Lucene search
+L

180 matches found

ATTACKERKB
ATTACKERKB
added 2020/10/12 2:15 p.m.6 views

CVE-2020-9230

WS5800-10 version 10.0.3.25 has a denial of service vulnerability. Due to improper verification of specific message, an attacker may exploit this vulnerability to cause specific function to become abnormal...

6.5CVSS6.5AI score0.0021EPSS
SaveExploits0References2
CVE
CVE
added 2020/10/12 1:25 p.m.49 views

CVE-2020-9230

CVE-2020-9230 affects Huawei WS5800-10 devices running version 10.0.3.25. The vulnerability stems from improper verification of a specific message, which can cause a targeted function to become abnormal and result in denial of service (impact on availability). Reported by multiple sources (includ...

6.5CVSS6.3AI score0.0021EPSS
SaveExploits0References1Affected Software1
Huawei
Huawei
added 2020/09/30 12:00 a.m.59 views

Security Advisory - Denial of Service Vulnerability in Some Huawei Home Routers

There is a denial of service vulnerability in some Huawei home routers. Due to improper verification of specific message, an attacker may exploit this vulnerability to cause specific function to become abnormal. Vulnerability ID: HWPSIRT-2020-00069 This vulnerability has been assigned a Common...

6.5CVSS6.3AI score0.0021EPSS
SaveExploits0Affected Software6
CVE
CVE
added 2019/07/18 2:44 p.m.56 views

CVE-2019-9230

CVE-2019-9230 affects AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware F7.20A–F7.20A.253. A cross-site scripting (XSS) flaw in the management web interface’s search function allows remote attackers to inject arbitrary web script or HTML via the keyword parame...

6.1CVSS6AI score0.0103EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2018/12/10 12:29 a.m.23 views

CVE-2018-19991

VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler for geturiargs or getpostargs to block the API misuse described in CVE-2018-9230...

9.8CVSS9.5AI score0.02326EPSS
SaveExploits1References1
OSV
OSV
added 2018/12/10 12:29 a.m.18 views

CVE-2018-19991

VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler for geturiargs or getpostargs to block the API misuse described in CVE-2018-9230...

9.8CVSS7AI score
SaveExploits0References1
Prion
Prion
added 2018/12/10 12:29 a.m.21 views

Design/Logic Flaw

VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler for geturiargs or getpostargs to block the API misuse described in CVE-2018-9230...

7.5CVSS9.4AI score0.1348EPSS
SaveExploits2References1Affected Software1
OSV
OSV
added 2018/04/02 6:29 p.m.17 views

CVE-2018-9230

In OpenResty through 1.13.6.1, URI parameters are obtained using the ngx.req.geturiargs and ngx.req.getpostargs functions that ignore parameters beyond the hundredth one, which might allow remote attackers to bypass intended access restrictions or interfere with certain Web Application Firewall...

9.8CVSS9.4AI score
SaveExploits0References2
CVE
CVE
added 2018/04/02 6:00 p.m.94 views

CVE-2018-9230

OpenResty

9.8CVSS9.4AI score0.1348EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2017/09/12 10:29 p.m.20 views

CVE-2015-9230

In the admin/db-backup-security/db-backup-security.php page in the BulletProof Security plugin before .52.5 for WordPress, XSS is possible for remote authenticated administrators via the DBTablePrefix parameter...

4.8CVSS4.8AI score0.01576EPSS
SaveExploits1References7
CVE
CVE
added 2017/09/12 10:00 p.m.56 views

CVE-2015-9230

The CVE-2015-9230 entry relates to the BulletProof Security WordPress plugin. Affected component: admin/db-backup-security/db-backup-security.php. Root cause: cross-site scripting (XSS) vulnerability via the DBTablePrefix parameter in plugin versions prior to 0.52.5, exploitable by remote authent...

4.8CVSS4.7AI score0.01576EPSS
SaveExploits1References7Affected Software1
NVD
NVD
added 2017/05/24 4:29 p.m.22 views

CVE-2017-9230

The Bitcoin Proof-of-Work algorithm does not consider a certain attack methodology related to 80-byte block headers with a variety of initial 64-byte chunks followed by the same 16-byte chunk, multiple candidate root values ending with the same 4 bytes, and calculations involving sqrt numbers. Th...

7.5CVSS7.6AI score0.03251EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2017/05/24 4:00 p.m.22 views

CVE-2017-9230

The Bitcoin Proof-of-Work algorithm does not consider a certain attack methodology related to 80-byte block headers with a variety of initial 64-byte chunks followed by the same 16-byte chunk, multiple candidate root values ending with the same 4 bytes, and calculations involving sqrt numbers. Th...

7.1AI score0.03251EPSS
SaveExploits0References7
CVE
CVE
added 2017/05/24 4:00 p.m.52 views

CVE-2017-9230

CVE-2017-9230 is tied to a Bitcoin Proof-of-Work methodology issue: 80-byte block headers with varying 64-byte chunks and identical 16-byte tail, multiple candidate roots ending with the same 4 bytes, and sqrt-number calculations that can affect difficulty and independence of PoW executions. Conn...

7.5CVSS7.5AI score0.03251EPSS
SaveExploits0References7Affected Software1
CVE
CVE
added 2017/05/11 2:01 p.m.23 views

CVE-2016-9230

CVE-2016-9230 entry is rejected/not used as described.

6.9AI score
SaveExploits0
Cvelist
Cvelist
added 2017/05/11 2:01 p.m.13 views

CVE-2016-9230

...

SaveExploits0
Tenable Nessus
Tenable Nessus
added 2016/04/15 12:00 a.m.16 views

Glassdoor Mobile Application Detection

Binary data 9230.prm...

7.3AI score
SaveExploits0References1
CVE
CVE
added 2015/06/28 7:00 p.m.50 views

CVE-2014-9230

The CVE-2014-9230 issue is a cross-site scripting (XSS) vulnerability in the administration console of Symantec Data Loss Prevention (DLP) Enforce Server, prior to version 12.5.2. A remote attacker could inject arbitrary web script or HTML via unspecified vectors in the Enforce Server admin UI. T...

4.3CVSS5.8AI score0.01984EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2009/09/09 12:00 a.m.23 views

Fedora Core 11 FEDORA-2009-9230 (mapserver)

The remote host is missing an update to mapserver announced via advisory FEDORA-2009-9230. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

10CVSS6.4AI score0.09011EPSS
SaveExploits7References1
OpenVAS
OpenVAS
added 2009/09/09 12:00 a.m.29 views

Fedora Core 11 FEDORA-2009-9230 (mapserver)

The remote host is missing an update to mapserver announced via advisory FEDORA-2009-9230. OpenVAS Vulnerability Test $Id: fcore20099230.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9230 mapserver Authors: Thomas Reinke Copyright: Copyright c 200...

10CVSS0.5AI score0.09011EPSS
SaveExploits7
Rows per page
Query Builder