Search vulnerabilities

Results 8,920

Export CSV
CVE-2018-19838

In LibSass prior to 3.5.5, functions inside ast.cpp for IMPLEMENT_AST_OPERATORS expansion allow attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, as demonstrated by recursive calls involving clone(), cloneChildren(), and copy().

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Products
CVE-2018-19837

In LibSass prior to 3.5.5, Sass::Eval::operator()(Sass::Binary_Expression*) inside eval.cpp allows attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, because of certain incorrect parsing of '%' as a modulo operator in parser.cpp.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Products
CVE-2018-19282

Rockwell Automation PowerFlex 525 AC Drives 5.001 and earlier allow remote attackers to cause a denial of service by crashing the Common Industrial Protocol (CIP) network stack. The vulnerability allows the attacker to crash the CIP in a way that it does not accept new connections, but keeps the current connections active, which can prevent legitimate users from recovering control.

CVSS 3.0 · 9.8 Critical EPSS 5.6% KEV · Not listed
CVE-2018-19213

nasm: memory leaks in nasm_malloc in nasmlib/malloc.c

Netwide Assembler (NASM) through 2.14rc16 has memory leaks that may lead to DoS, related to nasm_malloc in nasmlib/malloc.c.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2018-19209

nasm: NULL pointer dereference in find_label in asm/labels.c

Netwide Assembler (NASM) 2.14rc15 has a NULL pointer dereference in the function find_label in asm/labels.c that will lead to a DoS attack.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2018-19167

CloakCoin through 2.2.2.0 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2018-19166

peercoin through 0.6.4 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2018-19165

neblio through 1.5.1 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2018-19164

reddcoin through 2.1.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2018-19163

stratisX through 2.0.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2018-19162

Divi through 4.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2018-19161

alqo through 4.1 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2018-19160

Diamond through 3.0.1.2 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2018-19159

lux through 5.2.2 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Products
Lux
CVE-2018-19158

ColossusCoinXT through 1.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.

CVSS 3.1 · 7.5 High EPSS 2.6% KEV · Not listed
Vendors
Products
CVE-2018-19157

Phore through 1.3.3.1 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2018-19156

PIVX through 3.1.03 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2018-19155

navcoin through 4.3.0 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. The attacker sends invalid headers/blocks. The attack requires no stake and can fill the victim's disk and RAM.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2018-19154

HTMLCOIN through 2.12 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. The attacker sends invalid headers/blocks. The attack requires no stake and can fill the victim's disk and RAM.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2018-19153

particl through 0.17 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. The attacker sends invalid headers/blocks. The attack requires no stake and can fill the victim's disk and RAM.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Products