:15 p.m.•28 views

Design/Logic Flaw

An Uncontrolled Resource Consumption vulnerability in the ARP daemon arpd and Network Discovery Protocol ndp process of Juniper Networks Junos OS Evolved allows a malicious attacker on the local network to consume memory resources, ultimately resulting in a Denial of Service DoS condition...

3.3CVSS6.5AI score0.00381EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/07/15 8:01 p.m.•85 views

CVE-2021-0292

CVE-2021-0292 corresponds to a memory-leak DoS in Juniper Networks Junos OS Evolved’s arpd and ndp processes. Affected are Junos OS Evolved versions 19.4 prior to 19.4R2-S3-EVO; 20.1 prior to 20.1R2-S4-EVO; and all 20.2-EVO. The vulnerability allows a local attacker on the same network to drive u...

6.5CVSS6.5AI score0.00381EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/07/15 8:01 p.m.•38 views

CVE-2021-0292 Junos OS Evolved: Memory leak in arpd or ndp processes can lead to Denial of Service (DoS)

An Uncontrolled Resource Consumption vulnerability in the ARP daemon arpd and Network Discovery Protocol ndp process of Juniper Networks Junos OS Evolved allows a malicious attacker on the local network to consume memory resources, ultimately resulting in a Denial of Service DoS condition...

6.5CVSS6.7AI score0.00381EPSS
SaveExploits0References1
OSV
OSV
•added 2021/07/15 12:00 p.m.•36 views

RUSTSEC-2021-0106 Uncontrolled Search Path Element in sharkdp/bat

bat on windows before 0.18.2 executes programs named less.exe from the current working directory. This can lead to unintended code execution...

7.8CVSS7.7AI score0.00356EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/15 12:00 a.m.•3 views

CVE-2021-36753: Uncontrolled Search Path Element

sharkdp BAT before 0.18.2 executes less.exe from the current working directory...

7.8CVSS5.8AI score0.00356EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/15 12:00 a.m.•4 views

CVE-2021-0292: Uncontrolled Resource Consumption

An Uncontrolled Resource Consumption vulnerability in the ARP daemon arpd and Network Discovery Protocol ndp process of Juniper Networks Junos OS Evolved allows a malicious attacker on the local network to consume memory resources, ultimately resulting in a Denial of Service DoS condition...

6.5CVSS5.8AI score0.00381EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/07/14 12:00 a.m.•7 views

PT-2021-3617

Name of the Vulnerable Software and Affected Versions Apache Ant versions prior to 1.9.16 Apache Ant versions prior to 1.10.11 Description The issue is related to an uncontrolled resource consumption in Apache Ant. It can be exploited by a remote attacker to cause a denial of service. When Apache...

7.8CVSS6.6AI score0.0263EPSS
SaveExploits0References50
CNNVD
CNNVD
•added 2021/07/13 12:00 a.m.•12 views

Adobe Acrobat 代码问题漏洞

Adobe Acrobat is a PDF editing software developed by Adobe. Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat/Reader is vulnerable to uncontrolled search path element vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

8.5CVSS6.1AI score0.02218EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2021/07/13 12:00 a.m.•24 views

The vulnerability of the Oniguruma regular expression library, related to an uncontrolled recursion, allows a hacker to trigger a service failure.

The vulnerability of the Oniguruma regular expression library is related to an uncontrolled recursion. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.5CVSS6.5AI score0.02752EPSS
SaveExploits1References12Affected Software4
BDU FSTEC
BDU FSTEC
•added 2021/07/13 12:00 a.m.•14 views

The vulnerability of many components of the ZeroMQ messaging system, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of many components of the ZeroMQ messaging system is related to a bug in the resource management mechanism. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...

7.5CVSS7.5AI score0.03408EPSS
SaveExploits0References11Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/13 12:00 a.m.•3 views

CVE-2021-36376: Uncontrolled Search Path Element

dandavison delta before 0.8.3 on Windows resolves an executable's pathname as a relative path from the current directory...

7.8CVSS5.8AI score0.00422EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/07/13 12:00 a.m.•14 views

Adobe Dimension 代码问题漏洞

Adobe Dimension is a 3D rendering and design software. An uncontrolled search path element vulnerability exists in Adobe Dimension 3.4 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code...

9.3CVSS6.1AI score0.03785EPSS
SaveExploits0References3
NVD
NVD
•added 2021/07/09 12:15 p.m.•29 views

CVE-2021-36154

HTTP2ToRawGRPCServerCodec in gRPC Swift 1.1.1 and earlier allows remote attackers to deny service via the delivery of many small messages within a single HTTP/2 frame, leading to Uncontrolled Recursion and stack consumption...

7.5CVSS0.02082EPSS
SaveExploits0References3
OSV
OSV
•added 2021/07/09 12:15 p.m.•32 views

CVE-2021-36154

HTTP2ToRawGRPCServerCodec in gRPC Swift 1.1.1 and earlier allows remote attackers to deny service via the delivery of many small messages within a single HTTP/2 frame, leading to Uncontrolled Recursion and stack consumption...

7.5CVSS6.9AI score
SaveExploits0References3
CVE
CVE
•added 2021/07/09 11:02 a.m.•75 views

CVE-2021-36154

CVE-2021-36154 affects gRPC Swift up to version 1.1.1, where HTTP2ToRawGRPCServerCodec can mishandle multiple small messages in a single HTTP/2 frame, causing uncontrolled recursion and denial of service. Public advisories (GHSA-4RHQ-VQ24-88GW and OSV/Red Hat entries) confirm the issue and state ...

7.5CVSS7.4AI score0.02082EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder