Lucene search
+L

124 matches found

Tenable Nessus
Tenable Nessus
•added 2024/07/24 12:00 a.m.•38 views

Photon OS 4.0: Openresty PHSA-2024-4.0-0539

An update of the openresty package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0539. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

7.5CVSS8.5AI score0.99999EPSS
SaveExploits21References2
RedhatCVE
RedhatCVE
•added 2024/07/23 9:24 p.m.•37 views

CVE-2024-39702

A flaw was found in the OpenResty package. Affected versions of this package are vulnerable to denial of service DoS through the string hashing function. This flaw allows an attacker to cause excessive resource usage and potentially lead to a denial of service with relatively few incoming request...

7.5CVSS6.3AI score0.00556EPSS
SaveExploits0References4
NVD
NVD
•added 2024/07/23 4:15 p.m.•44 views

CVE-2024-39702

In ljstrhash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function used during string interning allows HashDoS Hash Denial of Service attacks. An attacker could cause excessive resource usage during proxy operations via crafted requests, potentially leading to a denial of service...

5.9CVSS0.00556EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/07/23 12:00 a.m.•15 views

OpenResty 安全漏洞

OpenResty is an American OpenResty open source web application server based on Nginx and Lua. A security vulnerability exists in OpenResty, which stems from a hash denial of service vulnerability discovered in ljstrhash.c. The vulnerability is caused by a hash denial of service vulnerability...

5.9CVSS7.5AI score0.00556EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/07/23 12:00 a.m.•22 views

PT-2024-28641

Name of the Vulnerable Software and Affected Versions OpenResty versions 1.19.3.1 through 1.25.3.1 Description The string hashing function in OpenResty allows HashDoS Hash Denial of Service attacks, which can cause excessive resource usage during proxy operations via crafted requests. This can...

5.9CVSS7.3AI score0.00556EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/23 12:00 a.m.•2 views

CVE-2024-39702: Inefficient Algorithmic Complexity

In ljstrhash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function used during string interning allows HashDoS Hash Denial of Service attacks. An attacker could cause excessive resource usage during proxy operations via crafted requests, potentially leading to a denial of service...

5.9CVSS7.2AI score0.00556EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/23 12:00 a.m.•14 views

CVE-2024-39702

In ljstrhash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function used during string interning allows HashDoS Hash Denial of Service attacks. An attacker could cause excessive resource usage during proxy operations via crafted requests, potentially leading to a denial of service...

6.7AI score0.00556EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/23 12:00 a.m.•259 views

CVE-2024-39702

The OpenResty web application server (versions 1.19.3.1 through 1.25.3.1 ) is vulnerable to a HashDoS (Hash Denial of Service) attack due to a flaw in the string hashing function located in lj_str_hash.c. This vulnerability specifically affects the OpenResty fork in the openresty/luajit2 GitHub r...

5.9CVSS6.4AI score0.00556EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/07/23 12:00 a.m.•41 views

CVE-2024-39702

In ljstrhash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function used during string interning allows HashDoS Hash Denial of Service attacks. An attacker could cause excessive resource usage during proxy operations via crafted requests, potentially leading to a denial of service...

0.00556EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/23 12:00 a.m.•18 views

CVE-2024-39702

In ljstrhash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function used during string interning allows HashDoS Hash Denial of Service attacks. An attacker could cause excessive resource usage during proxy operations via crafted requests, potentially leading to a denial of service...

5.9CVSS6.9AI score
SaveExploits0References3
OSV
OSV
•added 2024/03/06 10:59 a.m.•55 views

BIT-OPENRESTY-2020-36309

ngxhttpluamodule aka lua-nginx-module before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header...

5.3CVSS6AI score0.01423EPSS
SaveExploits0References6
Photon
Photon
•added 2024/01/07 12:00 a.m.•46 views

Important Photon OS Security Update - PHSA-2024-3.0-0709

Updates of 'openresty' packages of Photon OS have been released...

7.5CVSS10AI score0.99999EPSS
SaveExploits21
Photon
Photon
•added 2024/01/06 12:00 a.m.•56 views

Important Photon OS Security Update - PHSA-2024-4.0-0539

Updates of 'sudo', 'openresty' packages of Photon OS have been released...

7CVSS6.7AI score0.00541EPSS
SaveExploits1
Photon
Photon
•added 2024/01/05 12:00 a.m.•24 views

Important Photon OS Security Update - PHSA-2024-5.0-91-0185

Updates of 'squid', 'sudo', 'openresty' packages of Photon OS have been released...

8.6CVSS7.1AI score0.57627EPSS
SaveExploits0
Photon
Photon
•added 2024/01/05 12:00 a.m.•56 views

Important Photon OS Security Update - PHSA-2024-5.0-0185

Updates of 'squid', 'openresty', 'sudo' packages of Photon OS have been released...

8.6CVSS6.6AI score0.57627EPSS
SaveExploits1
Photon
Photon
•added 2023/07/25 12:00 a.m.•44 views

Critical Photon OS Security Update - PHSA-2023-3.0-0617

Updates of 'openresty', 'grub2', 'perl', 'mysql' packages of Photon OS have been released...

9.8CVSS6.4AI score0.03216EPSS
SaveExploits0
Photon
Photon
•added 2023/07/24 12:00 a.m.•37 views

Critical Photon OS Security Update - PHSA-2023-5.0-0056

Updates of 'openresty', 'mysql' packages of Photon OS have been released...

9.8CVSS6.5AI score0.03216EPSS
SaveExploits0
Photon
Photon
•added 2023/07/24 12:00 a.m.•14 views

Critical Photon OS Security Update - PHSA-2023-5.0-91-0056

Updates of 'openresty', 'mysql' packages of Photon OS have been released...

9.8CVSS6.1AI score0.03216EPSS
SaveExploits0
Photon
Photon
•added 2023/07/24 12:00 a.m.•40 views

Critical Photon OS Security Update - PHSA-2023-4.0-0435

Updates of 'openresty', 'mysql' packages of Photon OS have been released...

9.8CVSS6.1AI score0.03216EPSS
SaveExploits0
GithubExploit
GithubExploit
•added 2022/12/03 2:31 p.m.•559 views

Exploit for Authentication Bypass by Spoofing in Apache Apisix

POCs Collected POCs CVE-2022-24112 To create a test...

9.8CVSS8AI score0.96069EPSS
SaveExploits16
Rows per page
Query Builder