Browse CVEs

MEDIUM 5.5 CVE-2020-24221 An issue was discovered in GetByte function in miniupnp ngiflib version 0.4, allows local attackers to cause a denial of service (DoS) via crafted .g… Ngiflib No fix yet Fix from $1,6002023-08-11 HIGH 7.5 CVE-2023-3748 A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to… Frrouting 8.5+ Fix from $1,9502023-07-24 HIGH 7.5 CVE-2023-34966EPSS 62% An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, t… Fedora 4.16.11 / 4.17.10+ Fix from $1,9502023-07-20 MEDIUM 5.5 CVE-2023-37748 ngiflib commit 5e7292 was discovered to contain an infinite loop via the function DecodeGifImg at ngiflib.c. Ngiflib Patch available Fix from $1,6002023-07-19 MEDIUM 5.5 CVE-2021-33294 In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infini… Elfutils Patch available Fix from $1,6002023-07-18 HIGH 7.5 CVE-2023-38197 An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infinite loops in recursive entity e… Qt 5.15.15 / 6.2.10+ Fix from $1,9502023-07-13 MEDIUM 6.5 CVE-2023-36807 pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In version 2.10.5 an attacker wh… Pypdf Patch available Fix from $1,6002023-06-30 MEDIUM 5.7 CVE-2023-20116 A vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications… Unified Communications Manager Mitigation only Fix from $1,6002023-06-28 MEDIUM 5.5 CVE-2023-36464 pypdf is an open source, pure-python PDF library. In affected versions an attacker may craft a PDF which leads to an infinite loop if `__parse_conten… Pypdf 3.9.0+ Fix from $1,6002023-06-27 HIGH 7.5 CVE-2023-35933 OPenFGA is an open source authorization/permission engine built for developers. OpenFGA versions v1.1.0 and prior are vulnerable to a DoS attack when… Openfga 1.1.1+ Fix from $1,9502023-06-26 MEDIUM 6.5 CVE-2023-33305 A loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS version 7.0.0 through 7.0.10, Forti… Fortiproxy after 7.2.4 Fix from $1,6002023-06-13 MEDIUM 6.5 CVE-2023-2952 XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file Wireshark 3.6.14 / 4.0.6+ Fix from $1,6002023-05-30 HIGH 7.5 CVE-2023-2879 GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file Wireshark 3.6.14 / 4.0.6+ Fix from $1,9502023-05-26 MEDIUM 5.5 CVE-2023-30300 An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop. Webassembly No fix yet Fix from $1,6002023-05-03 MEDIUM 5.5 CVE-2015-10103 A vulnerability, which was classified as problematic, was found in InternalError503 Forget It up to 1.3. This affects an unknown part of the file js/… Forget It 1.4+ Fix from $1,6002023-04-17 HIGH 7.5 CVE-2022-37013 This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Se… Opc Ua C\+\+ Demo Server Mitigation only Fix from $1,9502023-03-29 MEDIUM 5.5 CVE-2023-20996 In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial … Android Patch available Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-20997 In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial … Android Patch available Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-20998 In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial … Android Patch available Fix from $1,6002023-03-24 MEDIUM 5.5 CVE-2023-20999 In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial … Android Patch available Fix from $1,6002023-03-24 HIGH 7.5 CVE-2023-27560 Math/PrimeField.php in phpseclib 3.x before 3.0.19 has an infinite loop with composite primefields. Phpseclib 3.0.19+ Fix from $1,9502023-03-03 HIGH 7.5 CVE-2023-25824 Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS. Versions from 0.9.0 to 0.12.0 (including) did not properly fail blocking read operations… Mod Gnutls 0.12.1+ Fix from $1,9502023-02-23 HIGH 7.5 CVE-2023-25653 node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for web browsers and node.js-based servers. Prior to versio… Node Jose 2.2.0+ Fix from $1,9502023-02-16 HIGH 7.5 CVE-2022-25734 Denial of service in modem due to missing null check while processing IP packets with padding Ar8031 Firmware Mitigation only Fix from $1,9502023-02-12 HIGH 7.5 CVE-2022-46285 A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading … Libxpm 3.5.15+ Fix from $1,9502023-02-07 MEDIUM 6.5 CVE-2023-24808 PDFio is a C library for reading and writing PDF files. In versions prior to 1.1.0 a denial of service (DOS) vulnerability exists in the pdfio parser… Pdfio 1.1.0+ Fix from $1,6002023-02-07 HIGH 7.5 CVE-2022-44617 A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can l… Libxpm 3.5.15+ Fix from $1,9502023-02-06 HIGH 7.5 CVE-2023-23617 OpenMage LTS is an e-commerce platform. Versions prior to 19.4.22 and 20.0.19 contain an infinite loop in malicious code filter in certain conditions… Magento 19.4.22 / 20.0.19+ Fix from $1,9502023-01-28 MEDIUM 5.5 CVE-2021-33642 When a file is processed, an infinite loop occurs in next_inline() of the more_curly() function. Byacc 1.9.20200330 / 2.0.20210808+ Fix from $1,6002023-01-20 HIGH 8.6 CVE-2023-20020 A vulnerability in the Device Management Servlet application of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services … Broadworks Application Delivery Platform Device Management 23.0.1075.ap384245 / 2022.11_1.273+ Fix from $1,9502023-01-20