Lucene search
+L

1055 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/09 12:00 a.m.•3 views

CVE-2023-3172: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20...

7.2CVSS6.8AI score0.01206EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2023/06/09 12:00 a.m.•28 views

CVE-2023-3172 Path Traversal in froxlor/froxlor

Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20...

6.5CVSS6.7AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2023/06/09 12:00 a.m.•10 views

CVE-2023-3173 Improper Restriction of Excessive Authentication Attempts in froxlor/froxlor

Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20...

9.8CVSS9.6AI score0.01129EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/06/09 12:00 a.m.•45 views

CVE-2023-3172 Path Traversal in froxlor/froxlor

Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20...

6.5CVSS7.2AI score0.01206EPSS
SaveExploits1References2
Mend
Mend
•added 2023/06/09 12:00 a.m.•4 views

CVE-2023-3173

Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20...

9.8CVSS0.01129EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2023/06/09 12:00 a.m.•8 views

PT-2023-23440 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.20 Description: The issue is related to improper restriction of excessive authentication attempts in the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.20, update to version 2.0.20 ...

9.8CVSS9.5AI score0.01129EPSS
SaveExploits1References7
Veracode
Veracode
•added 2023/05/29 4:47 p.m.•29 views

Denial Of Service (DoS)

froxlor/froxlor is vulnerable to Denial Of Service DoS. The vulnerability exists because of a lack of HTTP request validation in the rate-limiting functionality during a password reset, which allows an attacker to crash the application...

7.5CVSS6.9AI score0.00681EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2023/05/19 6:30 p.m.•57 views

Froxlor vulnerable to Allocation of Resources Without Limits or Throttling

Froxlor prior to 2.0.16 has a password reset page with no rate limit...

7.5CVSS7AI score0.00681EPSS
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2023/05/19 6:30 p.m.•33 views

GHSA-4GM9-C9JQ-G523 Froxlor vulnerable to Allocation of Resources Without Limits or Throttling

Froxlor prior to 2.0.16 has a password reset page with no rate limit...

6.5CVSS6.9AI score0.00681EPSS
SaveExploits0References4
CNVD
CNVD
•added 2023/05/17 12:00 a.m.•97 views

Froxlor Resource Management Error Vulnerability

Froxlor is a set of lightweight server management software from the Froxlor team. A resource management error vulnerability exists in versions of Froxlor prior to 2.0.16 that stems from a failure to properly allocate resources. An attacker can exploit this vulnerability to cause a denial of servi...

7.5CVSS6.5AI score0.00681EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2023/05/16 1:53 a.m.•9 views

SUSE CVE-2023-2666

Allocation of Resources Without Limits or Throttling in GitHub repository froxlor/froxlor prior to 2.0.16...

7.5CVSS6.8AI score0.00681EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/05/12 12:00 a.m.•44 views

Froxlor security vulnerabilities

Froxlor is a set of lightweight server management software from the Froxlor team. A resource management error vulnerability exists in versions of Froxlor prior to 2.0.16 that stems from a failure to properly allocate resources. An attacker can exploit this vulnerability to cause a denial of servi...

7.5CVSS6.6AI score0.00681EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/05/12 12:00 a.m.•3 views

PT-2023-20767

Name of the Vulnerable Software and Affected Versions Froxlor versions prior to 2.0.16 Description The issue concerns the allocation of resources without limits or throttling, specifically on the password reset page, which lacks a rate limit. This could potentially lead to abuse or exploitation...

7.5CVSS0.00681EPSS
SaveExploits0References7
CVE
CVE
•added 2023/05/12 12:00 a.m.•87 views

CVE-2023-2666

Froxlor (versions prior to 2.0.16) has a resource management vulnerability described as Allocation of Resources Without Limits or Throttling. The issue, a resource-management error in Froxlor, can lead to denial of service. This is corroborated by multiple sources (NVD, Red Hat, CNVD/CNNVD, OSV, ...

7.5CVSS6.9AI score0.00681EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/12 12:00 a.m.•3 views

CVE-2023-2666: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling in GitHub repository froxlor/froxlor prior to 2.0.16...

7.5CVSS5.8AI score0.00681EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/05/12 12:00 a.m.•14 views

CVE-2023-2666 Allocation of Resources Without Limits or Throttling in froxlor/froxlor

Allocation of Resources Without Limits or Throttling in GitHub repository froxlor/froxlor prior to 2.0.16...

6.8CVSS7.6AI score0.00681EPSS
SaveExploits0References2
Mend
Mend
•added 2023/05/12 12:00 a.m.•7 views

CVE-2023-2666

Allocation of Resources Without Limits or Throttling in GitHub repository froxlor/froxlor prior to 2.0.16...

7.6CVSS0.00681EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2023/04/18 1:45 a.m.•10 views

SUSE CVE-2023-0877

Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11...

9.1CVSS7.1AI score0.03928EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2023/04/18 1:45 a.m.•12 views

SUSE CVE-2023-2034

Unrestricted Upload of File with Dangerous Type in GitHub repository froxlor/froxlor prior to 2.0.14...

9.1CVSS6.8AI score0.7143EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2023/04/14 3:30 a.m.•64 views

froxlor/froxlor vulnerable to unrestricted upload of file with dangerous type

Image files uploaded in froxlor/froxlor prior to 2.0.14 were not properly validated which could result in remote code execution via path manipulation...

9.1CVSS8.9AI score0.7143EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder