Lucene search
+L

73 matches found

OSV
OSV
added 2012/12/28 11:48 a.m.5 views

DEBIAN-CVE-2012-4528

The modsecurity2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data to a PHP application, via a multipart request in which an invalid part precedes the crafted data...

5CVSS6.8AI score0.12507EPSS
SaveExploits2References1
OSV
OSV
added 2012/12/28 11:48 a.m.7 views

UBUNTU-CVE-2012-4528

The modsecurity2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data to a PHP application, via a multipart request in which an invalid part precedes the crafted data...

5CVSS6AI score0.12507EPSS
SaveExploits2References4
CVE
CVE
added 2012/12/28 11:00 a.m.79 views

CVE-2012-4528

CVE-2012-4528 applies to the mod_security2 module for Apache HTTP Server, before version 2.7.0. The issue arises in multipart request handling where an invalid part precedes crafted data, allowing remote attackers to bypass rules and deliver arbitrary POST data to a PHP application. Impact is a r...

5CVSS6.6AI score0.12507EPSS
SaveExploits2References10Affected Software1
OpenVAS
OpenVAS
added 2012/12/26 12:00 a.m.38 views

Mandriva Update for apache-mod_security MDVSA-2012:182 (apache-mod_security)

Check for the Version of apache-modsecurity OpenVAS Vulnerability Test Mandriva Update for apache-modsecurity MDVSA-2012:182 apache-modsecurity Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

5CVSS0.1AI score0.12507EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
added 2012/12/24 12:00 a.m.45 views

Mandriva Linux Security Advisory : apache-mod_security (MDVSA-2012:182)

Multiple vulnerabilities has been discovered and corrected in apache-modsecurity : ModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the beginning of a request parameter value in the Content-Disposition field of a request with a multipart/form-data...

5CVSS5.3AI score0.12507EPSS
SaveExploits4References2
OpenVAS
OpenVAS
added 2012/12/04 12:00 a.m.25 views

Fedora Update for mod_security_crs FEDORA-2012-18315

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5CVSS6.5AI score0.12507EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2012/12/04 12:00 a.m.40 views

Fedora Update for mod_security_crs FEDORA-2012-18315

Check for the Version of modsecuritycrs OpenVAS Vulnerability Test Fedora Update for modsecuritycrs FEDORA-2012-18315 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

5CVSS6.4AI score0.12507EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2012/12/04 12:00 a.m.35 views

Fedora Update for mod_security FEDORA-2012-18315

Check for the Version of modsecurity OpenVAS Vulnerability Test Fedora Update for modsecurity FEDORA-2012-18315 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

5CVSS6.4AI score0.12507EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2012/12/03 12:00 a.m.28 views

Fedora 17 : mod_security-2.7.1-3.fc17 / mod_security_crs-2.2.6-3.fc17 (2012-18315)

Update to 2.7.1 - Update Core rules set to 2.2.6 - Fix build against libxml2 = 2.9 upstreamed - Add some missing directives RHBZ 569360 - Fix multipart/invalid part ruleset bypass issue CVE-2012-4528 RHBZ 867424, 867773, 867774 Note that Tenable Network Security has extracted the preceding...

5CVSS5.4AI score0.12507EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
added 2012/11/26 12:00 a.m.36 views

Fedora 18 : mod_security-2.7.1-3.fc18 / mod_security_crs-2.2.6-3.fc18 (2012-18278)

Update to 2.7.1 - Update Core rules set to 2.2.6 - Fix build against libxml2 = 2.9 upstreamed - Add some missing directives RHBZ 569360 - Fix multipart/invalid part ruleset bypass issue CVE-2012-4528 RHBZ 867424, 867773, 867774 Note that Tenable Network Security has extracted the preceding...

5CVSS5.4AI score0.12507EPSS
SaveExploits2References4
Circl
Circl
added 2012/10/17 12:00 a.m.10 views

CVE-2012-4528

creationtimestamp| type| source ---|---|--- 2012-10-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37949...

5CVSS5.7AI score0.12507EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2012/04/02 12:00 a.m.17 views

Fedora Update for unbound FEDORA-2011-17282

Check for the Version of unbound OpenVAS Vulnerability Test Fedora Update for unbound FEDORA-2011-17282 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

7.8CVSS0.2AI score0.02985EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2012/02/13 12:00 a.m.21 views

FreeBSD Ports: unbound

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

5CVSS6.3AI score0.02838EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2012/02/11 12:00 a.m.22 views

Debian Security Advisory DSA 2370-1 (unbound)

The remote host is missing an update to unbound announced via advisory DSA 2370-1. OpenVAS Vulnerability Test $Id: deb23701.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2370-1 unbound Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

7.8CVSS6.4AI score0.02985EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2012/01/17 12:00 a.m.20 views

Unbound < 1.4.14 / 1.4.13p2 Multiple DoS

According to its self-reported version number, the remote Unbound DNS resolver is affected by multiple denial of service vulnerabilities : - A denial of service vulnerability exists due to an attempt to free unallocated memory during the processing of duplicate CNAME records in a signed zone. An...

7.8CVSS5.6AI score0.02985EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2012/01/12 12:00 a.m.22 views

Debian DSA-2370-1 : unbound - several vulnerabilities

It was discovered that Unbound, a recursive DNS resolver, would crash when processing certain malformed DNS responses from authoritative DNS servers, leading to denial of service. - CVE-2011-4528 Unbound attempts to free unallocated memory during processing of duplicate CNAME records in a signed...

7.8CVSS5.3AI score0.02985EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2012/01/09 12:00 a.m.23 views

Fedora Update for unbound FEDORA-2011-17337

Check for the Version of unbound OpenVAS Vulnerability Test Fedora Update for unbound FEDORA-2011-17337 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

7.8CVSS0.2AI score0.07085EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2012/01/03 12:00 a.m.23 views

Fedora 16 : unbound-1.4.14-1.fc16 (2011-17282)

Security update for CVE-2011-4528 / VU209659 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

7.8CVSS5.3AI score0.02985EPSS
SaveExploits0References4
securityvulns
securityvulns
added 2011/12/26 12:00 a.m.74 views

[SECURITY] [DSA 2370-1] unbound security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2370-1 [email protected] http://www.debian.org/security/ Florian Weimer December 22, 2011 http://www.debian.org/security/faq -...

7.8CVSS1.6AI score0.02985EPSS
SaveExploits0
Debian
Debian
added 2011/12/22 6:54 p.m.71 views

[SECURITY] [DSA 2370-1] unbound security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2370-1 [email protected] http://www.debian.org/security/ Florian Weimer December 22, 2011 http://www.debian.org/security/faq -...

7.8CVSS6.2AI score0.02985EPSS
SaveExploits0
Rows per page
Query Builder