9967 matches found
The vulnerability of the automated system for managing personal data “Tula” stems from the lack of mechanisms to limit the number of authentication attempts. This allows a perpetrator to select a user password.
The vulnerability of the automated system for managing personal data “Tula” is related to deficiencies in the mechanism for limiting the number of authentication attempts. Exploiting this vulnerability could allow a malicious actor to select a user password remotely...
bind security update
32:9.11.4-17.P2 - Fix inefective limit of TCP clients CVE-2018-5743...
Low: Red Hat Security Advisory: curl security and bug fix update
An update for curl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
UBUNTU-CVE-2016-10764
In the Linux kernel before 4.9.6, there is an off by one in the drivers/mtd/spi-nor/cadence-quadspi.c cqspisetupflash function. There are CQSPIMAXCHIPSELECT elements in the -fpdata array so the "" should be "=" instead...
OPENSUSE-SU-2019:1808-1 Security update for tomcat
This update for tomcat to version 9.0.21 fixes the following issues: Security issues fixed: - CVE-2019-0199: Fixed a denial of service in the HTTP/2 implementation related to streams with excessive numbers of SETTINGS frames bsc1131055. - CVE-2019-0221: Fixed a cross site scripting vulnerability...
WakaTime: Rate Limit too lenient for endpoint sending emails
Rate-limiting is a process that is used to define the rate at which consumers can access APIs. Also, it determines the speed at which a consumer can access APIs. Rate limit is calculated in real time. How to reproduce? 1. Sign-up for the account for WakaTime. Domain - www.wakatime.com 2. After...
DEBIAN-CVE-2019-14248
In libnasm.a in Netwide Assembler NASM 2.14.xx, asm/pragma.c allows a NULL pointer dereference in processpragma, searchpragmalist, and nasmsetlimit when "%pragma limit" is mishandled...
UBUNTU-CVE-2019-14248
In libnasm.a in Netwide Assembler NASM 2.14.xx, asm/pragma.c allows a NULL pointer dereference in processpragma, searchpragmalist, and nasmsetlimit when "%pragma limit" is mishandled...
WordPress WPS Limit Login plugin <= 1.4.5 - Stored Cross-Site Scripting (XSS) and Protection Bypass vulnerabilities
Stored Cross-Site Scripting XSS and Protection Bypass vulnerabilities found by Julio Potier in WordPress WPS Limit Login plugin versions = 1.4.5. Solution Update the WordPress WPS Limit Login plugin to the latest available version at least 1.4.6...
WPS Limit Login <= 1.4.5 - Multiple Issues
Protection Bypass, Stored XSS...
Trellix: Vulnerability Report: NO RATE LIMIT Password RESET
A vulnerability was found where there was no limit to the number of password reset requests that could be sent to a user. This could allow an attacker who obtained a user's session to send an unlimited number of OTPs to the user, potentially leading to denial of service...
DEBIAN-CVE-2019-12467
MediaWiki through 1.32.1 has Incorrect Access Control issue 1 of 3. A spammer can use Special:ChangeEmail to send out spam with no rate limiting or ability to block them. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6...
CVE-2017-12652
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
CVE-2017-12652
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
AZL-45045 CVE-2017-12652 affecting package libpng15 1.5.30-15
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
DEBIAN-CVE-2017-12652
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
AZL-43573 CVE-2017-12652 affecting package libpng12 1.2.57-16
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
AZL-43468 CVE-2017-12652 affecting package libpng15 1.5.30-15
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
