Lucene search
+L

1170 matches found

Prion
Prion
added 2022/10/06 8:15 p.m.20 views

Design/Logic Flaw

It was possible to trigger an infinite recursion condition in the error handler when Hermes executed specific maliciously formed JavaScript. This condition was only possible to trigger in dev-mode when asserts were enabled. This issue affects Hermes versions prior to v0.12.0...

5CVSS7.5AI score0.00786EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/10/06 12:0 a.m.10 views

Facebook Hermes 安全漏洞

Facebook Hermes is a JavaScript engine from Facebook Inc. in the United States. The engine is targeted at React Native applications to improve the performance of mobile client application apps, but not for server-side infrastructures such as browsers & Node.js. A security vulnerability exists in...

7.5CVSS7.3AI score0.00786EPSS
SaveExploits0References2
OSV
OSV
added 2022/10/06 12:0 a.m.33 views

CVE-2022-27810

It was possible to trigger an infinite recursion condition in the error handler when Hermes executed specific maliciously formed JavaScript. This condition was only possible to trigger in dev-mode when asserts were enabled. This issue affects Hermes versions prior to v0.12.0...

6.8AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/10/05 12:0 a.m.108 views

Debian DSA-5246-1 : mediawiki - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5246 advisory. - An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite...

8.1CVSS6.6AI score0.0186EPSS
SaveExploits3References33
NVD
NVD
added 2022/09/19 9:15 p.m.20 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS0.00407EPSS
SaveExploits1References4
OSV
OSV
added 2022/09/19 9:15 p.m.3 views

DEBIAN-CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS4.8AI score0.00407EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2022/09/19 9:15 p.m.54 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS5.9AI score0.00407EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/09/19 9:15 p.m.3 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS5.9AI score0.00407EPSS
SaveExploits1References5
Prion
Prion
added 2022/09/19 9:15 p.m.19 views

Design/Logic Flaw

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

1.4CVSS5.7AI score0.00407EPSS
SaveExploits1References4Affected Software2
Cvelist
Cvelist
added 2022/09/19 12:0 a.m.31 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

6.1AI score0.00407EPSS
SaveExploits1References4
CVE
CVE
added 2022/09/19 12:0 a.m.87 views

CVE-2022-28201

CVE-2022-28201 affects MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. The root cause is an infinite recursion triggered when a user with editinterface permission mishandles a bare local interwiki for the mainpage message. This can lead to a denial of service via recursio...

4.4CVSS5.6AI score0.00407EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/09/19 12:0 a.m.37 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

6.5AI score
SaveExploits0References6
Debian CVE
Debian CVE
added 2022/09/19 12:0 a.m.118 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS4.5AI score0.00407EPSS
SaveExploits1
OSV
OSV
added 2022/08/02 12:0 a.m.55 views

GHSA-H3QM-JRRF-CGJ3 graphql-go has infinite recursion in the type definition parser

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS7.5AI score0.00851EPSS
SaveExploits1References6
NVD
NVD
added 2022/08/01 10:15 p.m.18 views

CVE-2022-37315

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS0.00851EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/08/01 10:15 p.m.5 views

CVE-2022-37315

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS5.8AI score0.00851EPSS
SaveExploits1References2
OSV
OSV
added 2022/08/01 10:15 p.m.12 views

UBUNTU-CVE-2022-37315

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS7.1AI score0.00851EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2022/08/01 10:15 p.m.63 views

CVE-2022-37315

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS7.1AI score0.00851EPSS
SaveExploits1References3
Prion
Prion
added 2022/08/01 10:15 p.m.20 views

Design/Logic Flaw

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

5CVSS7.5AI score0.00851EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2022/08/01 9:53 p.m.13 views

CVE-2022-37315

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

5.8AI score
SaveExploits0References3
Rows per page
Query Builder