Lucene search
+L

10367 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/01 12:00 a.m.•5 views

CVE-2024-9228: Improper Neutralization of Input During Web Page Generation

The Loggedin – Limit Active Logins plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.3.1. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS6AI score0.00392EPSS
SaveExploits0References1
Mageia
Mageia
•added 2024/09/27 5:21 p.m.•61 views

Updated java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk, & java-latest-openjdk packages fix security vulnerabilities

Potential UTF8 size overflow. CVE-2024-21131 Excessive symbol length can lead to infinite loop. CVE-2024-21138 Range Check Elimination RCE pre-loop limit overflow. CVE-2024-21140 Pack200 increase loading time due to improper header validation. CVE-2024-21144 Out-of-bounds access in 2D image...

7.4CVSS7.2AI score0.01257EPSS
SaveExploits0References5
NVD
NVD
•added 2024/09/27 5:15 p.m.•31 views

CVE-2024-38809

Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack. Users of affected versions should upgrade to the corresponding fixed version. Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers,...

5.3CVSS0.00852EPSS
SaveExploits0References2
OSV
OSV
•added 2024/09/27 5:15 p.m.•30 views

CVE-2024-38809

Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack. Users of affected versions should upgrade to the corresponding fixed version. Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers,...

6.6AI score
SaveExploits0References2
OSV
OSV
•added 2024/09/27 5:15 p.m.•19 views

UBUNTU-CVE-2024-38809

Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack. Users of affected versions should upgrade to the corresponding fixed version. Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers,...

5.3CVSS6.8AI score0.00852EPSS
SaveExploits0References3
CVE
CVE
•added 2024/09/27 4:39 p.m.•378 views

CVE-2024-38809

CVE-2024-38809 is a Spring Framework DoS vulnerability arising when parsing ETags from If-Match/If-None-Match headers. Affected OpenPages advisory confirms remediation by upgrading Spring to a fixed package version (OpenPages uses Spring Framework 5.3.x; remediation version stated as 5.3.39.2511)...

5.3CVSS6.7AI score0.00852EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/09/27 4:39 p.m.•36 views

CVE-2024-38809

Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack. Users of affected versions should upgrade to the corresponding fixed version. Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers,...

5.3CVSS5.2AI score0.00852EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/09/27 4:39 p.m.•44 views

CVE-2024-38809

Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack. Users of affected versions should upgrade to the corresponding fixed version. Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers,...

5.3CVSS0.00852EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/27 1:15 p.m.•19 views

UBUNTU-CVE-2024-46816

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Stop amdgpudm initialize when link nums greater than maxlinks Why Coverity report OVERRUN warning. There are only maxlinks elements within dc-links. link count could up to AMDGPUDMMAXDISPLAYINDEX 31. How Make sur...

7.8CVSS6.2AI score0.00265EPSS
SaveExploits0References27
CNNVD
CNNVD
•added 2024/09/27 12:00 a.m.•17 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to check if the number of streams exceeds a limit during initialization...

5.5CVSS6.3AI score0.00263EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2024/09/27 12:00 a.m.•8 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not ensuring that the maximum number of links is not exceeded...

5.5CVSS6.6AI score0.00265EPSS
SaveExploits0References5
OSV
OSV
•added 2024/09/26 6:04 p.m.•24 views

CLSA-2024-1727373881 gnutls: Fix of CVE-2024-28835

CVE-2024-28835: fix crash when verifying a certificate chain with more than 16 certificates...

5CVSS6.4AI score0.00389EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/26 10:15 a.m.•16 views

CVE-2024-9199

Rate limit vulnerability in Clibo Manager v1.1.9.2 that could allow an attacker to send a large number of emails to the victim in a short time, affecting availability and leading to a denial of service DoS...

7.5CVSS5.8AI score0.00322EPSS
SaveExploits0References1
NVD
NVD
•added 2024/09/26 10:15 a.m.•40 views

CVE-2024-9199

Rate limit vulnerability in Clibo Manager v1.1.9.2 that could allow an attacker to send a large number of emails to the victim in a short time, affecting availability and leading to a denial of service DoS...

7.5CVSS0.00322EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/09/26 9:50 a.m.•50 views

CVE-2024-9199 Rate limit vulnerability in Clibo Manager

Rate limit vulnerability in Clibo Manager v1.1.9.2 that could allow an attacker to send a large number of emails to the victim in a short time, affecting availability and leading to a denial of service DoS...

5.8CVSS0.00322EPSS
SaveExploits0References1
CVE
CVE
•added 2024/09/26 9:50 a.m.•68 views

CVE-2024-9199

CVE-2024-9199 affects Clibo Manager v1.1.9.2. The issue is a rate-limit vulnerability in the email-sending flow, which could allow an attacker to flood recipients with emails in a short period and cause a DoS by impacting availability. Public sources consistently reference the vulnerability in Cl...

7.5CVSS5.9AI score0.00322EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/09/26 9:50 a.m.•34 views

CVE-2024-9199 Rate limit vulnerability in Clibo Manager

Rate limit vulnerability in Clibo Manager v1.1.9.2 that could allow an attacker to send a large number of emails to the victim in a short time, affecting availability and leading to a denial of service DoS...

5.8CVSS6.8AI score0.00322EPSS
SaveExploits0References1
Citrix
Citrix
•added 2024/09/26 12:00 a.m.•19 views

How to limit NetScaler Management access

With this document you may limit the NetScaler Management access to certain IP address/es...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/09/26 12:00 a.m.•20 views

PT-2024-39483 · Unknown · Clibo Manager

Name of the Vulnerable Software and Affected Versions: Clibo Manager version 1.1.9.2 Description: The issue is related to a rate limit vulnerability that could allow an attacker to send a large number of emails to the victim in a short time, affecting availability and leading to a denial of servi...

7.5CVSS7.1AI score0.00322EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/26 12:00 a.m.•10 views

CVE-2024-9199: Improper Control of Interaction Frequency

Rate limit vulnerability in Clibo Manager v1.1.9.2 that could allow an attacker to send a large number of emails to the victim in a short time, affecting availability and leading to a denial of service DoS...

7.5CVSS5.9AI score0.00322EPSS
SaveExploits0References1
Rows per page
Query Builder