Lucene search
+L

121 matches found

Vulnrichment
Vulnrichment
added 2022/09/26 11:10 a.m.4 views

CVE-2022-3301 Improper Cleanup on Thrown Exception in ikus060/rdiffweb

Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8...

4.3CVSS6.8AI score0.00579EPSS
SaveExploits1References2
OSV
OSV
added 2022/09/26 11:10 a.m.31 views

CVE-2022-3301 Improper Cleanup on Thrown Exception in ikus060/rdiffweb

Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8...

4.3CVSS4.5AI score
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/09/09 12:00 a.m.30 views

The vulnerability of the Kubernetes cluster synchronization software, which relies on configuration sources like Flux and the Kubernetes package manager Helm, arises from improper resource cleanup or release mechanisms. This allows attackers to trigger service failures.

The vulnerability of the Kubernetes cluster synchronization software, which relies on configuration sources like Flux and the Kubernetes package manager Helm, is related to improper resource cleanup or release. Exploiting this vulnerability allows a malicious actor to cause service failures...

7.7CVSS7.2AI score0.01088EPSS
SaveExploits0References4Affected Software2
Veracode
Veracode
added 2022/08/26 12:35 p.m.21 views

Denial Of Service (DoS)

pdns-recursor is vulnerable to denial of service. The vulnerability exists due to an Improper Cleanup upon a Thrown Exception when protobuf logging is enabled leading to a daemon crash...

6.5CVSS6AI score0.01404EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/08/23 5:15 p.m.3 views

DEBIAN-CVE-2022-37428

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service daemon crash via a DNS query that leads to an answer with specific properties...

6.5CVSS6.2AI score0.01404EPSS
SaveExploits0References1
Prion
Prion
added 2022/08/23 5:15 p.m.18 views

Input validation

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service daemon crash via a DNS query that leads to an answer with specific properties...

4CVSS6.3AI score0.01404EPSS
SaveExploits0References3Affected Software2
UbuntuCve
UbuntuCve
added 2022/08/23 5:15 p.m.33 views

CVE-2022-37428

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service daemon crash via a DNS query that leads to an answer with specific properties...

6.5CVSS6.5AI score0.01404EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2022/08/23 5:15 p.m.5 views

CVE-2022-37428

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service daemon crash via a DNS query that leads to an answer with specific properties...

6.5CVSS6.5AI score0.01404EPSS
SaveExploits0References5
CVE
CVE
added 2022/08/23 4:33 p.m.107 views

CVE-2022-37428

PowerDNS Recursor (versions up to 4.5.9, 4.6.2, and 4.7.1) is affected when protobuf logging is enabled. The issue is an improper cleanup upon a thrown exception which can cause a denial of service (daemon crash) via a crafted DNS query that elicits a specific response property. Public sources in...

6.5CVSS6.2AI score0.01404EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/27 12:00 a.m.15 views

The vulnerability of the `create_worker_threads` method in the MariaDB database management system allows a hacker to cause a service failure.

The vulnerability of the createworkerthreads method in the MariaDB database management system exists due to improper cleanup or resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

3.3CVSS6.5AI score0.00225EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/06/27 12:00 a.m.32 views

The vulnerability of the `create_worker_threads` method in the MariaDB database management system allows a hacker to cause a service failure.

The vulnerability of the createworkerthreads method in the MariaDB database management system exists due to improper cleanup or resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

3.3CVSS6.5AI score0.00221EPSS
SaveExploits0References6Affected Software2
CNNVD
CNNVD
added 2022/05/25 12:00 a.m.12 views

Red Hat stackrox 安全漏洞

Red Hat stackrox is a full lifecycle Kubernetes security solution from Red Hat. It allows you to detect, manage, and mitigate security risks, such as misconfigurations, and vulnerabilities CVEs. A security vulnerability exists in Red Hat stackrox that stems from improper stackrox cleanup. An...

8.8CVSS7.8AI score0.01177EPSS
SaveExploits1References13
CNNVD
CNNVD
added 2022/04/01 12:00 a.m.9 views

GitLab Enterprise Edition 跨站脚本漏洞

GitLab Enterprise Edition is a content management system. A cross-site scripting vulnerability exists in GitLab Enterprise Edition versions 14.4.0 through 14.9.1 that stems from insufficient cleanup of user-supplied data in comments. A remote user can exploit this vulnerability to inject and...

8.7CVSS7.5AI score0.82003EPSS
SaveExploits3References10
CNNVD
CNNVD
added 2021/11/16 12:00 a.m.8 views

iPack SCADA Automation software SQL注入漏洞

iPack SCADA Automation software is used by the Turkish company iPack to enable tracking and management of data from remote points and to intervene in the system. The SQL injection vulnerability in iPack SCADA Automation software stems from improper cleanup. iPack SCADA Automation software is...

9.8CVSS8.6AI score0.14501EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/11/15 12:00 a.m.11 views

ImageMagick 资源管理错误漏洞

ImageMagick is used to create, edit, composite, or convert digital images.A resource management error vulnerability exists in ImageMagick, which stems from a failure to properly clean up the conversion process before invoking it with certain inputs. An attacker could exploit this vulnerability to...

7.8CVSS8.2AI score0.05838EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/08/09 12:00 a.m.7 views

WordPress SQL注入漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in WordPress plugin The Stock in & out 1.0.4 and earlier...

8.8CVSS8.1AI score0.01568EPSS
SaveExploits2References3
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.9 views

The vulnerability of Trend Micro’s Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) lies in improper resource cleanup or release mechanisms. This allows attackers to cause the software to crash or fail to perform its functions.

The vulnerability of Trend Micro’s Virus Scan API VSAPI and Advanced Threat Scan Engine ATSE lies in improper resource cleanup or release. Exploiting this vulnerability can allow an attacker to cause the software to crash or experience service failures due to a specially created file...

3.3CVSS5.9AI score0.00556EPSS
SaveExploits0References4
OSV
OSV
added 2020/06/11 3:15 p.m.5 views

CVE-2020-0203

In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. This could lead to local escalation of privilege between constrained processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

7.8CVSS5.9AI score
SaveExploits0References1
Cvelist
Cvelist
added 2020/06/11 2:14 p.m.31 views

CVE-2020-0203

In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. This could lead to local escalation of privilege between constrained processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

8.4AI score0.00246EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.14 views

The vulnerability of the ClamAV antivirus software allows a hacker to trigger a service failure.

The vulnerability of the ClamAV antivirus software is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a hacker to cause a service failure by sending specially crafted messages to the vulnerable system...

5.3CVSS7.4AI score0.0218EPSS
SaveExploits0References8Affected Software8
Rows per page
Query Builder