Lucene search
+L

8078 matches found

RedhatCVE
RedhatCVE
•added 2019/10/30 7:25 p.m.•35 views

CVE-2019-17592

The csv-parse module before 4.4.6 for Node.js is vulnerable to Regular Expression Denial of Service. The isInt function contains a malformed regular expression that processes large crafted input very slowly. This is triggered when using the cast option...

7.5CVSS3.2AI score0.02276EPSS
SaveExploits0References1
NVD
NVD
•added 2019/10/22 9:15 p.m.•24 views

CVE-2015-9498

The wps-hide-login plugin before 1.1 for WordPress has CSRF that affects saving an option value...

8.8CVSS8.8AI score0.00718EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/10/22 8:36 p.m.•26 views

CVE-2015-9498

The wps-hide-login plugin before 1.1 for WordPress has CSRF that affects saving an option value...

8.9AI score0.00718EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/10/22 12:00 a.m.•7 views

PT-2019-7457

Name of the Vulnerable Software and Affected Versions wps-hide-login plugin versions prior to 1.1 Description The issue affects the saving of an option value and is related to CSRF. Recommendations For versions prior to 1.1, update to version 1.1 or later to resolve the issue...

8.8CVSS0.00718EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/22 12:00 a.m.•7 views

CVE-2015-9498: Cross-Site Request Forgery (CSRF)

The wps-hide-login plugin before 1.1 for WordPress has CSRF that affects saving an option value...

8.8CVSS7.8AI score0.00718EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2019/10/22 12:00 a.m.•32 views

SUSE SLED12 / SLES12 Security Update : dhcp (SUSE-SU-2019:2727-1)

This update for dhcp fixes the following issues : Secuirty issue fixed : CVE-2019-6470: Fixed DHCPv6 server crashes bsc1134078. Bug fixes: Add compile option --enable-secs-byteorder to avoid duplicate lease warnings bsc1089524. Use IPv6 when called as dhclient6, dhcpd6, and dhcrelay6 bsc1136572...

7.5CVSS6.6AI score0.08813EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2019/10/21 12:00 a.m.•28 views

openSUSE Security Update : dhcp (openSUSE-2019-2340)

This update for dhcp fixes the following issues : Secuirty issue fixed : - CVE-2019-6470: Fixed DHCPv6 server crashes bsc1134078. Bug fixes : - Add compile option --enable-secs-byteorder to avoid duplicate lease warnings bsc1089524. - Use IPv6 when called as dhclient6, dhcpd6, and dhcrelay6...

7.5CVSS6.7AI score0.08813EPSS
SaveExploits1References4
OSV
OSV
•added 2019/10/16 6:15 p.m.•16 views

ALPINE-CVE-2019-6473

An invalid hostname option can trigger an assertion failure in the Kea DHCPv4 server process kea-dhcp4, causing the server process to exit. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2...

6.5CVSS7AI score0.01122EPSS
SaveExploits0References1
NVD
NVD
•added 2019/10/16 6:15 p.m.•24 views

CVE-2019-6473

An invalid hostname option can trigger an assertion failure in the Kea DHCPv4 server process kea-dhcp4, causing the server process to exit. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2...

6.5CVSS6.4AI score0.01122EPSS
SaveExploits0References1
OSV
OSV
•added 2019/10/16 6:15 p.m.•14 views

DEBIAN-CVE-2019-6473

An invalid hostname option can trigger an assertion failure in the Kea DHCPv4 server process kea-dhcp4, causing the server process to exit. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2...

6.5CVSS6.6AI score0.01122EPSS
SaveExploits0References1
Mend
Mend
•added 2019/10/16 5:22 p.m.•6 views

CVE-2019-6473

An invalid hostname option can trigger an assertion failure in the Kea DHCPv4 server process kea-dhcp4, causing the server process to exit. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2...

7.1CVSS0.01122EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2019/10/16 5:22 p.m.•108 views

CVE-2019-6473

An invalid hostname option can trigger an assertion failure in the Kea DHCPv4 server process kea-dhcp4, causing the server process to exit. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2...

6.5CVSS6.4AI score0.01122EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/16 12:00 a.m.•6 views

CVE-2019-6473: Reachable Assertion

An invalid hostname option can trigger an assertion failure in the Kea DHCPv4 server process kea-dhcp4, causing the server process to exit. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2...

6.5CVSS6.7AI score0.01122EPSS
SaveExploits0References2
OSV
OSV
•added 2019/10/15 8:06 p.m.•21 views

GHSA-582F-P4PG-XC74 Regular Expression Denial of Service in csv-parse

Versions of csv-parse prior to 4.4.6 are vulnerable to Regular Expression Denial of Service. The isInt function contains a malformed regular expression that processes large specially-crafted input very slowly, leading to a Denial of Service. This is triggered when using the cast option...

7.5CVSS5.9AI score0.02276EPSS
SaveExploits0References6
ThreatPost
ThreatPost
•added 2019/10/15 3:55 p.m.•107 views

Sudo Bug Opens Root Access on Linux Systems

A vulnerability in Sudo, a core command utility for Linux, could allow a user to execute commands as a root user even if that root access has been specifically disallowed. Sudo is a utility that allows a system administrator to give certain users or groups of users the ability to run commands in...

9CVSS1.3AI score0.63764EPSS
SaveExploits12References6
OSV
OSV
•added 2019/10/14 8:15 p.m.•33 views

CVE-2019-17592

The csv-parse module before 4.4.6 for Node.js is vulnerable to Regular Expression Denial of Service. The isInt function contains a malformed regular expression that processes large crafted input very slowly. This is triggered when using the cast option...

7.5CVSS7.7AI score
SaveExploits0References4
Mend
Mend
•added 2019/10/14 7:59 p.m.•4 views

CVE-2019-17592

The csv-parse module before 4.4.6 for Node.js is vulnerable to Regular Expression Denial of Service. The isInt function contains a malformed regular expression that processes large crafted input very slowly. This is triggered when using the cast option...

8.7CVSS0.02276EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2019/10/14 7:59 p.m.•54 views

CVE-2019-17592

The csv-parse module before 4.4.6 for Node.js is vulnerable to Regular Expression Denial of Service. The isInt function contains a malformed regular expression that processes large crafted input very slowly. This is triggered when using the cast option...

7.6AI score0.02276EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/14 12:00 a.m.•4 views

CVE-2019-17592: Uncontrolled Resource Consumption

The csv-parse module before 4.4.6 for Node.js is vulnerable to Regular Expression Denial of Service. The isInt function contains a malformed regular expression that processes large crafted input very slowly. This is triggered when using the cast option...

7.5CVSS7.2AI score0.02276EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/10/14 12:00 a.m.•3 views

PT-2019-15217

Name of the Vulnerable Software and Affected Versions csv-parse versions prior to 4.4.6 Description The issue concerns a Regular Expression Denial of Service in the isInt function, which contains a malformed regular expression. This function processes large crafted input very slowly when the cast...

7.5CVSS0.02276EPSS
SaveExploits0References9
Rows per page
Query Builder