Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5,245

Export CSV
CVE-2023-31621

virtuoso-opensource: DoS in kc_var_col component

An issue in the kc_var_col component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Openlinksw
Products
Virtuoso
CVE-2023-31620

virtuoso-opensource: DoS in dv_compare

An issue in the dv_compare component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Openlinksw
Products
Virtuoso
CVE-2023-31622

virtuoso-opensource: DoS in sqlc_make_policy_trig component

An issue in the sqlc_make_policy_trig component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Openlinksw
Products
Virtuoso
CVE-2023-31625

virtuoso-opensource: DoS in psiginfo component

An issue in the psiginfo component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Openlinksw
Products
Virtuoso
CVE-2023-31624

virtuoso-opensource: DoS in sinv_check_exp component

An issue in the sinv_check_exp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Openlinksw
Products
Virtuoso
CVE-2023-31623

virtuoso-opensource: DoS in mp_box_copy

An issue in the mp_box_copy component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Openlinksw
Products
Virtuoso
CVE-2023-31631

virtuoso-opensource: DoS in sqlo_preds_contradiction component

An issue in the sqlo_preds_contradiction component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Openlinksw
Products
Virtuoso
CVE-2023-31630

virtuoso-opensource: DoS in sqlo_query_spec component

An issue in the sqlo_query_spec component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Openlinksw
Products
Virtuoso
CVE-2023-31629

virtuoso-opensource: DoS in sqlo_union_scopecomponent

An issue in the sqlo_union_scope component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Openlinksw
Products
Virtuoso
CVE-2023-31628

virtuoso-opensource: DoS in stricmp component

An issue in the stricmp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Openlinksw
Products
Virtuoso
CVE-2023-31627

virtuoso-opensource: DoS in strhash component

An issue in the strhash component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Openlinksw
Products
Virtuoso
CVE-2023-31626

virtuoso-opensource: DoS in gpf_notice component

An issue in the gpf_notice component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Openlinksw
Products
Virtuoso
CVE-2023-31616

virtuoso-opensource: DoS in bif_mod component

An issue in the bif_mod component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Openlinksw
Products
Virtuoso
CVE-2023-26044

ReactPHP's HTTP server continues parsing unused multipart parts after reaching limits

react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. Previous versions of ReactPHP's HTTP server component contain a potential DoS vulnerability that can cause high CPU load when processing large HTTP request bodies. This vulnerability has little to no impact on the default configuration, but can be exploited when explicitly using the RequestBodyBufferMiddleware with very large settings. This might lead to consuming large amounts of CPU time for processing requests and significantly delay or slow down the processing of legitimate user requests. This issue has been addressed in release 1.9.0. Users are advised to upgrade. Users unable to upgrade may keep the request body limited using RequestBodyBufferMiddleware with a sensible value which should mitigate the issue. An infrastructure or DevOps workaround could be to place a reverse proxy in front of the ReactPHP HTTP server to filter out any excessive HTTP request bodies.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Reactphp
Products
Http
CVE-2023-31608

virtuoso-opensource: DoS in artm_div_int

An issue in the artm_div_int component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Openlinksw
Products
Virtuoso
CVE-2023-31607

virtuoso-opensource: DoS in __libc_malloc component

An issue in the __libc_malloc component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Openlinksw
Products
Virtuoso
CVE-2023-31613

virtuoso-opensource: DoS in __nss_database_lookup component

An issue in the __nss_database_lookup component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Openlinksw
Products
Virtuoso
CVE-2023-31612

virtuoso-opensource: DoS in dfe_qexp_list component

An issue in the dfe_qexp_list component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Openlinksw
Products
Virtuoso
CVE-2023-31611

virtuoso-opensource: DoS in __libc_longjmp component

An issue in the __libc_longjmp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Openlinksw
Products
Virtuoso
CVE-2023-31610

virtuoso-opensource: DoS in _IO_default_xsputn component

An issue in the _IO_default_xsputn component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Openlinksw
Products
Virtuoso