Lucene search
+L

9367 matches found

NVD
NVD
•added 2020/01/08 5:15 p.m.•25 views

CVE-2014-5287

A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input in the Web User Interface WUI...

8.8CVSS8.6AI score0.07997EPSS
SaveExploits5References3
Prion
Prion
•added 2020/01/08 5:15 p.m.•21 views

Code injection

A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input in the Web User Interface WUI...

6.8CVSS7.2AI score0.07997EPSS
SaveExploits5References3Affected Software1
Cvelist
Cvelist
•added 2020/01/08 4:36 p.m.•36 views

CVE-2014-5287

A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input in the Web User Interface WUI...

8.7AI score0.07997EPSS
SaveExploits5References3
CVE
CVE
•added 2020/01/08 4:36 p.m.•79 views

CVE-2014-5287

CVE-2014-5287 affects Kemp Load Master 7.1-16 and earlier; a Bash script injection vulnerability arises from failure to sanitize input in the Web UI. Connected sources document multiple vulnerabilities (RCE, CSRF, XSS, DoS) in Kemp Load Master 7.1-16 and earlier, with exploit references (Exploit-...

8.8CVSS8.6AI score0.07997EPSS
SaveExploits5References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/08 12:00 a.m.•1 views

CVE-2014-5287: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input in the Web User Interface WUI...

8.8CVSS7.8AI score0.07997EPSS
SaveExploits5References8
Akamai Blog
Akamai Blog
•added 2020/01/06 5:30 p.m.•180 views

Geolocation and DNS Traffic Management

What is GTM Global Traffic Management, or GTM, is a DNS-based load balancing service that offers application owners a level of flexibility and insight that is unmatched by traditional on-prem solutions. Highly scalable and fault-resilient, GTM offers customers a layer of abstraction between...

0.1AI score
SaveExploits0
OSV
OSV
•added 2020/01/02 2:16 p.m.•18 views

CVE-2019-20221

In Support Incident Tracker SiT! 3.67, Load Plugins input in the config.php page is affected by XSS. The XSS payload is, for example, executed on the about.php page...

6.1CVSS5.8AI score0.00668EPSS
SaveExploits1References1
NVD
NVD
•added 2020/01/02 2:16 p.m.•40 views

CVE-2019-20221

In Support Incident Tracker SiT! 3.67, Load Plugins input in the config.php page is affected by XSS. The XSS payload is, for example, executed on the about.php page...

6.1CVSS6AI score0.00668EPSS
SaveExploits1References1
Prion
Prion
•added 2020/01/02 2:16 p.m.•26 views

Cross site scripting

In Support Incident Tracker SiT! 3.67, Load Plugins input in the config.php page is affected by XSS. The XSS payload is, for example, executed on the about.php page...

4.3CVSS6AI score0.00668EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
•added 2020/01/02 12:00 a.m.•21 views

Support Incident Tracker Cross-Site Scripting Vulnerability (CNVD-2020-04725)

Support Incident Tracker SiT! is a PHP and MySQL based technical support phone/email tracking system. A cross-site scripting vulnerability exists in the Load Plugins field of the config.php page in version 3.67 of SiT! The vulnerability stems from a lack of proper validation of client-side data i...

6.1CVSS6.4AI score0.00668EPSS
SaveExploits1References1
OSV
OSV
•added 2019/12/30 4:15 a.m.•7 views

DEBIAN-CVE-2019-20093

The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file, because of ImageExtractor.cpp...

5.5CVSS7AI score0.01365EPSS
SaveExploits1References1
Citrix
Citrix
•added 2019/12/30 12:00 a.m.•11 views

Citrix Licensing Server Vendor Daemon Stops Intermittently

License Administration Console reports an alert stating the Vendor Daemon is down. The server displays the following error: Citrix XenApp cannot contact the license server And / or Qfarm /Load reports a load of 20000...

7.1AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2019/12/28 10:04 a.m.•30 views

CVE-2018-12122

It was found that Node.js HTTP server was vulnerable to a Slowloris type attack. An attacker could make long lived connections by sending bytes very slowly to the server, saturating its resource and possibly resulting in a denial of service. Mitigation The use of a Load Balancer or a Reverse Prox...

7.5CVSS2.7AI score0.41288EPSS
SaveExploits0References2
OSV
OSV
•added 2019/12/27 2:15 a.m.•19 views

DEBIAN-CVE-2019-20022

An invalid memory address dereference was discovered in loadpnm in frompnm.c in libsixel before 1.8.3...

6.5CVSS6.7AI score0.00926EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2019/12/27 12:00 a.m.•12 views

PT-2019-16057 · Libsixel +1 · Libsixel +1

Name of the Vulnerable Software and Affected Versions: libsixel versions prior to 1.8.3 Description: An invalid memory address dereference was found in the load pnm function in frompnm.c. Recommendations: For versions prior to 1.8.3, update to version 1.8.3 or later to resolve the issue...

9.8CVSS5.8AI score0.01551EPSS
SaveExploits21References61
OSV
OSV
•added 2019/12/16 4:15 p.m.•13 views

UBUNTU-CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

7.5CVSS7.1AI score0.02166EPSS
SaveExploits1References4
CNVD
CNVD
•added 2019/12/16 12:00 a.m.•9 views

Unspecified Vulnerability in Broadcom CA Automic Sysload

Broadcom CA Automic Sysload is a device load monitoring system from Broadcom USA. The system supports performance management, performance diagnostics and system evaluation. A security vulnerability exists in Broadcom CA Automic Sysload that can be exploited by an attacker to execute arbitrary...

9.8CVSS7.4AI score0.02826EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/12/16 12:00 a.m.•19 views

Microsoft Windows Windows Printer Service Privilege Vulnerability

Microsoft Windows is a family of operating systems from Microsoft.Microsoft Windows Windows Printer Service is a printing service in Microsoft Windows. A privilege vulnerability exists in Microsoft Windows Windows Printer Service, which originates when the program does not properly validate the...

7.8CVSS7.7AI score0.01004EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/12/13 12:00 a.m.•15 views

stb_image.h Buffer Overflow Vulnerability

stbimage.h is an image library. A buffer overflow vulnerability exists in the 'stbiloadmain' function in stbimage.h version 2.23 used in libsixel and other products, which arises from a networked system or product that does not properly validate data boundaries when executing an operation in...

8.8CVSS8.9AI score0.01392EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/12/13 12:00 a.m.•16 views

libsixel buffer overflow vulnerability (CNVD-2020-12707)

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A buffer overflow vulnerability exists in the 'loadsixel' function of the loader.c file in libsixel version 1.8.2, which originates when a networked system or product perform...

8.8CVSS7.4AI score0.01392EPSS
SaveExploits1References1
Rows per page
Query Builder