Lucene search
+L

2464 matches found

RedhatCVE
RedhatCVE
added 2018/08/28 2:49 p.m.36 views

CVE-2018-1000656

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...

7.5CVSS6.2AI score0.03855EPSS
Exploits1References1
vulnersOsv
vulnersOsv
added 2018/08/23 7:10 p.m.12 views

abbr (=0.0.0), aequitas (>=0.26.0 <=0.42.0) +112 more potentially affected by CVE-2018-1000656 via flask (>=0.10.1 <=0.12.2)

flask PYPI version =0.10.1, =0.26.0, =1.4.15, =0.11.1, =0.4.0, =0.1.0, =0.1.1, =0.1.17, =0.1.0, =0.4.1, =0.1.0, =0.0.1, =1.0.8, =1.1.0 and more Source cves: CVE-2018-1000656 Source advisory: OSV:GHSA-562C-5R94-XH97...

7.5CVSS6.7AI score0.03855EPSS
Exploits1
Github Security Blog
Github Security Blog
added 2018/08/23 7:10 p.m.42 views

Flask is vulnerable to Denial of Service via incorrect encoding of JSON data

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...

7.5CVSS7.4AI score0.03855EPSS
Exploits1References9Affected Software1
OSV
OSV
added 2018/08/23 7:10 p.m.3 views

GHSA-562C-5R94-XH97 Flask is vulnerable to Denial of Service via incorrect encoding of JSON data

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...

8.7CVSS6.7AI score0.03855EPSS
Exploits1References10
GitLab Advisory Database
GitLab Advisory Database
added 2018/08/23 12:0 a.m.40 views

Flask is vulnerable to Denial of Service via incorrect encoding of JSON data

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...

7.5CVSS7.4AI score0.03855EPSS
Exploits1References10Affected Software1
Veracode
Veracode
added 2018/08/21 7:3 a.m.26 views

Denial Of Service (DoS)

Flask is vulnerable to denial of service DoS attacks. The library does not properly handle JSON files not encoded in UTF-8, leading to excessive memory being consumed, crashing the application...

7.5CVSS7.2AI score0.03855EPSS
Exploits1References6Affected Software2
NVD
NVD
added 2018/08/20 7:31 p.m.22 views

CVE-2018-1000656

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...

7.5CVSS7.5AI score0.03855EPSS
Exploits1References5
OSV
OSV
added 2018/08/20 7:31 p.m.32 views

CVE-2018-1000656

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...

7.5CVSS7.5AI score
Exploits0References5
OSV
OSV
added 2018/08/20 7:31 p.m.3 views

DEBIAN-CVE-2018-1000656

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...

7.5CVSS9AI score0.03855EPSS
Exploits1References1
vulnersOsv
vulnersOsv
added 2018/08/20 7:31 p.m.5 views

abbr (=0.0.0), aequitas (>=0.26.0 <=0.42.0) +112 more potentially affected by CVE-2018-1000656 via flask (>=0.10.1 <=0.12.2)

flask PYPI version =0.10.1, =0.26.0, =1.4.15, =0.11.1, =0.4.0, =0.1.0, =0.1.1, =0.1.17, =0.1.0, =0.4.1, =0.1.0, =0.0.1, =1.0.8, =1.1.0 and more Source cves: CVE-2018-1000656 Source advisory: OSV:PYSEC-2018-66...

7.5CVSS6.7AI score0.03855EPSS
Exploits1
PyPA
PyPA
added 2018/08/20 7:31 p.m.7 views

PYSEC-2018-66

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...

7.5CVSS6.9AI score0.03855EPSS
Exploits1References6Affected Software1
UbuntuCve
UbuntuCve
added 2018/08/20 7:31 p.m.39 views

CVE-2018-1000656

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...

7.5CVSS6.7AI score0.03855EPSS
Exploits1References3
Prion
Prion
added 2018/08/20 7:31 p.m.21 views

Input validation

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...

5CVSS7.4AI score0.03855EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2018/08/20 7:31 p.m.6 views

UBUNTU-CVE-2018-1000656

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...

7.5CVSS6.7AI score0.03855EPSS
Exploits1References4
OSV
OSV
added 2018/08/20 7:31 p.m.9 views

PYSEC-2018-66

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...

7.5CVSS6.7AI score0.03855EPSS
Exploits1References6
OSV
OSV
added 2018/08/20 7:31 p.m.20 views

PYSEC-2018-53

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...

6.8AI score
Exploits0References5
Cvelist
Cvelist
added 2018/08/20 7:0 p.m.23 views

CVE-2018-1000656

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...

7.5AI score0.03855EPSS
Exploits1References5
CVE
CVE
added 2018/08/20 7:0 p.m.436 views

CVE-2018-1000656

Summary (CVE-2018-1000656) The Flask component of the Pallets Project (Python) prior to 0.12.3 contains a CWE-20 Improper Input Validation vulnerability that can cause excessive memory usage, potentially leading to denial of service. The documented attack vector involves attackers sending JSON da...

7.5CVSS7.4AI score0.03855EPSS
Exploits1References5Affected Software1
Debian CVE
Debian CVE
added 2018/08/20 7:0 p.m.44 views

CVE-2018-1000656

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...

7.5CVSS7.7AI score0.03855EPSS
Exploits1
Kitploit
Kitploit
added 2018/08/07 2:35 p.m.39 views

Whatsapp Automation - A Collection Of Tools For Sending And Recieving Whatsapp Messages

Whatsapp Automation is a collection of APIs that interact with WhatsApp messenger running in an Android emulator, allowing developers to build projects that automate sending and receiving messages, adding new contacts and broadcasting messages multiple contacts. The project uses Selinium, Appium,...

7.4AI score
Exploits0References1
Rows per page
Query Builder