Lucene search
+L

3438 matches found

Code423n4
Code423n4
added 2022/02/02 12:00 a.m.15 views

Unable to withdraw if block.number > 32-bit

Handle gzeon Vulnerability details Impact If block.number 32-bit, updateTotalSupplyCheckPoints would revert. updateTotalSupplyCheckPoints is called from mint and burn, which mean withdraw would also revert. Proof of Concept uint32 blockNumber = safe32block.number, "block number exceeds 32 bits";...

7AI score
SaveExploits0
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.29 views

Mageia: Security Advisory (MGASA-2018-0187)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS7.2AI score0.84172EPSS
SaveExploits4References9
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.10 views

Mageia: Security Advisory (MGASA-2015-0385)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References4
OSV
OSV
added 2022/01/22 11:04 a.m.9 views

OESA-2022-1491 lighttpd security update

Secure, fast, compliant and very flexible web-server which has been optimized for high-performance environments. It has a very low memory footprint compared to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many more...

5.9CVSS7.3AI score0.08969EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/01/06 6:15 a.m.12 views

CVE-2022-22707

In lighttpd 1.4.46 through 1.4.63, the modextforwardForwarded function of the modextforward plugin has a stack-based buffer overflow 4 bytes representing -1, as demonstrated by remote denial of service daemon crash in a non-default configuration. The non-default configuration requires handling of...

5.9CVSS6.6AI score0.08969EPSS
SaveExploits1References3
OSV
OSV
added 2022/01/06 6:15 a.m.8 views

ALPINE-CVE-2022-22707

In lighttpd 1.4.46 through 1.4.63, the modextforwardForwarded function of the modextforward plugin has a stack-based buffer overflow 4 bytes representing -1, as demonstrated by remote denial of service daemon crash in a non-default configuration. The non-default configuration requires handling of...

5.9CVSS7.3AI score0.08969EPSS
SaveExploits1References1
NVD
NVD
added 2022/01/06 6:15 a.m.25 views

CVE-2022-22707

In lighttpd 1.4.46 through 1.4.63, the modextforwardForwarded function of the modextforward plugin has a stack-based buffer overflow 4 bytes representing -1, as demonstrated by remote denial of service daemon crash in a non-default configuration. The non-default configuration requires handling of...

5.9CVSS0.08969EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2022/01/06 6:15 a.m.43 views

CVE-2022-22707

In lighttpd 1.4.46 through 1.4.63, the modextforwardForwarded function of the modextforward plugin has a stack-based buffer overflow 4 bytes representing -1, as demonstrated by remote denial of service daemon crash in a non-default configuration. The non-default configuration requires handling of...

5.9CVSS6.6AI score0.08969EPSS
SaveExploits1References3
Prion
Prion
added 2022/01/06 6:15 a.m.154 views

Stack overflow

In lighttpd 1.4.46 through 1.4.63, the modextforwardForwarded function of the modextforward plugin has a stack-based buffer overflow 4 bytes representing -1, as demonstrated by remote denial of service daemon crash in a non-default configuration. The non-default configuration requires handling of...

4.3CVSS6AI score0.08969EPSS
SaveExploits1References2Affected Software2
OSV
OSV
added 2022/01/06 6:15 a.m.5 views

UBUNTU-CVE-2022-22707

In lighttpd 1.4.46 through 1.4.63, the modextforwardForwarded function of the modextforward plugin has a stack-based buffer overflow 4 bytes representing -1, as demonstrated by remote denial of service daemon crash in a non-default configuration. The non-default configuration requires handling of...

5.9CVSS6.2AI score0.08969EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2022/01/06 5:55 a.m.81 views

CVE-2022-22707

In lighttpd 1.4.46 through 1.4.63, the modextforwardForwarded function of the modextforward plugin has a stack-based buffer overflow 4 bytes representing -1, as demonstrated by remote denial of service daemon crash in a non-default configuration. The non-default configuration requires handling of...

5.9CVSS5.9AI score0.08969EPSS
SaveExploits1
Cvelist
Cvelist
added 2022/01/06 5:55 a.m.47 views

CVE-2022-22707

In lighttpd 1.4.46 through 1.4.63, the modextforwardForwarded function of the modextforward plugin has a stack-based buffer overflow 4 bytes representing -1, as demonstrated by remote denial of service daemon crash in a non-default configuration. The non-default configuration requires handling of...

6.3AI score0.08969EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
added 2022/01/06 5:55 a.m.84 views

CVE-2022-22707

In lighttpd 1.4.46 through 1.4.63, the modextforwardForwarded function of the modextforward plugin has a stack-based buffer overflow 4 bytes representing -1, as demonstrated by remote denial of service daemon crash in a non-default configuration. The non-default configuration requires handling of...

5.9CVSS6.1AI score0.08969EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2022/01/06 12:00 a.m.10 views

PT-2022-15645 · Lighttpd +3 · Lighttpd +3

Name of the Vulnerable Software and Affected Versions: lighttpd versions 1.4.46 through 1.4.63 Description: The mod extforward Forwarded function of the mod extforward plugin in lighttpd has a stack-based buffer overflow, which can be exploited for remote denial of service daemon crash in a...

7.5CVSS7.4AI score0.08969EPSS
SaveExploits5References38
OSV
OSV
added 2022/01/05 3:31 p.m.50 views

GO-2021-0160 Incorrect calculation affecting RSA computations in math/big

Int.Exp Montgomery mishandled carry propagation and produced an incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors. This issue can affect RSA computations in crypto/rsa, which is used by crypto/tls. TLS servers on 32-bit systems could plausibl...

7.5CVSS7.2AI score0.02627EPSS
SaveExploits0References6
Snyk
Snyk
added 2022/01/05 3:31 p.m.7 views

Information Exposure

Overview std/math/big is a Go standard library package std/math/big Affected versions of this package are vulnerable to Information Exposure. Go Vulnerability Report: Int.Exp Montgomery mishandled carry propagation and produced an incorrect output, which makes it easier for attackers to obtain...

8.7CVSS6.4AI score0.02627EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/12/14 12:00 a.m.16 views

Microsoft Windows TCP/IP component 缓冲区错误漏洞

The Microsoft Windows TCP/IP component is a component of Microsoft Corporation USA that provides TCP/IP configuration capabilities for Windows. A buffer error vulnerability exists in the Microsoft Windows TCP/IP component. The following products and editions are affected: Windows 10 Version 2004...

7.8CVSS8AI score0.00901EPSS
SaveExploits0References7
Mageia
Mageia
added 2021/12/08 8:04 p.m.78 views

Updated gmp packages fix security vulnerability

Integer overflow in mpz/inpraw.c and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms...

7.5CVSS4.5AI score0.03453EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2021/12/08 6:17 p.m.30 views

Security Bulletin: IBM® Db2® under very specific conditions, could allow a local user to keep running a procedure that could cause the system to run out of memory.and cause a denial of service. (CVE-2021-29763)

Summary IBM® Db2® under very specific conditions, could allow a local user to keep running a procedure that could cause the system to run out of memory.and cause a denial of service. Vulnerability Details CVEID: CVE-2021-29763 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect...

5.1CVSS5.9AI score0.00254EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
added 2021/12/08 9:55 a.m.32 views

CVE-2021-20047

SonicWall Global VPN client version 4.10.6 32-bit and 64-bit and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code execution in the target system...

8.1AI score0.00851EPSS
SaveExploits0References1
Rows per page
Query Builder