Lucene search
+L

5228 matches found

Veracode
Veracode
added 2022/02/14 1:25 p.m.17 views

Race Condition

github.com/ntbosscher/gobase, is vulnerable to race conditions. The vulnerability exists in the httpauth function in the main.go file allowing an attacker to redirect HTTP requests to incorrect routing...

3.7CVSS1.9AI score0.00348EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/02/10 8:24 p.m.39 views

Improper Handling of Exceptional Conditions and Improper Input Validation in Reactor Netty

Reactor Netty HttpServer, versions 0.9.3 and 0.9.4, is exposed to a URISyntaxException that causes the connection to be closed prematurely instead of producing a 400 response...

7.5CVSS7.2AI score0.01146EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2022/02/09 11:15 p.m.27 views

CVE-2021-33147

Improper conditions check in the IntelR IPP Crypto library before version 2021.2 may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS0.0024EPSS
SaveExploits0References1
Prion
Prion
added 2022/02/09 11:15 p.m.17 views

Input validation

Improper conditions check in the IntelR IPP Crypto library before version 2021.2 may allow an authenticated user to potentially enable information disclosure via local access...

2.1CVSS5.2AI score0.0024EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/02/09 10:4 p.m.51 views

CVE-2021-33139

Improper conditions check in firmware for some IntelR Wireless BluetoothR and KillerTM BluetoothR products before version 22.100 may allow an authenticated user to potentially enable denial of service via adjacent access...

6.6AI score0.00491EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/02/09 10:4 p.m.8 views

CVE-2021-33147

Improper conditions check in the IntelR IPP Crypto library before version 2021.2 may allow an authenticated user to potentially enable information disclosure via local access...

5.2AI score0.0024EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2022/02/09 12:0 a.m.35 views

AlmaLinux 8 : GNOME (ALSA-2020:1766)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2020:1766 advisory. - There is a stack-based buffer overflow in the parsemakernote function of dcrawcommon.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of servic...

8.8CVSS7.1AI score0.0207EPSS
SaveExploits2References6
NVD
NVD
added 2022/02/07 4:15 p.m.20 views

CVE-2021-25106

The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WPLegalPages WordPress plugin before 2.7.1 does not check for authorisation and has a flawed CSRF logic when saving its settings, allowing any authenticated users, such as subscriber, to update them. Furthermore, due to...

5.4CVSS0.006EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.17 views

Schneider Electric Modicon Controllers Improper Check For Unusual or Exceptional Conditions (CVE-2019-6856)

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium see security notification for specific versions which could cause a Denial of Service when writing specific physical memory blocks using Modbus TCP...

7.5CVSS7.2AI score0.0163EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.20 views

Schneider Electric Modicon Improper Handling of Exceptional Conditions (CVE-2019-6843)

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware version prior to V3.10, Modicon M340 all firmware versions, and Modicon BMxCRA and 140CRA modules all firmware versions, which could cause a Denial of Service attack on the PLC when upgrading...

4.9CVSS5.3AI score0.00959EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.28 views

Schneider Electric Modicon Improper Handling of Exceptional Conditions (CVE-2019-6847)

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules all firmware versions, which could cause a Denial of Service attack on the FTP service when upgrading the firmware with a version incompatible with the...

4.9CVSS5.3AI score0.00959EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.28 views

Schneider Electric Modicon Improper Handling of Exceptional Conditions (CVE-2019-6842)

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules all firmware versions, which could cause a Denial of Service attack on the PLC when upgrading the firmware with a missing web server image inside the packag...

4.9CVSS5.3AI score0.00959EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.16 views

Schneider Electric Modicon Improper Check for Unusual or Exceptional Conditions (CVE-2018-7833)

An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where an unauthenticated user can send a specially crafted XML data via a POST request to cause the web server to become unavailable...

7.5CVSS7.2AI score0.01381EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.31 views

Schneider Electric Modicon Improper Check for Unusual or Exceptional Conditions (CVE-2020-7537)

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium see security notifications for affected versions, that could cause denial of service when a specially crafted Read Physical Memo...

7.5CVSS7.4AI score0.01382EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.18 views

Mitsubishi Electric MELSEC iQ-F Series Improper Check or Handling of Exceptional Conditions (CVE-2020-5665)

Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5UC CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service DoS condition on program execution and communication by sending a specially crafted ARP packet. This plugin only works with...

7.4CVSS7.5AI score0.00985EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.19 views

Schneider Electric Modicon Improper Check for Unusual or Exceptional Conditions (CVE-2020-7543)

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium see security notifications for affected versions, that could cause denial of service when a specially crafted Read Physical Memo...

7.5CVSS7.4AI score0.01311EPSS
SaveExploits0References2
OSV
OSV
added 2022/02/04 11:15 p.m.7 views

CVE-2021-22285

Improper Handling of Exceptional Conditions, Improper Check for Unusual or Exceptional Conditions vulnerability in the ABB SPIET800 and PNI800 module that allows an attacker to cause the denial of service or make the module unresponsive...

7.5CVSS5.8AI score0.01038EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/02/04 12:0 a.m.9 views

PT-2022-9235 · Abb · Abb Spiet800 +1

Name of the Vulnerable Software and Affected Versions: ABB SPIET800 and PNI800 module affected versions not specified Description: The issue is related to improper handling of exceptional conditions and improper check for unusual or exceptional conditions. This allows an attacker to cause a denia...

7.5CVSS7.3AI score0.01038EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.21 views

Mageia: Security Advisory (MGASA-2014-0466)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS8.3AI score0.0783EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.18 views

Mageia: Security Advisory (MGASA-2019-0214)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS6.8AI score0.0184EPSS
SaveExploits0References4
Rows per page
Query Builder