Lucene search
+L

5 matches found

OSV
OSV
•added 2025/02/28 11:08 a.m.•13 views

OESA-2025-1221 golang security update

. Security Fixes: HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service. Certain unusual patterns of input data can cause the common function used to parse HTTP and MIME headers to allocate substantially more...

8.1CVSS7.1AI score0.01888EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2023/04/04 12:00 a.m.•18 views

PT-2023-9029 · Golang +10 · Golang +10

Name of the Vulnerable Software and Affected Versions: Golang affected versions not specified Description: The issue is related to the consumption of large amounts of CPU and memory when processing form inputs containing a large number of parts. This can be caused by several factors, including th...

9.8CVSS6.5AI score0.99999EPSS
SaveExploits25References302
Cvelist
Cvelist
•added 2018/11/27 9:00 p.m.•35 views

CVE-2018-14892

Missing protections against Cross-Site Request Forgery in the web application in ZyXEL NSA325 V2 version 4.81 allow attackers to perform state-changing actions via crafted HTTP forms...

8.7AI score0.00875EPSS
SaveExploits1References1
Prion
Prion
•added 2018/11/27 8:29 p.m.•22 views

Cross site request forgery (csrf)

Missing protections against Cross-Site Request Forgery in the web application in ZyXEL NSA325 V2 version 4.81 allow attackers to perform state-changing actions via crafted HTTP forms...

6.8CVSS8.6AI score0.00875EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/27 12:00 a.m.•3 views

CVE-2018-14892: Cross-Site Request Forgery (CSRF)

Missing protections against Cross-Site Request Forgery in the web application in ZyXEL NSA325 V2 version 4.81 allow attackers to perform state-changing actions via crafted HTTP forms...

8.8CVSS7.8AI score0.00875EPSS
SaveExploits1References2
Rows per page
Query Builder