Lucene search
+L

1868 matches found

Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•16 views

WordPress Easy Math Captcha for CF7 plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Easy Math Captcha for CF7 plugin versions = 1.0.0. Solution No patched version available...

3.6AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•18 views

WordPress Easy Math Captcha for CF7 plugin <= 1.0.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Easy Math Captcha for CF7 plugin versions = 1.0.0. Solution No patched version available...

2.6AI score
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
•added 2022/02/24 9:55 a.m.•34 views

python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions

A flaw was found in python-pillow. The vulnerability occurs due to Improper Neutralization, leading to command injection. This flaw allows an attacker to externally-influenced input commands that modify the intended command...

9.8CVSS6.8AI score0.03334EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2022/02/24 9:55 a.m.•24 views

python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions

A flaw was found in python-pillow. The vulnerability occurs due to Improper Neutralization, leading to command injection. This flaw allows an attacker to externally-influenced input commands that modify the intended command...

9.8CVSS6.8AI score0.03334EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2022/02/22 5:47 p.m.•21 views

python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions

A flaw was found in python-pillow. The vulnerability occurs due to Improper Neutralization, leading to command injection. This flaw allows an attacker to externally-influenced input commands that modify the intended command...

9.8CVSS6.8AI score0.03334EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2022/02/22 3:58 p.m.•13 views

python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions

A flaw was found in python-pillow. The vulnerability occurs due to Improper Neutralization, leading to command injection. This flaw allows an attacker to externally-influenced input commands that modify the intended command...

9.8CVSS6.8AI score0.03334EPSS
SaveExploits0References5
OSV
OSV
•added 2022/02/17 5:33 p.m.•51 views

GO-2021-0242 Panic on inputs with large exponents in math/big

Rat.SetString and Rat.UnmarshalText may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents...

7.5CVSS6.6AI score0.03372EPSS
SaveExploits1References4
OSV
OSV
•added 2022/02/14 11:04 a.m.•11 views

OESA-2022-1526 python-pillow security update

Python image processing library. Security Fixes: pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.CVE-2022-22816 PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec...

9.8CVSS7.1AI score0.03334EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/02/11 1:49 p.m.•77 views

CVE-2022-23772

A flaw was found in the big package of the math library in golang. The Rat.SetString could cause an overflow, and if left unhandled, it could lead to excessive memory use. This issue could allow a remote attacker to impact the availability of the system...

7.8CVSS7.6AI score0.02807EPSS
SaveExploits0References4
OSV
OSV
•added 2022/02/11 1:15 a.m.•13 views

DEBIAN-CVE-2022-23772

Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption...

7.5CVSS7.8AI score0.02807EPSS
SaveExploits0References1
NVD
NVD
•added 2022/02/11 1:15 a.m.•29 views

CVE-2022-23772

Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption...

7.8CVSS0.02807EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2022/02/11 1:15 a.m.•108 views

CVE-2022-23772

Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption...

7.8CVSS7.8AI score0.02807EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/02/11 1:15 a.m.•16 views

CVE-2022-23772

Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption...

7.8CVSS7.8AI score0.02807EPSS
SaveExploits0References7
OSV
OSV
•added 2022/02/11 1:15 a.m.•16 views

UBUNTU-CVE-2022-23772

Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption...

7.5CVSS7.8AI score0.02807EPSS
SaveExploits0References3
Prion
Prion
•added 2022/02/11 1:15 a.m.•38 views

Memory corruption

Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption...

7.8CVSS8.3AI score0.02807EPSS
SaveExploits0References6Affected Software2
Cvelist
Cvelist
•added 2022/02/11 12:11 a.m.•51 views

CVE-2022-23772

Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption...

8.7AI score0.02807EPSS
SaveExploits0References6
Mend
Mend
•added 2022/02/11 12:11 a.m.•2 views

CVE-2022-23772

Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption...

8.7CVSS0.02807EPSS
SaveExploits0References15
CVE
CVE
•added 2022/02/11 12:11 a.m.•531 views

CVE-2022-23772

CVE-2022-23772 affects Go (golang) where Rat.SetString in math/big can overflow, leading to uncontrolled memory consumption. Connected advisories confirm this issue alongside other Go vulnerabilities (e.g., CVE-2022-23773, CVE-2022-23806) across multiple Go components (cmd/go, crypto/elliptic, ar...

7.8CVSS7.8AI score0.02807EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
•added 2022/02/11 12:11 a.m.•48 views

CVE-2022-23772

Removed by vendor...

7.8CVSS7.8AI score0.02807EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/11 12:00 a.m.•6 views

CVE-2022-23772: Integer Overflow or Wraparound

Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption...

7.8CVSS7.3AI score0.02807EPSS
SaveExploits0References2
Rows per page
Query Builder