CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-11612 – 7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability
https://notcve.org/view.php?id=CVE-2024-11612
7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip. ... An attacker can leverage this vulnerability to create a denial-of-service condition on the system. ... This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip. ... An attacker can leverage this vulnerability to create a denial-of-service condition on the system. • https://www.zerodayinitiative.com/advisories/ZDI-24-1606 • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •
CVSS: -EPSS: 0%CPEs: -EXPL: 0CVE-2024-53432
https://notcve.org/view.php?id=CVE-2024-53432
This issue could potentially be exploited to cause a denial-of-service (DoS) attack when processing untrusted PLY files. • https://github.com/PointCloudLibrary/pcl/issues/6162 •
CVSS: 8.2EPSS: 0%CPEs: 1EXPL: 0CVE-2024-52581 – Litestar allows unbounded resource consumption (DoS vulnerability)
https://notcve.org/view.php?id=CVE-2024-52581
Prior to version 2.13.0, the multipart form parser shipped with litestar expects the entire request body as a single byte string and there is no default limit for the total size of the request body. ... The multipart form parser in affected versions is vulnerable to this type of attack by design. ... This may be a regression, as a variation of this issue was already reported in CVE-2023-25578. Limiting the part number is not sufficient to prevent out-of-memory errors on the server. • https://github.com/litestar-org/litestar/blob/main/litestar/_multipart.py#L97 https://github.com/litestar-org/litestar/commit/53c1473b5ff7502816a9a339ffc90731bb0c2138 https://github.com/litestar-org/litestar/security/advisories/GHSA-gjcc-jvgw-wvwj https://github.com/litestar-org/litestar/security/advisories/GHSA-p24m-863f-fm6q) https://github.com/litestar-org/litestar/security/advisories/GHSA-p24m-863f-fm6q • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0CVE-2018-9487
https://notcve.org/view.php?id=CVE-2018-9487
In setVpnForcedLocked of Vpn.java, there is a possible blocking of internet traffic through vpn due to a bad uid check. This could lead to local denial of service with no additional execution privileges needed. • https://source.android.com/security/bulletin/2018-09-01 •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-52796 – Password Pusher's rate limiter can be bypassed by forging proxy headers
https://notcve.org/view.php?id=CVE-2024-52796
In versions prior to v1.49.0, the rate limiter could be bypassed by forging proxy headers allowing bad actors to send unlimited traffic to the site potentially causing a denial of service. • https://docs.pwpush.com/docs/proxies/#trusted-proxies https://github.com/pglombardo/PasswordPusher/releases/tag/v1.49.0 https://github.com/pglombardo/PasswordPusher/security/advisories/GHSA-ffp2-8p2h-4m5j • CWE-770: Allocation of Resources Without Limits or Throttling •