Search Vulnerabilities

CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

Twig: Sandbox resource exhaustion via unbounded `for` / `range()`

UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`

Soup Sieve: Memory Exhaustion via Large Comma-Separated Selector Lists in soupsieve

Soup Sieve: Regular Expression Denial of Service (ReDoS) in soupsieve Selector Parser

Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption

Symfony: JsonPath Evaluates Attacker-Controlled Regular Expressions in match()/search() Without Limits — ReDoS

Windows DHCP Server Denial of Service Vulnerability

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

Azure Active Directory Denial of Service Vulnerability

pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs

pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service

pyasn1: Uncontrolled resource consumption when converting decoded REAL values

Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()

For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak

HedgeDoc: Denial-of-service via YAML alias expansion in note frontmatter

Host-triggerable control-endpoint wedge (DoS) in Nuvoton NuMaker HSUSBD UDC driver

NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/fs_fsize superblock fields