Lucene search
K

2423 matches found

CNNVD
CNNVD
added 2023/10/20 12:0 a.m.2 views

WordPress Plugin Social Media Share Buttons & Social Sharing Icons Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS6.6AI score0.00104EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/10/20 12:0 a.m.1 views

WordPress Plugin AI ChatBot Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

9.8CVSS6.7AI score0.00362EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2023/10/16 12:0 a.m.32 views

Fedora: Security Advisory for python-asgiref (FEDORA-2023-cc023fabb7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.08919EPSS
Exploits0References2
CNVD
CNVD
added 2023/10/13 12:0 a.m.19 views

Microsoft Message Queuing Denial of Service Vulnerability

Microsoft Message Queuing is the solution for implementing asynchronous and synchronous scenarios that require high performance. A denial of service vulnerability exists in Microsoft Message Queuing, which can be exploited by an attacker to cause a denial of service condition...

7.5CVSS6.5AI score0.49765EPSS
Exploits0References1
Talos Blog
Talos Blog
added 2023/10/11 11:6 p.m.57 views

What to know about the HTTP/2 Rapid Reset DDoS attacks

Cisco Talos is actively tracking the novel distributed denial-of-service DDoS attacks cloud services provider Cloudflare disclosed earlier this week. The techniques described in Cloudflares blog post resulted in a record-breaking DDoS attack and could facilitate much larger attacks in the future...

5CVSS7.2AI score0.944EPSS
Exploits19
OpenVAS
OpenVAS
added 2023/10/10 12:0 a.m.23 views

Huawei EulerOS: Security Advisory for c-ares (EulerOS-SA-2023-2913)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.00103EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2023/10/10 12:0 a.m.23 views

Huawei EulerOS: Security Advisory for c-ares (EulerOS-SA-2023-2932)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.00103EPSS
Exploits0References2
Gentoo Linux
Gentoo Linux
added 2023/10/08 12:0 a.m.46 views

c-ares: Multiple Vulnerabilities

Background c-ares is a C library for asynchronous DNS requests including name resolves. Description Multiple vulnerabilities have been discovered in c-ares. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround...

7.5CVSS7.4AI score0.00343EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/10/08 12:0 a.m.28 views

GLSA-202310-09 : c-ares: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202310-09 c-ares: Multiple Vulnerabilities - c-ares is an asynchronous resolver library. When cross-compiling c-ares and using the autotools build system, CARESRANDOMFILE will not be set, as seen when cross compiling aarch64...

7.5CVSS6.5AI score0.00343EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2023/09/20 12:0 a.m.22 views

Huawei EulerOS: Security Advisory for c-ares (EulerOS-SA-2023-2833)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.3AI score0.00103EPSS
Exploits0References2
Ubuntu
Ubuntu
added 2023/09/18 1:8 p.m.43 views

USN-6376-1: c-ares vulnerability

It was discovered that c-ares incorrectly parsed certain SOA replies. A remote attacker could possibly use this issue to cause c-res to crash, resulting in a denial of service...

5.9CVSS7.4AI score0.00115EPSS
Exploits1
OpenVAS
OpenVAS
added 2023/09/18 12:0 a.m.19 views

Debian: Security Advisory (DLA-3567-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS7.8AI score0.00115EPSS
Exploits1References4
Code423n4
Code423n4
added 2023/09/14 12:0 a.m.11 views

requestDeposit and requestRedeem do not allow for any price guarantee, opening users to sandwich attacks and other losses

Lines of code Vulnerability details Impact Request functions take only the desired input amount as a parameter, giving no way for the caller to control the fulfilment price. The price is decided by the Centrifuge mainnet only. function requestDeposituint256 assets, address owner; function...

6.7AI score
Exploits0
Ubuntu
Ubuntu
added 2023/09/11 3:51 p.m.377 views

USN-6164-2: c-ares vulnerabilities

USN-6164-1 fixed several vulnerabilities in c-ares. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Hannes Moesl discovered that c-ares incorrectly handled certain ipv6 addresses. An attacker could use this issue to cause c-ares ...

7.5CVSS7.1AI score0.00343EPSS
Exploits0
GithubExploit
GithubExploit
added 2023/09/11 12:43 p.m.18 views

Exploit for Unrestricted Upload of File with Dangerous Type in Mappresspro Mappress

CVE-2020-12077 MapPress Maps Pro 2.53.9 - Remote Code Exe...

8.8CVSS7.6AI score0.51405EPSS
Exploits3
Tenable Nessus
Tenable Nessus
added 2023/09/11 12:0 a.m.27 views

Ubuntu 16.04 ESM / 18.04 ESM : c-ares vulnerabilities (USN-6164-2)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6164-2 advisory. USN-6164-1 fixed several vulnerabilities in c-ares. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS...

7.5CVSS6.5AI score0.00343EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2023/09/11 12:0 a.m.16 views

Huawei EulerOS: Security Advisory for c-ares (EulerOS-SA-2023-2749)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.00343EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2023/09/11 12:0 a.m.11 views

Huawei EulerOS: Security Advisory for c-ares (EulerOS-SA-2023-2718)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.00343EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2023/09/11 12:0 a.m.24 views

Huawei EulerOS: Security Advisory for c-ares (EulerOS-SA-2023-2780)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.00103EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2023/09/11 12:0 a.m.26 views

Huawei EulerOS: Security Advisory for c-ares (EulerOS-SA-2023-2804)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.00103EPSS
Exploits0References2
Rows per page
Query Builder