Vulnerabilities > Uncontrolled Recursion

DATE CVE VULNERABILITY TITLE RISK
2022-09-19 CVE-2022-28201 Uncontrolled Recursion vulnerability in multiple products
An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2.
local
low complexity
mediawiki debian CWE-674
4.4
2022-09-16 CVE-2022-40150 Uncontrolled Recursion vulnerability in multiple products
Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS).
network
low complexity
jettison-project debian CWE-674
7.5
2022-09-15 CVE-2022-38334 Uncontrolled Recursion vulnerability in Xpdfreader Xpdf
XPDF v4.04 and earlier was discovered to contain a stack overflow via the function Catalog::countPageTree() at Catalog.cc.
local
low complexity
xpdfreader CWE-674
5.5
2022-09-14 CVE-2022-3216 Uncontrolled Recursion vulnerability in Nintendo Game BOY Color Firmware
A vulnerability has been found in Nintendo Game Boy Color and classified as problematic.
network
low complexity
nintendo CWE-674
8.8
2022-08-23 CVE-2021-3997 Uncontrolled Recursion vulnerability in multiple products
A flaw was found in systemd.
5.5
2022-08-19 CVE-2022-23460 Uncontrolled Recursion vulnerability in Json++ Project Json++ 1.0.0/1.0.1
Jsonxx or Json++ is a JSON parser, writer and reader written in C++.
network
low complexity
json-project CWE-674
7.5
2022-08-11 CVE-2022-20382 Uncontrolled Recursion vulnerability in Google Android
In (TBD) of (TBD), there is a possible out of bounds write due to kernel stack overflow.
local
low complexity
google CWE-674
6.7
2022-08-10 CVE-2022-1962 Uncontrolled Recursion vulnerability in Golang GO
Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a panic due to stack exhaustion via deeply nested types or declarations.
local
low complexity
golang CWE-674
5.5
2022-08-10 CVE-2022-28131 Uncontrolled Recursion vulnerability in multiple products
Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.
network
low complexity
golang fedoraproject netapp CWE-674
7.5
2022-08-10 CVE-2022-30630 Uncontrolled Recursion vulnerability in Golang GO
Uncontrolled recursion in Glob in io/fs before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path which contains a large number of path separators.
network
low complexity
golang CWE-674
7.5