Lucene search
+L

1409 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/19 12:00 a.m.•6 views

CVE-2022-28201: Uncontrolled Recursion

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS5.6AI score0.00423EPSS
SaveExploits1References2
Mend
Mend
•added 2022/09/19 12:00 a.m.•7 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

6.7CVSS0.00423EPSS
SaveExploits1References7
CVE
CVE
•added 2022/09/19 12:00 a.m.•108 views

CVE-2022-28201

CVE-2022-28201 affects MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. The root cause is an infinite recursion triggered when a user with editinterface permission mishandles a bare local interwiki for the mainpage message. This can lead to a denial of service via recursio...

4.4CVSS5.6AI score0.00423EPSS
SaveExploits1References4Affected Software1
osv_cve
osv_cve
•added 2022/09/19 12:00 a.m.•44 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

6.5AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2022/09/19 12:00 a.m.•44 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

6.1AI score0.00423EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2022/09/19 12:00 a.m.•129 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS4.5AI score0.00423EPSS
SaveExploits1
osv_ghsa
osv_ghsa
•added 2022/08/02 12:00 a.m.•91 views

GHSA-H3QM-JRRF-CGJ3 graphql-go has infinite recursion in the type definition parser

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS7.5AI score0.01211EPSS
SaveExploits1References6
NVD
NVD
•added 2022/08/01 10:15 p.m.•29 views

CVE-2022-37315

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS0.01211EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/08/01 10:15 p.m.•11 views

CVE-2022-37315

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS5.8AI score0.01211EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2022/08/01 10:15 p.m.•23 views

UBUNTU-CVE-2022-37315

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS7.1AI score0.01211EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2022/08/01 10:15 p.m.•75 views

CVE-2022-37315

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS7.1AI score0.01211EPSS
SaveExploits1References3
Prion
Prion
•added 2022/08/01 10:15 p.m.•28 views

Design/Logic Flaw

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

5CVSS7.5AI score0.01211EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2022/08/01 9:53 p.m.•8 views

CVE-2022-37315

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

8.7CVSS0.01211EPSS
SaveExploits1References8
osv_cve
osv_cve
•added 2022/08/01 9:53 p.m.•19 views

CVE-2022-37315

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

5.8AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/01 12:00 a.m.•4 views

CVE-2022-37315: Uncontrolled Recursion

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS7.2AI score0.01211EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/08/01 12:00 a.m.•22 views

graphql-go 安全漏洞

graphql-go is an open source GraphQL server focused on ease of use. A security vulnerability exists in graphql-go also known as GraphQL for Go version 0.8.0, which stems from the type definition parser having infinite recursion...

7.5CVSS7.3AI score0.01211EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/08/01 12:00 a.m.•15 views

PT-2022-23922

Name of the Vulnerable Software and Affected Versions graphql-go aka GraphQL for Go versions 0.8.0 and earlier Description The issue concerns infinite recursion in the type definition parser. Recommendations For versions 0.8.0 and earlier, at the moment, there is no information about a newer...

7.5CVSS7.3AI score0.01211EPSS
SaveExploits1References16
Github Security Blog
Github Security Blog
•added 2022/07/14 12:00 a.m.•51 views

vm2 before 3.6.11 vulnerable to sandbox escape

This affects the package vm2 before 3.6.11. It is possible to trigger a RangeError exception from the host rather than the "sandboxed" context by reaching the stack call limit with an infinite recursion. The returned object is then used to reference the mainModule property of the host code runnin...

8.3CVSS3.3AI score0.01329EPSS
SaveExploits1References7Affected Software1
osv_cve
osv_cve
•added 2022/07/13 9:15 a.m.•35 views

CVE-2019-10761

This affects the package vm2 before 3.6.11. It is possible to trigger a RangeError exception from the host rather than the "sandboxed" context by reaching the stack call limit with an infinite recursion. The returned object is then used to reference the mainModule property of the host code runnin...

8.3CVSS8.5AI score
SaveExploits0References3
NVD
NVD
•added 2022/07/13 9:15 a.m.•51 views

CVE-2019-10761

This affects the package vm2 before 3.6.11. It is possible to trigger a RangeError exception from the host rather than the "sandboxed" context by reaching the stack call limit with an infinite recursion. The returned object is then used to reference the mainModule property of the host code runnin...

8.3CVSS0.01329EPSS
SaveExploits1References3
Rows per page
Query Builder