{ "id": "CVE-2010-1677", "published": "2011-01-03 20:00:03", "last_modified": "2026-06-16 23:19:06", "cvss_score": "5.0", "cvss_severity": "MEDIUM", "cvss_version": "2.0", "cvss_vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "cwe": "CWE-399", "description": "MHonArc 2.6.16 allows remote attackers to cause a denial of service (CPU consumption) via start tags that are placed within other start tags, as demonstrated by a dy>dy>dy>dy> sequence, a different vulnerability than CVE-2010-4524.", "epss_score": "0.08838", "epss_percentile": "0.95029", "kev": 0, "kev_due": null, "has_exploit": 1, "updated_at": "2026-09-28 18:17:09", "priority": { "rank": 2, "label": "Patch early", "why": "A public exploit exists." }, "products": [ { "vendor": "mhonarc", "product": "mhonarc" } ], "kev_detail": null, "exploits": [ { "source": "exploit-db", "ref_id": "35478", "title": "MHonArc 2.6.16 - Tag Nesting Remote Denial of Service", "date": "2010-12-21", "url": "https://www.exploit-db.com/exploits/35478" } ], "refs_list": [ "http://lists.mandriva.com/security-announce/2011-01/msg00004.php", "http://savannah.nongnu.org/bugs/?32014", "http://secunia.com/advisories/42694", "http://www.mail-archive.com/mhonarc-dev%40mhonarc.org/msg01297.html", "http://www.vupen.com/english/advisories/2010/3344", "http://www.vupen.com/english/advisories/2011/0067", "https://exchange.xforce.ibmcloud.com/vulnerabilities/64656", "http://lists.mandriva.com/security-announce/2011-01/msg00004.php", "http://savannah.nongnu.org/bugs/?32014", "http://secunia.com/advisories/42694", "http://www.mail-archive.com/mhonarc-dev%40mhonarc.org/msg01297.html", "http://www.vupen.com/english/advisories/2010/3344", "http://www.vupen.com/english/advisories/2011/0067", "https://exchange.xforce.ibmcloud.com/vulnerabilities/64656" ] }