Lucene search
+L

1796 matches found

OSV
OSV
•added 2018/06/20 2:29 p.m.•26 views

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.5CVSS7.7AI score
SaveExploits0References3
OSV
OSV
•added 2018/06/20 2:29 p.m.•9 views

ALPINE-CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.5CVSS6.8AI score0.02673EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2018/06/20 2:06 p.m.•21 views

Operative Framework HD - The Digital Investigation Framework, You Can Interact With Websites, Email Address, Company, People, Ip Address, And More

operative framework HD is the digital investigation framework, you can interact with websites, email address, company, people, ip address ... with basic/graphical view and export with XML, JSON. How to Install You need this packages mongoDB NPM Python 2 Create mongoDB database $ mongo $ use...

7.3AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2018/06/20 2:00 p.m.•49 views

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.3AI score0.02673EPSS
SaveExploits0References3
CVE
CVE
•added 2018/06/20 2:00 p.m.•168 views

CVE-2018-12558

The CVE-2018-12558 issue affects the Perl Email::Address module (versions up to 1.909) and arises from an algorithmic complexity vulnerability in Address.pm that lets an attacker cause CPU-based Denial of Service with specially crafted input (notably a string containing 30 form-field characters, ...

7.5CVSS7.2AI score0.02673EPSS
SaveExploits0References3Affected Software1
AlpineLinux
AlpineLinux
•added 2018/06/20 2:00 p.m.•70 views

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.5CVSS7.4AI score0.02673EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2018/06/20 2:00 p.m.•64 views

CVE-2018-12558

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.5CVSS7.4AI score0.02673EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/20 12:00 a.m.•7 views

CVE-2018-12558: Inefficient Algorithmic Complexity

The parse method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f"...

7.5CVSS7.2AI score0.02673EPSS
SaveExploits0References2
CVE
CVE
•added 2018/05/29 8:00 p.m.•65 views

CVE-2015-9240

CVE-2015-9240 affects the keystone node module prior to 0.3.16. The vulnerability is a partial authentication bypass in the default sign-in flow: if an attacker provides a full and correct password but only a partial email address, authentication can be granted. Affected component is the keystone...

7.5CVSS7.5AI score0.0089EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/05/29 8:00 p.m.•35 views

CVE-2015-9240

Due to a bug in the the default sign in functionality in the keystone node module before 0.3.16, incomplete email addresses could be matched. A correct password is still required to complete sign in...

7.6AI score0.0089EPSS
SaveExploits0References1
OSV
OSV
•added 2018/04/16 9:58 a.m.•17 views

CVE-2018-10097

XSS exists in Domain Trader 2.5.3 via the recoverlogin.php emailaddress parameter...

6.1CVSS5.8AI score0.01472EPSS
SaveExploits1References1
CNVD
CNVD
•added 2018/04/13 12:00 a.m.•11 views

Smartscript Solutions Domain Trader Cross-Site Scripting Vulnerability

Smartscript Solutions Domain Trader is a suite of domain name auction and domain parking software from Smartscript Solutions in the UK. A cross-site scripting vulnerability exists in Smartscript Solutions Domain Trader version 2.5.3. The vulnerability can be exploited by remote attackers to injec...

6.1CVSS6AI score0.01472EPSS
SaveExploits1References1
NVD
NVD
•added 2018/04/12 10:29 p.m.•26 views

CVE-2018-6903

PHP Scripts Mall Hot Scripts Clone Script Classified v3.1 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code...

8.8CVSS8.7AI score0.01033EPSS
SaveExploits1References1
Prion
Prion
•added 2018/04/12 10:29 p.m.•21 views

Input validation

PHP Scripts Mall Website Seller Script 2.0.3 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code...

4CVSS8.6AI score0.01033EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2018/04/12 10:00 p.m.•51 views

CVE-2018-6879

The CVE-2018-6879 entry concerns PHP Scripts Mall Website Seller Script 2.0.3 where client-side validation is used to enforce email format. The vulnerability arises because the validation can be bypassed by removing the client-side validation code, enabling a remote attacker to modify a registere...

8.8CVSS8.6AI score0.01033EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/12 12:00 a.m.•4 views

CVE-2018-6903: Improper Input Validation

PHP Scripts Mall Hot Scripts Clone Script Classified v3.1 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code...

8.8CVSS7.9AI score0.01033EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/12 12:00 a.m.•6 views

CVE-2018-6879: Improper Input Validation

PHP Scripts Mall Website Seller Script 2.0.3 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code...

8.8CVSS7.9AI score0.01033EPSS
SaveExploits1References2
ripstech
ripstech
•added 2018/04/10 11:00 a.m.•47 views

LimeSurvey 2.72.3 - Persistent XSS to Code Execution

See RIPS Scan Report Unauthenticated Persistent Cross-Site Scripting LimeSurvey 2.72.3 is prone to a persistent cross-site scripting vulnerability which is exploitable through the unauthenticated perspective. When submitting a public survey, the Continue Later feature allows users to save their...

6.2AI score
SaveExploits0
Prion
Prion
•added 2018/04/03 6:29 a.m.•27 views

Code injection

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves alarm and timer handling in the "Clock" component. It allows physically proximate attackers to discover the iTunes e-mail address...

2.1CVSS3AI score0.00366EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2018/04/03 6:00 a.m.•85 views

CVE-2018-4123

CVE-2018-4123 affects Apple iOS before 11.3, specifically the Clock component’s alarm/timer handling. The issue is an information-disclosure vulnerability that could allow a physically proximate attacker to obtain the iTunes email address. The root cause is described as an information-disclosure ...

2.4CVSS4.1AI score0.00366EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder