Lucene search
K

284 matches found

EUVD
EUVD
added yesterday3 views

EUVD-2026-34165

Version 3.0.7 of the Securly Chrome Extension dynamically registers content13.min.js as a content script via chrome.scripting.registerContentScripts at runtime. This script is NOT declared in manifest.json and bypasses Chrome Web Store static security review. It runs on all URLs and immediately...

5.8AI score
Exploits0References1
Positive Technologies
Positive Technologies
added yesterday4 views

PT-2026-46051

Version 3.0.7 of the Securly Chrome Extension dynamically registers content13.min.js as a content script via chrome.scripting.registerContentScripts at runtime. This script is NOT declared in manifest.json and bypasses Chrome Web Store static security review. It runs on all URLs and immediately...

5.8AI score
Exploits0References2
Redos
Redos
added 2026/05/26 12:0 a.m.8 views

ROS-20260526-73-0008

Vulnerability in python-relenv related to execution of a loop with an unreachable exit condition. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

5.5CVSS7.2AI score0.00006EPSS
Exploits1
NVD
NVD
added 2026/05/21 9:16 a.m.6 views

CVE-2026-44057

A dead bounds check in the Spotlight RPC unmarshaller in Netatalk 3.0.0 through 4.4.2 results in an unreachable code path that provides no effective bounds protection, which may allow a remote authenticated attacker to obtain limited information via crafted Spotlight RPC requests...

3.1CVSS0.00043EPSS
Exploits0References1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ipvs: fixed the NULL pointer dereference in the route error path caused by ipv4 null-ptr-deref. The IPv4 code path in ipvsgetoutrt calls dstlinkfailure, without ensuring that skb-dev is set. This leads to a NULL pointer dereferen...

6AI score0.00068EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/18 7:10 p.m.5 views

EUVD-2026-29719

Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability...

7.5CVSS5.8AI score0.00036EPSS
Exploits0References4
OSV
OSV
added 2026/05/14 8:40 a.m.5 views

BIT-DOTNET-SDK-2026-42899 ASP.NET Core Denial of Service Vulnerability

Loop with unreachable exit condition 'infinite loop' in ASP.NET Core allows an unauthorized attacker to deny service over a network...

7.5CVSS5.8AI score0.00036EPSS
Exploits0References2
OSV
OSV
added 2026/05/14 8:40 a.m.1 views

BIT-DOTNET-2026-42899 ASP.NET Core Denial of Service Vulnerability

Loop with unreachable exit condition 'infinite loop' in ASP.NET Core allows an unauthorized attacker to deny service over a network...

7.5CVSS5.8AI score0.00036EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/12 4:59 p.m.3 views

CVE-2026-42899

Loop with unreachable exit condition 'infinite loop' in ASP.NET Core allows an unauthorized attacker to deny service over a network...

7.5CVSS5.8AI score0.00036EPSS
Exploits0References2Affected Software3
Microsoft CVE
Microsoft CVE
added 2026/05/12 2:0 p.m.9 views

ASP.NET Core Denial of Service Vulnerability

Loop with unreachable exit condition 'infinite loop' in ASP.NET Core allows an unauthorized attacker to deny service over a network...

7.5CVSS5.8AI score0.00036EPSS
Exploits0
Redos
Redos
added 2026/05/12 12:0 a.m.7 views

ROS-20260512-73-0002

Vulnerability in python-PyPDF2 related to execution of a loop with an unreachable exit condition. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

8.2CVSS5.9AI score0.00018EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.7 views

PT-2026-40264

Name of the Vulnerable Software and Affected Versions ASP.NET Core versions prior to 8.0.27 ASP.NET Core versions prior to 9.0.16 ASP.NET Core versions prior to 10.0.8 Description An unauthorized attacker can cause a denial of service over a network due to a loop with an unreachable exit conditio...

7.8CVSS5.8AI score0.00036EPSS
Exploits0References62
Snyk
Snyk
added 2026/05/08 10:50 p.m.3 views

Improper Check for Unusual or Exceptional Conditions

Overview Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions through improper handling of error conditions in the PatchIndividualApplicationPFDManagement process. An attacker can cause the application to panic and return a 500 Internal Server...

8.7CVSS5.8AI score0.00059EPSS
Exploits1References3
Redos
Redos
added 2026/05/07 12:0 a.m.3 views

ROS-20260507-73-0014

Vulnerability in libarchive related to execution of a loop with an unreachable exit condition. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

7.5CVSS5.9AI score0.00037EPSS
Exploits0
Redos
Redos
added 2026/05/06 12:0 a.m.4 views

ROS-20260506-73-0008

Vulnerability in binutils related to execution of a loop with an unreachable exit condition. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

6.2CVSS5.9AI score0.00023EPSS
Exploits1
Redos
Redos
added 2026/05/06 12:0 a.m.4 views

ROS-20260506-73-0007

Vulnerability in binutils related to execution of a loop with an unreachable exit condition. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

6.2CVSS5.9AI score0.00025EPSS
Exploits1
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.1 views

Astra Linux - уязвимость в libcommons-compress-java

There is a vulnerability related to the “Unreachable Exit Condition” „Infinite Loop“ in Apache Commons Compress. This issue affects Apache Commons Compress versions from 1.3 to 1.25.0. Users are recommended to upgrade to version 1.26.0, which fixes this issue...

8.1CVSS6.7AI score0.00019EPSS
Exploits0References2
CVE
CVE
added 2026/04/30 5:4 a.m.7 views

CVE-2026-7375

Wireshark contains a vulnerability in the UDS protocol dissector (loop in the UDS dissector causing DoS). Affected versions are Wireshark 4.6.0–4.6.4 and 4.4.0–4.4.14. Root cause is an infinite loop due to an unreachable exit condition. Publicly documented impact is denial of service (unresponsiv...

7.5CVSS5.2AI score0.00022EPSS
Exploits1References2Affected Software1
RedHat Linux
RedHat Linux
added 2026/04/29 12:44 p.m.2 views

ovn: ovn: Heap Over-Read in ICMP Error Response Generation - security issue

When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header's self-declared total length iptotlen for IPv4, ip6plen for IPv6 without validating it against the actual packet buffer size...

6.5CVSS5.5AI score0.0004EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/24 12:25 p.m.0 views

CVE-2026-5265

When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header's self-declared total length iptotlen for IPv4, ip6plen for IPv6 without validating it against the actual packet buffer size...

6.5CVSS5.6AI score0.0004EPSS
Exploits0References12
Rows per page
Query Builder