Lucene search
+L

1137 matches found

SUSE CVE
SUSE CVE
•added 2024/04/23 1:44 a.m.•10 views

SUSE CVE-2024-32650

Rustls is a modern TLS library written in Rust. rustls::ConnectionCommon::completeio could fall into an infinite loop based on network input. When using a blocking rustls server, if a client send a closenotify message immediately after clienthello, the server's completeio will get in an infinite...

7.5CVSS6.8AI score0.00949EPSS
SaveExploits0References10
OSV
OSV
•added 2024/04/19 4:15 p.m.•8 views

DEBIAN-CVE-2024-32650

Rustls is a modern TLS library written in Rust. rustls::ConnectionCommon::completeio could fall into an infinite loop based on network input. When using a blocking rustls server, if a client send a closenotify message immediately after clienthello, the server's completeio will get in an infinite...

7.5CVSS5.3AI score0.00949EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/04/19 12:00 a.m.•11 views

PT-2024-24744

Name of the Vulnerable Software and Affected Versions rustls versions prior to 0.21.11 rustls versions prior to 0.22.4 rustls versions prior to 0.23.5 Description The rustls::ConnectionCommon::complete io function could fall into an infinite loop based on network input. When using a blocking rust...

7.5CVSS7AI score0.00949EPSS
SaveExploits0References86
CNNVD
CNNVD
•added 2024/04/19 12:00 a.m.•18 views

Rustls 安全漏洞

Rustls is a modern TLS library in Rust open-sourced by Rustls. A security vulnerability exists in Rustls versions prior to 0.23.5, 0.22.4, and 0.21.11, which stems from an infinite loop in the server's completeio if a client sends a closenotify message immediately after clienthello when using a...

7.5CVSS6.7AI score0.00949EPSS
SaveExploits0References6
NVD
NVD
•added 2024/04/12 1:15 p.m.•35 views

CVE-2024-31289

Cross-Site Request Forgery CSRF vulnerability in Elementor Hello Elementor.This issue affects Hello Elementor: from n/a through 3.0.0...

4.3CVSS4.6AI score0.002EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/12 12:36 p.m.•124 views

CVE-2024-31289

CVE-2024-31289 pertains to the WordPress Hello Elementor theme (Hello Elementor) and is described as a Cross-Site Request Forgery (CSRF) vulnerability affecting versions up to 3.0.0. The Connected documents do not provide technical details beyond the CSRF classification and affected product/versi...

4.3CVSS8.6AI score0.002EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/12 12:36 p.m.•80 views

CVE-2024-31289 WordPress Hello Elementor theme <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Elementor Hello Elementor.This issue affects Hello Elementor: from n/a through 3.0.0...

4.3CVSS5AI score0.002EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/12 12:36 p.m.•28 views

CVE-2024-31289 WordPress Hello Elementor theme <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Elementor Hello Elementor.This issue affects Hello Elementor: from n/a through 3.0.0...

4.3CVSS8.6AI score0.002EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/04/12 12:00 a.m.•10 views

WordPress Plugin Hello Elementor 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS8.6AI score0.002EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/12 12:00 a.m.•0 views

CVE-2024-31289: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Elementor Hello Elementor.This issue affects Hello Elementor: from n/a through 3.0.0...

4.3CVSS5.8AI score0.002EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
•added 2024/04/09 7:00 a.m.•115 views

April 9, 2024—KB5036894 (OS Build 22000.2899)

None None...

8.8CVSS6.8AI score0.44875EPSS
SaveExploits7
Microsoft KB
Microsoft KB
•added 2024/04/09 7:00 a.m.•340 views

April 9, 2024—KB5036909 (OS Build 20348.2402)

None None...

8.8CVSS6.8AI score0.62576EPSS
SaveExploits7
NVD
NVD
•added 2024/04/05 9:15 p.m.•21 views

CVE-2024-23592

An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to replay fingerprints and bypass Windows Hello authentication...

6.3CVSS6.3AI score0.0025EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/05 8:46 p.m.•38 views

CVE-2024-23592

An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to replay fingerprints and bypass Windows Hello authentication...

6.3CVSS6.5AI score0.0025EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/05 8:46 p.m.•19 views

CVE-2024-23592

An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to replay fingerprints and bypass Windows Hello authentication...

6.3CVSS7AI score0.0025EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/05 8:46 p.m.•98 views

CVE-2024-23592

CVE-2024-23592 describes an authentication bypass in Lenovo devices equipped with Synaptics fingerprint readers, enabling an attacker with physical access to replay fingerprints and bypass Windows Hello authentication. The vulnerability arises in the fingerprint authentication mechanism and could...

6.3CVSS6.8AI score0.0025EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/04/05 10:11 a.m.•13 views

WordPress Hello Elementor theme <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Hello Elementor versions = 3.0.0...

4.3CVSS7AI score0.002EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2024/04/05 12:00 a.m.•12 views

PT-2024-19953 · Synaptics +2 · Synaptics Fingerprint Readers +2

Name of the Vulnerable Software and Affected Versions: Lenovo devices with Synaptics fingerprint readers affected versions not specified Description: An authentication bypass issue was reported in Lenovo devices with Synaptics fingerprint readers. This could allow an attacker with physical access...

6.3CVSS7AI score0.0025EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2024/04/05 12:00 a.m.•25 views

WordPress Hello Elementor Theme <= 3.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Hello Elementor Type Theme Vulnerable versions = 3.0.0 Fixed in 3.0.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31289 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 8b6c120716f6 Credits Dhabaleshwar Das...

4.3CVSS6.7AI score0.002EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/05 12:00 a.m.•3 views

CVE-2024-23592: Improperly Implemented Security Check for Standard

An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to replay fingerprints and bypass Windows Hello authentication...

6.3CVSS5.8AI score0.0025EPSS
SaveExploits0References2
Rows per page
Query Builder