Lucene search
+L

50 matches found

NVD
NVD
added 2022/09/05 10:15 a.m.26 views

CVE-2022-38751

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS0.01515EPSS
SaveExploits0References5
Chainguard
Chainguard
added 2022/09/05 10:15 a.m.11 views

CVE-2022-38751 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0...

6.5CVSS6.6AI score0.01515EPSS
SaveExploits0
Wolfi
Wolfi
added 2022/09/05 10:15 a.m.96 views

CVE-2022-38751 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...

6.5CVSS6.7AI score0.01515EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2022/09/05 12:0 a.m.9 views

CVE-2022-38751 DoS in SnakeYAML

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS6.5AI score0.01515EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2022/09/05 12:0 a.m.28 views

CVE-2022-38751 DoS in SnakeYAML

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

6.5CVSS7AI score0.01515EPSS
SaveExploits0References5
CVE
CVE
added 2022/09/05 12:0 a.m.585 views

CVE-2022-38751

CVE-2022-38751 affects SnakeYAML (Java YAML parser). Issue: denial-of-service when parsing untrusted YAML, potentially via stack overflow. Public details in multiple advisories confirm affected packages and urge upgrade. Remediation per sources includes upgrading SnakeYAML to newer releases (e.g....

6.5CVSS7.4AI score0.01515EPSS
SaveExploits0References5Affected Software1
Circl
Circl
added 2021/08/16 6:15 p.m.12 views

CVE-2021-38751

creationtimestamp| type| source ---|---|--- 2021-08-16 18:15:01+00:00| seen| https://t.me/cibsecurity/27385...

4.3CVSS4.7AI score0.02468EPSS
SaveExploits1References1
NVD
NVD
added 2021/08/16 2:15 p.m.21 views

CVE-2021-38751

A HTTP Host header attack exists in ExponentCMS 2.6 and below in /exponentconstants.php. A modified HTTP header can change links on the webpage to an arbitrary value, leading to a possible attack vector for MITM...

4.3CVSS0.02468EPSS
SaveExploits1References1
OSV
OSV
added 2021/08/16 2:15 p.m.12 views

CVE-2021-38751

A HTTP Host header attack exists in ExponentCMS 2.6 and below in /exponentconstants.php. A modified HTTP header can change links on the webpage to an arbitrary value, leading to a possible attack vector for MITM...

4.3CVSS6.9AI score
SaveExploits0References1
CVE
CVE
added 2021/08/16 1:53 p.m.90 views

CVE-2021-38751

CVE-2021-38751 describes a host header injection in ExponentCMS 2.6 and earlier, exploitable via the file /exponent_constants.php. A crafted HTTP Host header can cause links on the page to be rewritten to arbitrary values, creating a potential MITM attack vector. The publicly referenced sources (...

4.3CVSS4.7AI score0.02468EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder