Lucene search
+L

21795 matches found

Veracode
Veracode
added 2022/03/22 5:57 a.m.41 views

Denial Of Service (DoS)

Go-Ethereum is vulnerable to denial of service. An attacker is able to exploit the vulnerability and crash the system by sending an excessive amount of messages to a node...

7.5CVSS3.7AI score0.01197EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2022/03/22 12:00 a.m.41 views

IBM Engineering Requirements Quality Assistant Denial of Service Vulnerability

IBM Engineering Requirements Quality Assistant is a Watson AI-based software from IBM USA used to assist developers in improving the quality of engineering requirements. The application significantly reduces the cost of finding defects, facilitates early detection of requirements errors in the...

6.5CVSS6.4AI score0.01052EPSS
SaveExploits0References1
Circl
Circl
added 2022/03/21 11:26 p.m.19 views

CVE-2022-23349

creationtimestamp| type| source ---|---|--- 2022-03-21 23:26:32+00:00| seen| https://t.me/cibsecurity/39345...

8.8CVSS8.1AI score0.00652EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/03/20 1:15 a.m.8 views

CVE-2022-24125

The matchmaking servers of Bandai Namco FromSoftware Dark Souls III through 2022-03-19 allow remote attackers to send arbitrary push requests to clients via a RequestSendMessageToPlayers request. For example, ability to send a push message to hundreds of thousands of machines is only restricted o...

8.8CVSS5.7AI score0.02675EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
added 2022/03/20 12:00 a.m.12 views

PT-2022-16479 · Fromsoftware · Dark Souls Iii

Name of the Vulnerable Software and Affected Versions: Dark Souls III versions through 2022-03-19 Description: The matchmaking servers allow remote attackers to send arbitrary push requests to clients via a "RequestSendMessageToPlayers" request. This issue is restricted on the client side and can...

8.8CVSS8.4AI score0.02675EPSS
SaveExploits2References4
ATTACKERKB
ATTACKERKB
added 2022/03/18 9:15 p.m.15 views

CVE-2022-27250

The UNISOC chipset through 2022-03-15 allows attackers to obtain remote control of a mobile phone, e.g., to obtain sensitive information from text messages or the device's screen, record video of the device's physical environment, or modify data...

10CVSS5.9AI score0.01237EPSS
SaveExploits0References2
OSV
OSV
added 2022/03/18 9:15 p.m.10 views

CVE-2022-27250

The UNISOC chipset through 2022-03-15 allows attackers to obtain remote control of a mobile phone, e.g., to obtain sensitive information from text messages or the device's screen, record video of the device's physical environment, or modify data...

9.8CVSS5.8AI score0.01237EPSS
SaveExploits0References1
Prion
Prion
added 2022/03/18 9:15 p.m.31 views

Open redirect

The UNISOC chipset through 2022-03-15 allows attackers to obtain remote control of a mobile phone, e.g., to obtain sensitive information from text messages or the device's screen, record video of the device's physical environment, or modify data...

10CVSS8.9AI score0.01237EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/03/18 8:49 p.m.40 views

CVE-2022-27250

The UNISOC chipset through 2022-03-15 allows attackers to obtain remote control of a mobile phone, e.g., to obtain sensitive information from text messages or the device's screen, record video of the device's physical environment, or modify data...

9.2AI score0.01237EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2022/03/18 12:01 a.m.40 views

Denial of service in go-ethereum

Go-Ethereum v1.10.9 was discovered to contain an issue which allows attackers to cause a denial of service DoS via sending an excessive amount of messages to a node. This is caused by missing memory in the component /ethash/algorithm.go...

7.5CVSS5.8AI score0.01197EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/03/18 12:01 a.m.50 views

GHSA-VRCC-G6VJ-MH5W Denial of service in go-ethereum

Go-Ethereum v1.10.9 was discovered to contain an issue which allows attackers to cause a denial of service DoS via sending an excessive amount of messages to a node. This is caused by missing memory in the component /ethash/algorithm.go...

7.5CVSS7.3AI score0.01197EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/03/18 12:00 a.m.16 views

UNISOC chipset 安全漏洞

The UNISOC chipset is an integrated circuit chipset from China's Unisplendour UNISOC. The UNISOC chipset contains a security vulnerability that could allow an attacker to gain remote control of a cell phone, such as obtaining sensitive information from text messages or the device screen, recordin...

10CVSS8.4AI score0.01237EPSS
SaveExploits0References2
OSV
OSV
added 2022/03/17 12:15 a.m.23 views

CVE-2021-42219

Go-Ethereum v1.10.9 was discovered to contain an issue which allows attackers to cause a denial of service DoS via sending an excessive amount of messages to a node. This is caused by missing memory in the component /ethash/algorithm.go...

7.5CVSS7.1AI score
SaveExploits0References1
OSV
OSV
added 2022/03/16 3:15 p.m.12 views

CVE-2022-25251

When connecting to a certain port Axeda agent All versions and Axeda Desktop Server for Windows All versions may allow an attacker to send certain XML messages to a specific port without proper authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated...

9.8CVSS5.8AI score0.01871EPSS
SaveExploits0References2
NVD
NVD
added 2022/03/16 3:15 p.m.20 views

CVE-2022-25251

When connecting to a certain port Axeda agent All versions and Axeda Desktop Server for Windows All versions may allow an attacker to send certain XML messages to a specific port without proper authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated...

9.8CVSS0.01871EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/03/16 3:15 p.m.10 views

CVE-2021-39734

In sendMessage of OneToOneChatImpl.java ? TBD, there is a possible way to send an RCS message without permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS6.5AI score0.00104EPSS
SaveExploits0References2
Wired Threat Level
Wired Threat Level
added 2022/03/16 11:00 a.m.23 views

The Workaday Life of the World’s Most Dangerous Ransomware Gang

A Ukrainian researcher leaked 60,000 messages from inside the Conti ransomware group. This is what they reveal...

7AI score
SaveExploits0
CNNVD
CNNVD
added 2022/03/15 12:00 a.m.12 views

Jenkins Plugin Semantic Versioning 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.An access control error vulnerability exis...

6.5CVSS5.8AI score0.01399EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2022/03/14 11:15 p.m.17 views

CVE-2022-24762

sysend.js is a library that allows a user to send messages between pages that are open in the same browser. Users that use cross-origin communication may have their communications intercepted. Impact is limited by the communication occurring in the same browser. This issue has been patched in...

6.5CVSS5.8AI score0.00684EPSS
SaveExploits1References5Affected Software1
CNVD
CNVD
added 2022/03/14 12:00 a.m.124 views

libcaca Denial of Service Vulnerability

libcaca is an open source software library that converts images to color ASCII artwork. libcaca suffers from a denial of service vulnerability that stems from not properly handling incoming error messages, which can be exploited by remote attackers to cause a denial of service...

6.5CVSS4.5AI score0.02752EPSS
SaveExploits1References1
Rows per page
Query Builder