Lucene search
+L

1504 matches found

OSV
OSV
•added 2024/01/12 10:00 p.m.•20 views

CVE-2022-4962 Apollo Configuration Center users improper authorization

A vulnerability was found in Apollo 2.0.0/2.0.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /users of the component Configuration Center. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been...

4.3CVSS4.7AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/12 12:00 a.m.•9 views

CVE-2022-4962: Improper Authorization

A vulnerability was found in Apollo 2.0.0/2.0.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /users of the component Configuration Center. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been...

4.3CVSS4.9AI score0.00463EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/12 12:00 a.m.•22 views

Apollo Authorization Issues Vulnerabilities

Apollo is a set of PHP scripts by Alex Breen, an individual developer. It is intended to provide a web-based interface for students to upload course assignments. An authorization issue vulnerability exists in Apollo versions 2.0.0 and 2.0.1, which stems from the inclusion of unknown functions in...

4.3CVSS6.9AI score0.00463EPSS
SaveExploits1References3
Openbugbounty
Openbugbounty
•added 2023/12/01 12:24 p.m.•9 views

apollointelligence.net Cross Site Scripting vulnerability OBB-3799520

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
HPE Security Bulletins
HPE Security Bulletins
•added 2023/11/16 12:00 a.m.•20 views

HPESBHF04557 rev.1 - Certain HPE Apollo,XL Servers Using Certain Intel Processors, INTEL-SA-00950, 2023.4 IPU Out-of-Band (OOB) - Intel Processor Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 2000 Gen10 Plus System - Prior to 1.9010-19-2023 HPE Apollo 4200 Gen10 Plus System - Prior to 1.9010-19-2023 HPE...

8.8CVSS6.8AI score0.01728EPSS
SaveExploits0
Openbugbounty
Openbugbounty
•added 2023/10/30 6:01 p.m.•6 views

apollo-haaraesthetik.de Improper Access Control vulnerability OBB-3769269

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.9AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2023/10/19 4:08 p.m.•64 views

Apollo Router vulnerable to Improper Check or Handling of Exceptional Conditions

Impact The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation. Affected versions are subject to a Denial-of-Service DoS type vulnerability which causes the Router to panic and terminate when a multi-part respons...

7.5CVSS6.7AI score0.00726EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2023/10/19 4:08 p.m.•64 views

GHSA-R344-XW3P-2FRJ Apollo Router vulnerable to Improper Check or Handling of Exceptional Conditions

Impact The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation. Affected versions are subject to a Denial-of-Service DoS type vulnerability which causes the Router to panic and terminate when a multi-part respons...

7.5CVSS7.5AI score0.00726EPSS
SaveExploits0References6
NVD
NVD
•added 2023/10/18 10:15 p.m.•51 views

CVE-2023-45812

The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation. Affected versions are subject to a Denial-of-Service DoS type vulnerability which causes the Router to panic and terminate when a multi-part response is...

7.5CVSS7.5AI score0.00726EPSS
SaveExploits0References2
Prion
Prion
•added 2023/10/18 10:15 p.m.•23 views

Design/Logic Flaw

The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation. Affected versions are subject to a Denial-of-Service DoS type vulnerability which causes the Router to panic and terminate when a multi-part response is...

5CVSS7.5AI score0.00726EPSS
SaveExploits0References2Affected Software2
Vulnrichment
Vulnrichment
•added 2023/10/18 9:29 p.m.•16 views

CVE-2023-45812 Improper Check or Handling of Exceptional Conditions in apollo-router

The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation. Affected versions are subject to a Denial-of-Service DoS type vulnerability which causes the Router to panic and terminate when a multi-part response is...

7.5CVSS7.1AI score0.00726EPSS
SaveExploits0References2
CVE
CVE
•added 2023/10/18 9:29 p.m.•73 views

CVE-2023-45812

CVE-2023-45812 affects Apollo Router (Rust). A DoS can occur when handling multi-part responses if the client uses queries with @defer or Subscriptions and the router is configured with a coprocessor level coprocessor.supergraph.response in router.yaml. The vulnerability can cause the router to p...

7.5CVSS7.4AI score0.00726EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/10/18 9:29 p.m.•55 views

CVE-2023-45812 Improper Check or Handling of Exceptional Conditions in apollo-router

The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation. Affected versions are subject to a Denial-of-Service DoS type vulnerability which causes the Router to panic and terminate when a multi-part response is...

7.5CVSS7.7AI score0.00726EPSS
SaveExploits0References2
Mend
Mend
•added 2023/10/18 9:29 p.m.•2 views

CVE-2023-45812

The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation. Affected versions are subject to a Denial-of-Service DoS type vulnerability which causes the Router to panic and terminate when a multi-part response is...

8.7CVSS0.00726EPSS
SaveExploits0References7
OSV
OSV
•added 2023/10/18 9:29 p.m.•28 views

CVE-2023-45812 Improper Check or Handling of Exceptional Conditions in apollo-router

The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation. Affected versions are subject to a Denial-of-Service DoS type vulnerability which causes the Router to panic and terminate when a multi-part response is...

7.5CVSS7.4AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/10/18 12:00 a.m.•4 views

PT-2023-29702

Name of the Vulnerable Software and Affected Versions Apollo Router versions prior to 1.33.0 Description The Apollo Router is subject to a Denial-of-Service DoS type issue that causes it to panic and terminate when a multi-part response is sent. This occurs when users send queries to the router...

7.5CVSS5.8AI score0.00726EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/18 12:00 a.m.•3 views

CVE-2023-45812: Improper Check for Unusual or Exceptional Conditions

The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation. Affected versions are subject to a Denial-of-Service DoS type vulnerability which causes the Router to panic and terminate when a multi-part response is...

7.5CVSS7.1AI score0.00726EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/10/18 12:00 a.m.•15 views

Apollo Router Code Issue Vulnerability

Apollo Router is a configurable, high-performance graphical router written in Rust. A code issue vulnerability exists in Apollo Router. An attacker could use this vulnerability to cause the router to panic and terminate when sending a multi-part response...

7.5CVSS6.9AI score0.00726EPSS
SaveExploits0References4
OSV
OSV
•added 2023/09/27 3:18 p.m.•15 views

CVE-2023-30959

In Apollo change requests, comments added by users could contain a javascript URI link that when rendered will result in an XSS that require user interaction...

5.4CVSS5.8AI score0.00359EPSS
SaveExploits0References1
NVD
NVD
•added 2023/09/27 3:18 p.m.•43 views

CVE-2023-30959

In Apollo change requests, comments added by users could contain a javascript URI link that when rendered will result in an XSS that require user interaction...

5.4CVSS4.5AI score0.00359EPSS
SaveExploits0References1
Rows per page
Query Builder