Lucene search
+L

5287 matches found

Exploit DB
Exploit DB
added 2022/02/02 12:0 a.m.244 views

Fetch Softworks Fetch FTP Client 5.8 - Remote CPU Consumption (Denial of Service)

Exploit Title: Fetch Softworks Fetch FTP Client 5.8 - Remote CPU Consumption Denial of Service Exploit Author: liquidworm !/usr/bin/env python Fetch Softworks Fetch FTP Client 5.8 Remote CPU Consumption Denial of Service Vendor: Fetch Softworks Product web page: https://www.fetchsoftworks.com...

5.3AI score
SaveExploits0
zdt
zdt
added 2022/01/28 12:0 a.m.170 views

Fetch Softworks Fetch FTP Client 5.8 Denial Of Service Exploit

Fetch Softworks Fetch FTP Client version 5.8 suffers from a remote CPU consumption denial of service vulnerability. !/usr/bin/env python Fetch Softworks Fetch FTP Client 5.8 Remote CPU Consumption Denial of Service Vendor: Fetch Softworks Product web page: https://www.fetchsoftworks.com Affected...

0.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2022/01/28 12:0 a.m.210 views

Fetch Softworks Fetch FTP Client 5.8 Denial Of Service

!/usr/bin/env python Fetch Softworks Fetch FTP Client 5.8 Remote CPU Consumption Denial of Service Vendor: Fetch Softworks Product web page: https://www.fetchsoftworks.com Affected version: 5.8.2 5K1354 Summary: Fetch is a reliable, full-featured file transfer client for the Apple Macintosh whose...

7.4AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
added 2022/01/27 12:0 a.m.245 views

Fetch Softworks Fetch FTP Client 5.8 Remote CPU Consumption (Denial of Service)

Summary Fetch is a reliable, full-featured file transfer client for the Apple Macintosh whose user interface emphasizes simplicity and ease of use. Fetch supports FTP and SFTP, the most popular file transfer protocols on the Internet for compatibility with thousands of Internet service providers,...

7.5CVSS5.8AI score0.00364EPSS
SaveExploits1
OSV
OSV
added 2022/01/21 11:55 p.m.9 views

GHSA-R683-J2X4-V87G node-fetch forwards secure headers to untrusted sites

node-fetch forwards secure headers such as authorization, www-authenticate, cookie, & cookie2 when redirecting to a untrusted site...

8.8CVSS6.9AI score0.01646EPSS
SaveExploits1References10
vulnersOsv
vulnersOsv
added 2022/01/21 11:55 p.m.8 views

4i18n-cli (>=0.0.2 <=0.0.7), @acneidert/devtools (=0.0.6) +60 more potentially affected by CVE-2022-0235 via node-fetch (>=3.0.0 <=3.1.0)

node-fetch NPM version =3.0.0, =0.0.2, =1.273.2, =1.0.0, =2.14.0, =2.1.0, =0.0.83, =1.0.0, =1.0.0, =0.0.3, =19.7.0, =6.2.0, =0.0.1, =4.1.1, =4.1.2 and more Source cves: CVE-2022-0235 Source advisory: OSV:GHSA-R683-J2X4-V87G...

8.8CVSS6.8AI score0.01646EPSS
SaveExploits1
Github Security Blog
Github Security Blog
added 2022/01/21 11:55 p.m.1191 views

node-fetch forwards secure headers to untrusted sites

node-fetch forwards secure headers such as authorization, www-authenticate, cookie, & cookie2 when redirecting to a untrusted site...

8.8CVSS7.7AI score0.01646EPSS
SaveExploits1References10Affected Software1
wpexploit
wpexploit
added 2022/01/18 12:0 a.m.146 views

Five Star Business Profile and Schema < 2.1.7 - Subscriber+ Page Creation & Settings Update to Stored XSS

The plugin does not have any authorisation and CSRF in its bpfwpwelcomeaddcontactpage and bpfwpwelcomesetcontactinformation AJAX action, allowing any authenticated users, such as subscribers, to call them. Furthermore, due to the lack of sanitisation, it also lead to Stored Cross-Site Scripting...

5.4CVSS0.4AI score0.006EPSS
SaveExploits2
Veracode
Veracode
added 2022/01/17 9:9 a.m.44 views

Information Disclosure

node-fetch is vulnerable to information disclosure. The vulnerability exists due to the cookie header being leaked to third party site which allows an attacker to gain access to sensitive information...

6.1CVSS1.9AI score0.01646EPSS
SaveExploits1References5Affected Software8
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.7 views

The vulnerability of the fetch module in the Ansible configuration management system stems from deficiencies in path name restrictions, allowing attackers to access confidential data and compromise its integrity.

The vulnerability of the fetch module in the Ansible configuration system is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability could allow an attacker to access confidential data and compromise its integrity...

4.6CVSS6.5AI score0.00492EPSS
SaveExploits1References10Affected Software5
NVD
NVD
added 2022/01/16 5:15 p.m.24 views

CVE-2022-0235

node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor...

8.8CVSS0.01646EPSS
SaveExploits1References4
OSV
OSV
added 2022/01/16 5:15 p.m.1 views

DEBIAN-CVE-2022-0235

node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor...

6.1CVSS7AI score0.01646EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2022/01/16 5:15 p.m.84 views

CVE-2022-0235

node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor...

8.8CVSS6.9AI score0.01646EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2022/01/16 5:15 p.m.6 views

CVE-2022-0235

node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor...

8.8CVSS6.9AI score0.01646EPSS
SaveExploits1References5
OSV
OSV
added 2022/01/16 5:15 p.m.13 views

UBUNTU-CVE-2022-0235

node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor...

8.8CVSS6.9AI score0.01646EPSS
SaveExploits1References6
CVE
CVE
added 2022/01/16 12:0 a.m.825 views

CVE-2022-0235

CVE-2022-0235 affects the node-fetch package and is described as a vulnerability that could result in Exposure of Sensitive Information to an Unauthorized Actor. The connected document(s) confirm this CVE ID and provide contextual metrics (e.g., CVSS scores from NVD and related references), but d...

8.8CVSS7.7AI score0.01646EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/01/16 12:0 a.m.32 views

CVE-2022-0235 Exposure of Sensitive Information to an Unauthorized Actor in node-fetch/node-fetch

node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor...

8.8CVSS7.3AI score
SaveExploits0References6
Debian CVE
Debian CVE
added 2022/01/16 12:0 a.m.78 views

CVE-2022-0235

node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor...

8.8CVSS7.7AI score0.01646EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2022/01/16 12:0 a.m.6 views

PT-2022-13054

Name of the Vulnerable Software and Affected Versions node-fetch versions affected versions not specified Description The issue concerns exposure of sensitive information to an unauthorized actor. Specifically, node-fetch forwards secure headers such as authorization, www-authenticate, cookie, an...

8.8CVSS6.5AI score0.01646EPSS
SaveExploits1References78
Cvelist
Cvelist
added 2022/01/16 12:0 a.m.28 views

CVE-2022-0235 Exposure of Sensitive Information to an Unauthorized Actor in node-fetch/node-fetch

node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor...

8.8CVSS7.9AI score0.01646EPSS
SaveExploits1References4
Rows per page
Query Builder