Lucene search
+L

122 matches found

Cvelist
Cvelist
•added 2022/11/19 12:00 a.m.•61 views

CVE-2022-4066 davidmoreno onion Log response.c onion_response_flush allocation of resources

A vulnerability was found in davidmoreno onion. It has been rated as problematic. Affected by this issue is the function onionresponseflush of the file src/onion/response.c of the component Log Handler. The manipulation leads to allocation of resources. The name of the patch is...

3.5CVSS8.4AI score0.01174EPSS
SaveExploits1References3
CVE
CVE
•added 2022/11/19 12:00 a.m.•286 views

CVE-2022-4066

CVE-2022-4066 affects the davidmoreno onion project. The vulnerability is in onion_response_flush (src/onion/response.c) within the Log Handler, where manipulation leads to resource allocation. A patch identified as de8ea938342b36c28024fd8393ebc27b8442a161 is available; applying the patch is reco...

8.2CVSS5.8AI score0.01174EPSS
SaveExploits1References3Affected Software2
Vulnrichment
Vulnrichment
•added 2022/11/19 12:00 a.m.•14 views

CVE-2022-4066 davidmoreno onion Log response.c onion_response_flush allocation of resources

A vulnerability was found in davidmoreno onion. It has been rated as problematic. Affected by this issue is the function onionresponseflush of the file src/onion/response.c of the component Log Handler. The manipulation leads to allocation of resources. The name of the patch is...

3.5CVSS5.4AI score0.01174EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2022/11/19 12:00 a.m.•31 views

CVE-2022-4066 davidmoreno onion Log response.c onion_response_flush allocation of resources

A vulnerability was found in davidmoreno onion. It has been rated as problematic. Affected by this issue is the function onionresponseflush of the file src/onion/response.c of the component Log Handler. The manipulation leads to allocation of resources. The name of the patch is...

3.5CVSS5.9AI score0.01174EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2022/11/19 12:00 a.m.•18 views

PT-2022-25457 · Unknown · Davidmoreno Onion

Name of the Vulnerable Software and Affected Versions: davidmoreno onion affected versions not specified Description: A problematic issue was found in the function onion response flush of the file src/onion/response.c of the component Log Handler. The manipulation leads to allocation of resources...

8.2CVSS8AI score0.01174EPSS
SaveExploits1References6
Mend
Mend
•added 2022/11/19 12:00 a.m.•7 views

CVE-2022-4066

A vulnerability was found in davidmoreno onion. It has been rated as problematic. Affected by this issue is the function onionresponseflush of the file src/onion/response.c of the component Log Handler. The manipulation leads to allocation of resources. The name of the patch is...

8.2CVSS0.01174EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2022/11/19 12:00 a.m.•23 views

Onion security vulnerabilities

Onion http server library is a C library from the personal developer David Moreno Montero. It is used to create simple HTTP servers and web applications. A security vulnerability exists in Onion, which stems from an affected onionresponseflush function in the src/onion/response.c file in the...

8.2CVSS7.5AI score0.01174EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2022/03/29 6:15 a.m.•20 views

CVE-2022-1077

A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely and does not require any for...

7.5CVSS6.3AI score0.0251EPSS
SaveExploits0References1
Prion
Prion
•added 2022/03/29 6:15 a.m.•41 views

Information disclosure

A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely and does not require any for...

5CVSS7.2AI score0.0251EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2022/03/29 5:50 a.m.•50 views

CVE-2022-1077 TEM FLEX-1080/FLEX-1085 Log information disclosure

A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely and does not require any for...

5.3CVSS7.5AI score0.0251EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/29 12:00 a.m.•11 views

CVE-2022-1077: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely and does not require any for...

7.5CVSS6.8AI score0.0251EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/03/29 12:00 a.m.•19 views

TEM FLEX-1080 and TEM FLEX-1085 have information leakage vulnerabilities

The TEM FLEX-1080 and TEM FLEX-1085 are both a home WiFi annunciator kit from TEM Brazil. A security vulnerability exists in TEM FLEX-1080 and FLEX-1085 1.6.0, which originates from information disclosure in log.cgi of the component Log Handler...

7.5CVSS7.2AI score0.0251EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/03/29 12:00 a.m.•24 views

PT-2022-13639 · Unknown · Tem Flex-1085 +1

Name of the Vulnerable Software and Affected Versions: TEM FLEX-1080 and FLEX-1085 version 1.6.0 Description: A vulnerability was found in the Log Handler component, specifically in the log.cgi. It allows for information disclosure of hardware information through a direct request. The attack can ...

7.5CVSS7.2AI score0.0251EPSS
SaveExploits0References4
Veracode
Veracode
•added 2019/05/16 2:19 a.m.•33 views

Improper Access Control

foreman is vulnerable to improper access control. A remote, authenticated attacker with access to the foreman log file could exploit the flawed Log Handler component to view passwords for provisioned systems in the log file, allowing them to access those systems...

8.8CVSS8.4AI score0.03219EPSS
SaveExploits1References105Affected Software53
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•30 views

Sami FTP Server 2.0.1 - Remote Buffer Overflow Exploit (meta)

No description provided by source. Written by redsand This is simple, look for a call,jmp esp package Msf::Exploit::pmsoftwaresamftpd; use base Msf::Exploit; use strict; use Pex::Text; my $advanced = ; my $info = 'Name' = 'PMSoftware Samftpd Remote Exploit', 'Version' = '$Revision: 1.0 $',...

7.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2014/04/01 12:00 a.m.•8 views

PT-2014-2577

Name of the Vulnerable Software and Affected Versions War FTP Daemon version 1.82 Description The issue is related to an unspecified vulnerability that can cause a denial of service crash and possibly allow the execution of arbitrary code. This is related to log messages and the internal log...

10CVSS0.0347EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/04/01 12:00 a.m.•11 views

CVE-2013-2278: Undefined Security Weakness

Unspecified vulnerability in War FTP Daemon warftpd 1.82, when running as a Windows service, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors related to log messages and the "internal log handler to the Windows Event log."...

10CVSS6.5AI score0.0347EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2013/03/02 12:00 a.m.•56 views

Denial of Service vulnerability in War FTP Daemon 1.82

Late last week, security researchers at jura.ba reported a Denial of Service vulnerability in War FTP Daemon 1.82. The problem was rooted in the way log messages was relayed from the internal log handler to the Windows Event log when the sever was running as a Windows service. Theoretically, it...

2.2AI score
SaveExploits0
UbuntuCve
UbuntuCve
•added 2011/01/19 12:00 p.m.•26 views

CVE-2011-0490

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha makes calls to Libevent within Libevent log handlers, which might allow remote attackers to cause a denial of service daemon crash via vectors that trigger certain log messages...

5CVSS5.9AI score0.02517EPSS
SaveExploits0References2
exploitpack
exploitpack
•added 2006/01/25 12:00 a.m.•38 views

KarjaSoft Sami FTP Server 2.0.1 - Remote Buffer Overflow (Metasploit)

KarjaSoft Sami FTP Server 2.0.1 - Remote Buffer Overflow Metasploit Written by redsand This is simple, look for a call,jmp esp package Msf::Exploit::pmsoftwaresamftpd; use base "Msf::Exploit"; use strict; use Pex::Text; my $advanced = ; my $info = 'Name' = 'PMSoftware Samftpd Remote Exploit',...

0.7AI score
SaveExploits0
Rows per page
Query Builder