Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.8OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in SignatureReader.parseType() that allows attackers to exhaust the stack via deeply nested ge…Oct 14, 2026
- Medium6.8OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in ClassWriter.replaceAsmInstructions() that allows attackers to cause denial of service throu…Oct 14, 2026
- High8.7NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decode_obj() that allows attackers to cause denial of service by supplying…Aug 22, 2026
- High7.5Unleash is an open-source feature management platform.Aug 21, 2026
- Medium6.2A flaw was found in p11-kit.Jun 29, 2026
- Medium6.5IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a denial-of-service attack due to uncontrolled recursion in the Integrated Language Environment (ILE) compiler.May 27, 2026
- Low2.9uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.Dec 14, 2025
- Medium5.5A flaw was found in systemd.Aug 23, 2022
- Medium5.5libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.Mar 26, 2022
- Medium6.5In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.Feb 18, 2022
- Medium5.5GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c.Jan 14, 2022
- High7.5curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.Dec 14, 2020
- High7.5MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encod…Nov 6, 2020
- High7.5In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).Apr 28, 2020
- Medium5.5alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.Dec 9, 2019
15 records · page 1 of 1
PreviousNext