Lucene search
+L

12 matches found

Vulnrichment
Vulnrichment
•added 2024/05/28 6:50 p.m.•40 views

CVE-2024-36107 Information disclosure in minio

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. If-Modified-Since and If-Unmodified-Since headers when used with anonymous requests by sending a random object name requests can be used to determine if an object exists or not on the server on a...

5.3CVSS6.6AI score0.00629EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2024/05/28 6:50 p.m.•73 views

CVE-2024-36107 Information disclosure in minio

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. If-Modified-Since and If-Unmodified-Since headers when used with anonymous requests by sending a random object name requests can be used to determine if an object exists or not on the server on a...

5.3CVSS5.1AI score0.00629EPSS
SaveExploits0References5
OSV
OSV
•added 2024/05/28 6:50 p.m.•38 views

CVE-2024-36107 Information disclosure in minio

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. If-Modified-Since and If-Unmodified-Since headers when used with anonymous requests by sending a random object name requests can be used to determine if an object exists or not on the server on a...

5.3CVSS5.2AI score
SaveExploits0References7
CNNVD
CNNVD
•added 2024/05/28 12:00 a.m.•22 views

MinIO 安全漏洞

MinIO is a high-performance object storage service released under the GNU Affero General Public License v3.0. A security vulnerability exists in version MinIO RELEASE.2022-10-02T19-29-29Z, which stems from the disclosure of information about the presence of If-Modified-Since, If-Unmodified-Since...

5.3CVSS6.4AI score0.00629EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/28 12:00 a.m.•3 views

CVE-2024-36107: Exposure of Sensitive Information to an Unauthorized Actor

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. If-Modified-Since and If-Unmodified-Since headers when used with anonymous requests by sending a random object name requests can be used to determine if an object exists or not on the server on a...

5.3CVSS5.8AI score0.00629EPSS
SaveExploits0References1
NVD
NVD
•added 2018/08/18 3:29 a.m.•32 views

CVE-2018-15504

An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server mishandles some HTTP request fields associated with time, which results in a NULL pointer dereference, as demonstrated by If-Modified-Since or If-Unmodified-Since with a month greater than 11...

7.5CVSS8AI score0.02766EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/18 12:00 a.m.•6 views

CVE-2018-15504: NULL Pointer Dereference

An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server mishandles some HTTP request fields associated with time, which results in a NULL pointer dereference, as demonstrated by If-Modified-Since or If-Unmodified-Since with a month greater than 11...

7.5CVSS7AI score0.02766EPSS
SaveExploits1References2
Mend
Mend
•added 2018/08/18 12:00 a.m.•4 views

CVE-2018-15504

An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server mishandles some HTTP request fields associated with time, which results in a NULL pointer dereference, as demonstrated by If-Modified-Since or If-Unmodified-Since with a month greater than 11...

8.7CVSS0.02766EPSS
SaveExploits1References5
CVE
CVE
•added 2018/08/18 12:00 a.m.•85 views

CVE-2018-15504

CVE-2018-15504 affects Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The issue is a NULL pointer dereference caused by mishandling HTTP time-related request fields, demonstrated by If-Modified-Since or If-Unmodified-Since with a month value >11. This can lead to denial of service. Th...

7.5CVSS7.5AI score0.02766EPSS
SaveExploits1References5Affected Software2
Cvelist
Cvelist
•added 2012/10/08 11:00 p.m.•30 views

CVE-2012-5332

at32 Reverse Proxy 1.060.310 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a long string in an HTTP header field, as demonstrated using the If-Unmodified-Since field...

6.6AI score0.02466EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2012/10/08 12:00 a.m.•9 views

PT-2012-5931

Name of the Vulnerable Software and Affected Versions at32 Reverse Proxy version 1.060.310 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, by sending a long string in an HTTP header field. This can be...

5CVSS0.02466EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/10/08 12:00 a.m.•8 views

CVE-2012-5332: Undefined Security Weakness

at32 Reverse Proxy 1.060.310 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a long string in an HTTP header field, as demonstrated using the If-Unmodified-Since field...

5CVSS5.7AI score0.02466EPSS
SaveExploits1References1
Rows per page
Query Builder