Lucene search
K

11 matches found

OSV
OSV
added 2026/05/26 7:30 p.m.7 views

GHSA-FGMM-W5CX-VRFW Pterodactyl has a database resource limit bypass via race condition in Client API

Summary The Pterodactyl Client API has a logic flaw that lets users bypass their assigned limits for database allocations. This happens because the database locking mechanism used in the controllers is totally broken and doesn't actually lock anything. Details Inside DatabaseController.php, the...

2.3CVSS5.9AI score0.00038EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2026/05/26 7:30 p.m.10 views

Pterodactyl has a database resource limit bypass via race condition in Client API

Summary The Pterodactyl Client API has a logic flaw that lets users bypass their assigned limits for database allocations. This happens because the database locking mechanism used in the controllers is totally broken and doesn't actually lock anything. Details Inside DatabaseController.php, the...

2.3CVSS5.9AI score0.00038EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/14 6:4 p.m.3 views

CVE-2026-22819 Outray has a Race Condition in main/apps/web/src/routes/api/$orgSlug/subdomains/index.ts

Outray openSource ngrok alternative. Prior to 0.1.5, this vulnerability allows a user i.e a free plan user to get more than the desired subdomains due to lack of db transaction lock mechanisms in main/apps/web/src/routes/api/$orgSlug/subdomains/index.ts. This vulnerability is fixed in 0.1.5...

5.9CVSS6.2AI score0.00044EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/01/14 6:4 p.m.22 views

CVE-2026-22819 Outray has a Race Condition in main/apps/web/src/routes/api/$orgSlug/subdomains/index.ts

Outray openSource ngrok alternative. Prior to 0.1.5, this vulnerability allows a user i.e a free plan user to get more than the desired subdomains due to lack of db transaction lock mechanisms in main/apps/web/src/routes/api/$orgSlug/subdomains/index.ts. This vulnerability is fixed in 0.1.5...

5.9CVSS0.00044EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/01/14 6:4 p.m.4 views

CVE-2026-22819

Outray openSource ngrok alternative. Prior to 0.1.5, this vulnerability allows a user i.e a free plan user to get more than the desired subdomains due to lack of db transaction lock mechanisms in main/apps/web/src/routes/api/$orgSlug/subdomains/index.ts. This vulnerability is fixed in 0.1.5...

5.9CVSS5.5AI score0.00044EPSS
Exploits1References3Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2015-2847

Malware in sbrugna...

4CVSS6.4AI score0.00403EPSS
Exploits0References3
OSV
OSV
added 2021/10/18 12:12 p.m.6 views

OPENSUSE-SU-2021:1366-1 Security update for rpm

This update for rpm fixes the following issues: Security issues fixed: - CVE-2021-3421, CVE-2021-20271, CVE-2021-20266: Multiple header check improvements bsc1183543, bsc1183545, bsc1183632 - PGP hardening changes bsc1185299 - Fixed potential access of freed mem in ndb's glue code bsc1179416...

7CVSS6.3AI score0.00228EPSS
Exploits0References12
OSV
OSV
added 2021/10/15 7:4 a.m.3 views

SUSE-SU-2021:3445-1 Security update for rpm

This update for rpm fixes the following issues: Security issues fixed: - PGP hardening changes bsc1185299 Maintaince issues fixed: - Fixed zstd detection bsc1187670 - Added ndb rofs support bsc1188548 - Fixed deadlock when multiple rpm processes try tp acquire the database lock bsc1183659...

7.2AI score
Exploits0References5
OSV
OSV
added 2021/10/15 7:3 a.m.3 views

OPENSUSE-SU-2021:3445-1 Security update for rpm

This update for rpm fixes the following issues: Security issues fixed: - PGP hardening changes bsc1185299 Maintaince issues fixed: - Fixed zstd detection bsc1187670 - Added ndb rofs support bsc1188548 - Fixed deadlock when multiple rpm processes try tp acquire the database lock bsc1183659...

7.2AI score
Exploits0References5
OPENSUSE Linux
OPENSUSE Linux
added 2021/10/15 12:0 a.m.13 views

Security update for rpm (important)

openSUSE Security Update: Security update for rpm Announcement ID: openSUSE-SU-2021:3445-1 Rating: important References: 1183659 1185299 1187670 1188548 Affected Products: openSUSE Leap 15.3 An update that contains security fixes can now be installed. Description: This update for rpm fixes the...

7.3AI score
Exploits0
CNVD
CNVD
added 2015/03/30 12:0 a.m.3 views

McAfee Data Loss Prevention Endpoint EPO Extended Denial of Service Vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from the U.S. company McAfee McAfee. A security vulnerability in the McAfee Data Loss Prevention Endpoint DLPe epo extension allows a remote attacker to submit a special request to lock a database or enab...

4CVSS6.8AI score0.00403EPSS
Exploits0References1
Rows per page
Query Builder