Search Vulnerabilities

Tornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters

pypdf affected by possible infinite loop when reading DCT inline images without EOF marker

Incorrect Handling of incomplete data may prevent mongoS from Accepting New Connections

gSOAP: Vulnerable to specially crafted unencrypted SDC messages

Telerik Document Processing Improper Handling of Memory Resources

Parsson DoS when parsing numbers from untrusted sources

Unconditionally adding an event to the epoll causes excessive CPU consumption

Denial-of-Service in gRPC

Apache Sling Resource Merger: Requests to certain paths managed by the Apache Sling Resource Merger can lead to DoS

OctoRPKI crash when maximum iterations number is reached

Excessive CPU usage in Pomerium

Excessive CPU utilization when closing HTTP/2 streams

Apache Commons Compress 1.6 to 1.20 denial of service vulnerability

A carefully crafted PDF file can trigger an infinite loop while loading the file

A carefully crafted PDF file can trigger an infinite loop while loading the file

Invariant with $elemMatch

C++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers of fields of unknown type

Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type

Java Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type

Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type