Lucene search
K

15 matches found

CVE
CVE
added 2026/04/21 8:35 p.m.5 views

CVE-2026-35231

Vulnerability in the Oracle Financial Services Transaction Filtering product (UI) affecting version 8.1.2.8.0 . An unauthenticated attacker with network access via HTTP can compromise the system, resulting in unauthorized access to data. CVSS 3.1 base score 7.5 (Confidentiality impact: High). Exp...

7.5CVSS5.7AI score0.00054EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/04/21 8:35 p.m.29 views

CVE-2026-35231

...

7.5CVSS0.00054EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2024-35231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rack-contrib provides contributed rack middleware and utilities for Rack, a Ruby web server interface. Versions of rack-contrib prior to 2.5.0 are vulnerable to...

8.6CVSS7.7AI score0.00131EPSS
Exploits0References2
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-35231 Malicious code in test-mlw2-drive-parer (npm)

The package test-mlw2-drive-parer was found to contain malicious code...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 3:31 p.m.7 views

CVE-2020-35231

The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was affected by an authentication issue that allows an attacker to bypass access controls and obtain full control of the device...

8.8CVSS7.3AI score0.00098EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/02/04 10:13 p.m.3 views

CVE-2024-35231

rack-contrib provides contributed rack middleware and utilities for Rack, a Ruby web server interface. Versions of rack-contrib prior to 2.5.0 are vulnerable to denial of service due to the fact that the user controlled data profilerruns was not constrained to any limitation. This would lead to...

8.6CVSS6.7AI score0.00131EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/27 4:40 p.m.13 views

CVE-2024-35231 rack-contrib vulnerable to Denial of Service due to the unconstrained value of the incoming "profiler_runs" parameter

rack-contrib provides contributed rack middleware and utilities for Rack, a Ruby web server interface. Versions of rack-contrib prior to 2.5.0 are vulnerable to denial of service due to the fact that the user controlled data profilerruns was not constrained to any limitation. This would lead to...

8.6CVSS8.4AI score0.00131EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/05/27 4:40 p.m.7 views

CVE-2024-35231 rack-contrib vulnerable to Denial of Service due to the unconstrained value of the incoming "profiler_runs" parameter

rack-contrib provides contributed rack middleware and utilities for Rack, a Ruby web server interface. Versions of rack-contrib prior to 2.5.0 are vulnerable to denial of service due to the fact that the user controlled data profilerruns was not constrained to any limitation. This would lead to...

8.6CVSS6.7AI score0.00131EPSS
Exploits0References2
OSV
OSV
added 2024/05/27 4:40 p.m.12 views

CVE-2024-35231 rack-contrib vulnerable to Denial of Service due to the unconstrained value of the incoming "profiler_runs" parameter

rack-contrib provides contributed rack middleware and utilities for Rack, a Ruby web server interface. Versions of rack-contrib prior to 2.5.0 are vulnerable to denial of service due to the fact that the user controlled data profilerruns was not constrained to any limitation. This would lead to...

8.6CVSS8.3AI score0.00131EPSS
Exploits0References4
Circl
Circl
added 2024/05/24 11:3 p.m.2 views

CVE-2024-35231

creationtimestamp| type| source ---|---|--- 2024-05-24 23:03:00+00:00| published-proof-of-concept| https://github.com/rack/rack-contrib/security/advisories/GHSA-8c8q-2xw3-j869...

8.6CVSS7.3AI score0.00131EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/10/25 1:0 p.m.16 views

CVE-2021-35231 Unquoted Path (SMB Login) Vulnerability

As a result of an unquoted service path vulnerability present in the Kiwi Syslog Server Installation Wizard, a local attacker could gain escalated privileges by inserting an executable into the path of the affected service or uninstall entry. Example vulnerable path:...

6.7CVSS7.4AI score0.0037EPSS
Exploits0References2
Circl
Circl
added 2021/03/10 10:53 p.m.3 views

CVE-2020-35231

creationtimestamp| type| source ---|---|--- 2021-03-10 22:53:17+00:00| seen| https://t.me/cibsecurity/24736 2024-10-09 19:00:25+00:00| seen| https://t.me/CyberSecurityTechnologies/2861...

8.8CVSS8.1AI score0.00098EPSS
Exploits0References2
NVD
NVD
added 2021/03/10 7:15 p.m.12 views

CVE-2020-35231

The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was affected by an authentication issue that allows an attacker to bypass access controls and obtain full control of the device...

8.8CVSS0.00098EPSS
Exploits0References1
OSV
OSV
added 2021/03/10 7:15 p.m.3 views

CVE-2020-35231

The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was affected by an authentication issue that allows an attacker to bypass access controls and obtain full control of the device...

8.8CVSS5.8AI score0.00098EPSS
Exploits0References1
CVE
CVE
added 2021/03/10 6:14 p.m.52 views

CVE-2020-35231

The CVE-2020-35231 entry concerns the NETGEAR JGS516PE/GS116Ev2 NSDP protocol implementation (v2.6.0.43) with an authentication bypass that lets a remote attacker bypass access controls and obtain full device control. Multiple sources (NVD, Red Hat, CNVD, CNVD-derived entries) confirm an authenti...

8.8CVSS8.8AI score0.00098EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder