Lucene search
K

1145 matches found

NVD
NVD
added 2022/09/19 9:15 p.m.19 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS0.00392EPSS
Exploits1References4
OSV
OSV
added 2022/09/19 9:15 p.m.1 views

DEBIAN-CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS4.8AI score0.00392EPSS
Exploits1References1
OSV
OSV
added 2022/09/19 9:15 p.m.33 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS6.5AI score0.00392EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2022/09/19 9:15 p.m.1 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS5.9AI score0.00392EPSS
Exploits1References5
Prion
Prion
added 2022/09/19 9:15 p.m.18 views

Design/Logic Flaw

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

1.4CVSS5.7AI score0.00392EPSS
Exploits1References4Affected Software2
UbuntuCve
UbuntuCve
added 2022/09/19 9:15 p.m.50 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS5.9AI score0.00392EPSS
Exploits1References3
CVE
CVE
added 2022/09/19 12:0 a.m.74 views

CVE-2022-28201

CVE-2022-28201 affects MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. The root cause is an infinite recursion triggered when a user with editinterface permission mishandles a bare local interwiki for the mainpage message. This can lead to a denial of service via recursio...

4.4CVSS5.6AI score0.00392EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2022/09/19 12:0 a.m.20 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

6.1AI score0.00392EPSS
Exploits1References4
Debian CVE
Debian CVE
added 2022/09/19 12:0 a.m.99 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS4.5AI score0.00392EPSS
Exploits1
OSV
OSV
added 2022/08/02 12:0 a.m.24 views

GHSA-H3QM-JRRF-CGJ3 graphql-go has infinite recursion in the type definition parser

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS7.5AI score0.00767EPSS
Exploits1References6
ATTACKERKB
ATTACKERKB
added 2022/08/01 10:15 p.m.2 views

CVE-2022-37315

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS5.8AI score0.00767EPSS
Exploits1References2
OSV
OSV
added 2022/08/01 10:15 p.m.4 views

CVE-2022-37315

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS5.8AI score0.00767EPSS
Exploits1References1
NVD
NVD
added 2022/08/01 10:15 p.m.14 views

CVE-2022-37315

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS0.00767EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2022/08/01 10:15 p.m.51 views

CVE-2022-37315

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS7.1AI score0.00767EPSS
Exploits1References3
OSV
OSV
added 2022/08/01 10:15 p.m.1 views

UBUNTU-CVE-2022-37315

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS7.1AI score0.00767EPSS
Exploits1References4
Prion
Prion
added 2022/08/01 10:15 p.m.14 views

Design/Logic Flaw

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

5CVSS7.5AI score0.00767EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/08/01 12:0 a.m.2 views

graphql-go 安全漏洞

graphql-go is an open source GraphQL server focused on ease of use. A security vulnerability exists in graphql-go also known as GraphQL for Go version 0.8.0, which stems from the type definition parser having infinite recursion...

7.5CVSS7.3AI score0.00767EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2022/08/01 12:0 a.m.7 views

PT-2022-23922 · Unknown · Graphql-Go

Name of the Vulnerable Software and Affected Versions: graphql-go aka GraphQL for Go versions 0.8.0 and earlier Description: The issue concerns infinite recursion in the type definition parser. Recommendations: For versions 0.8.0 and earlier, at the moment, there is no information about a newer...

7.5CVSS7.3AI score0.00767EPSS
Exploits1References12
Github Security Blog
Github Security Blog
added 2022/07/14 12:0 a.m.32 views

vm2 before 3.6.11 vulnerable to sandbox escape

This affects the package vm2 before 3.6.11. It is possible to trigger a RangeError exception from the host rather than the "sandboxed" context by reaching the stack call limit with an infinite recursion. The returned object is then used to reference the mainModule property of the host code runnin...

8.3CVSS3.3AI score0.00974EPSS
Exploits1References7Affected Software1
NVD
NVD
added 2022/07/13 9:15 a.m.14 views

CVE-2019-10761

This affects the package vm2 before 3.6.11. It is possible to trigger a RangeError exception from the host rather than the "sandboxed" context by reaching the stack call limit with an infinite recursion. The returned object is then used to reference the mainModule property of the host code runnin...

8.3CVSS0.00974EPSS
Exploits1References3
Rows per page
Query Builder