Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

denial of service vulnerabilities and exploits

(subscribe to this query)

6.5
CVSSv3
CVE-2017-10183
Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Point of Sale). Supported versions that are affected are 6.0.x, 6.5.x, 7.0.x, 7.1.x, 15.0.x and 16.0.0. Difficult to exploit vulnerability allows unauthenticated...
Oracle Retail Xstore Point Of Service 6.5.10Oracle Retail Xstore Point Of Service 6.5.11Oracle Retail Xstore Point Of Service 7.0Oracle Retail Xstore Point Of Service 7.0.1Oracle Retail Xstore Point Of Service 7.0.6Oracle Retail Xstore Point Of Service 7.1Oracle Retail Xstore Point Of Service 7.1.1Oracle Retail Xstore Point Of Service 7.1.2Oracle Retail Xstore Point Of Service 6.0.10Oracle Retail Xstore Point Of Service 6.5.4Oracle Retail Xstore Point Of Service 7.0.2Oracle Retail Xstore Point Of Service 7.0.4Oracle Retail Xstore Point Of Service 7.1.4Oracle Retail Xstore Point Of Service 7.1.6Oracle Retail Xstore Point Of Service 15.0.1Oracle Retail Xstore Point Of Service 16.0.0Oracle Retail Xstore Point Of Service 6.0.11Oracle Retail Xstore Point Of Service 7.0.3Oracle Retail Xstore Point Of Service 7.0.5Oracle Retail Xstore Point Of Service 7.1.3Oracle Retail Xstore Point Of Service 7.1.5Oracle Retail Xstore Point Of Service 15.0
7.6
CVSSv3
CVE-2018-2840
Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Xstore Office). Supported versions that are affected are 6.5.11, 7.0.6, 7.1.6, 15.0.1 and 16.0.2. Easily exploitable vulnerability allows unauthenticated attacker...
Oracle Retail Xstore Point Of Service 16.0.2Oracle Retail Xstore Point Of Service 6.5.11Oracle Retail Xstore Point Of Service 7.0.6Oracle Retail Xstore Point Of Service 7.1.6Oracle Retail Xstore Point Of Service 15.0.1
6.5
CVSSv3
CVE-2017-10427
Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Point of Sale). Supported versions that are affected are 6.0.11, 6.5.11, 7.0.6, 7.1.6 and 15.0.1. Difficult to exploit vulnerability allows unauthenticated attacker...
Oracle Retail Xstore Point Of Service 6.0.11Oracle Retail Xstore Point Of Service 6.5.11Oracle Retail Xstore Point Of Service 7.1.6Oracle Retail Xstore Point Of Service 15.0.1Oracle Retail Xstore Point Of Service 7.0.6
7.3
CVSSv3
CVE-2019-2558
Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications (subcomponent: Infrastructure). Supported versions that are affected are 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP...
Oracle Retail Point-of-service 14.1Oracle Retail Point-of-service 13.4Oracle Retail Point-of-service 14.0
7.5
CVSSv3
CVE-2020-8277
A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1 by getting the application to resolve a DNS record with a larger number of responses. This...
Nodejs Node.jsFedoraproject Fedora 32Fedoraproject Fedora 33Oracle Graalvm 19.3.4Oracle Graalvm 20.3.0Oracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2Oracle Jd Edwards Enterpriseone ToolsOracle Mysql ClusterOracle Blockchain PlatformC-ares Project C-ares
7.5
CVSSv3
CVE-2021-43859
XStream is an open source java library to serialize objects to XML and back again. Versions prior to 1.4.19 may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service...
Xstream Project XstreamFedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Oracle Flexcube Private Banking 12.1.0Oracle Commerce Guided Search 11.3.2Oracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2Oracle Retail Xstore Point Of Service 20.0.1Oracle Communications Cloud Native Core Automated Test Suite 1.9.0Oracle Communications Policy Management 12.6.0.0.0Oracle Communications Diameter Intelligence HubOracle Communications Brm - Elastic Charging Engine 12.0.0.5.0Oracle Communications Brm - Elastic Charging Engine
7.5
CVSSv3
CVE-2019-0190
A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loop leading to a denial of service. This bug can be only triggered with Apache HTTP Server version 2.4.37 when using...
Apache Http Server 2.4.37Oracle Enterprise Manager Ops Center 12.3.3Oracle Hospitality Guest Access 4.2.0Oracle Hospitality Guest Access 4.2.1Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Retail Xstore Point Of Service 7.0Oracle Retail Xstore Point Of Service 7.1
7.5
CVSSv3
CVE-2019-12402
The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by...
Apache Commons CompressFedoraproject Fedora 30Fedoraproject Fedora 31Oracle Flexcube Investor Servicing 12.3.0Oracle Flexcube Investor Servicing 12.1.0Oracle Retail Xstore Point Of Service 15.0Oracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Retail Integration Bus 15.0Oracle Webcenter Portal 12.2.1.3.0Oracle Flexcube Investor Servicing 12.4.0Oracle Peoplesoft Enterprise Pt Peopletools 8.56Oracle Retail Xstore Point Of Service 16.0Oracle Banking PaymentsOracle Banking Platform 2.6.2Oracle Banking Platform 2.7.0Oracle Banking Platform 2.8.0Oracle Banking Platform 2.9.0Oracle Communications Ip Service Activator 7.3.0Oracle Communications Ip Service Activator 7.4.0Oracle Communications Session Route ManagerOracle Customer Management And Segmentation Foundation 18.0Oracle Flexcube Investor Servicing 14.0.0Oracle Flexcube Investor Servicing 14.1.0Oracle Hyperion Infrastructure Technology 11.1.2.4Oracle Jdeveloper 12.2.1.4.0Oracle Primavera GatewayOracle Primavera Gateway 19.12.0Oracle Retail Integration Bus 16.0Oracle Retail Xstore Point Of Service 17.0Oracle Retail Xstore Point Of Service 18.0Oracle Retail Xstore Point Of Service 19.0Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Element ManagerOracle Communications Session Report ManagerOracle Essbase 21.2Oracle Peoplesoft Enterprise Pt Peopletools 8.57Oracle Peoplesoft Enterprise Pt Peopletools 8.58
NA
CVE-2008-5514
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service...
University Of Washington Imap 2006hUniversity Of Washington Imap 2006gUniversity Of Washington Imap 2006University Of Washington Imap 2004University Of Washington Imap 2004gUniversity Of Washington Imap 2002University Of Washington Imap 2001University Of Washington Imap 2001aUniversity Of Washington Imap 2000University Of Washington Imap 2006jUniversity Of Washington Imap 2006iUniversity Of Washington Imap 2006aUniversity Of Washington Imap 2007University Of Washington Imap 2004eUniversity Of Washington Imap 2004fUniversity Of Washington Imap 2002eUniversity Of Washington Imap 2002fUniversity Of Washington ImapUniversity Of Washington Imap 2007bUniversity Of Washington Imap 2006fUniversity Of Washington Imap 2006eUniversity Of Washington Imap 2006dUniversity Of Washington Imap 2004aUniversity Of Washington Imap 2004bUniversity Of Washington Imap 2002aUniversity Of Washington Imap 2002bUniversity Of Washington Imap 2000aUniversity Of Washington Imap 2000bUniversity Of Washington Imap 2007aUniversity Of Washington Imap 2006kUniversity Of Washington Imap 2006cUniversity Of Washington Imap 2006bUniversity Of Washington Imap 2004cUniversity Of Washington Imap 2004dUniversity Of Washington Imap 2002cUniversity Of Washington Imap 2002dUniversity Of Washington Imap 2000c
NA
CVE-2013-5750
The login form in the FriendsOfSymfony FOSUserBundle bundle before 1.3.3 for Symfony allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation....
Friends Of Symfony Project Fosuserbundle 1.2.4Friends Of Symfony Project Fosuserbundle 1.2.3Friends Of Symfony Project Fosuserbundle 1.2.1Friends Of Symfony Project Fosuserbundle 1.2.0Friends Of Symfony Project Fosuserbundle 1.3.1Friends Of Symfony Project Fosuserbundle 1.2.5Friends Of Symfony Project Fosuserbundle 1.1.0Friends Of Symfony Project FosuserbundleFriends Of Symfony Project Fosuserbundle 1.3.0Friends Of Symfony Project Fosuserbundle 1.0.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
XML injectionCVE-2022-34713log injectionCVE-2022-20384CVE-2022-20382CVE-2022-20251CVE-2022-31656CVE-2021-0975path traversal
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook