Lucene search
+L

1477 matches found

Cvelist
Cvelist
•added 2024/01/15 4:04 p.m.•36 views

CVE-2024-0316 Improper cleanup vulnerability in FireEye Endpoint Security

Improper cleanup vulnerability in exceptions thrown in FireEye Endpoint Security, affecting version 5.2.0.958244. This vulnerability could allow an attacker to send multiple request packets to the containmentnotify/preview parameter, which could lead to a service outage...

6.8CVSS7.6AI score0.00315EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/15 12:00 a.m.•5 views

CVE-2024-0316: Improper Cleanup on Thrown Exception

Improper cleanup vulnerability in exceptions thrown in FireEye Endpoint Security, affecting version 5.2.0.958244. This vulnerability could allow an attacker to send multiple request packets to the containmentnotify/preview parameter, which could lead to a service outage...

7.5CVSS7.2AI score0.00315EPSS
SaveExploits0References2
NVD
NVD
•added 2024/01/12 1:15 a.m.•31 views

CVE-2024-21604

An Allocation of Resources Without Limits or Throttling vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. If a high rate of specific valid packets are processed by the routing engine RE this will le...

7.5CVSS7.4AI score0.00531EPSS
SaveExploits0References2
Prion
Prion
•added 2024/01/12 1:15 a.m.•33 views

Code injection

An Allocation of Resources Without Limits or Throttling vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. If a high rate of specific valid packets are processed by the routing engine RE this will le...

5CVSS7AI score0.00531EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/01/12 12:54 a.m.•52 views

CVE-2024-21604 Junos OS Evolved: A high rate of specific traffic will cause a complete system outage

An Allocation of Resources Without Limits or Throttling vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. If a high rate of specific valid packets are processed by the routing engine RE this will le...

7.5CVSS7.6AI score0.00531EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/01/12 12:54 a.m.•12 views

CVE-2024-21604 Junos OS Evolved: A high rate of specific traffic will cause a complete system outage

An Allocation of Resources Without Limits or Throttling vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. If a high rate of specific valid packets are processed by the routing engine RE this will le...

7.5CVSS7.4AI score0.00531EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2024/01/10 3:42 p.m.•17 views

dotnet: .NET Denial of Service Vulnerability

A Denial of Service vulnerability was found in .NET Core project templates that utilize JWT-based authentication tokens. This issue may allow an unauthenticated client to consume arbitrarily large amounts of server memory, potentially triggering an out-of-memory condition on the server and making...

6.8CVSS5.7AI score0.02892EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2024/01/10 3:42 p.m.•19 views

dotnet: .NET Denial of Service Vulnerability

A Denial of Service vulnerability was found in .NET Core project templates that utilize JWT-based authentication tokens. This issue may allow an unauthenticated client to consume arbitrarily large amounts of server memory, potentially triggering an out-of-memory condition on the server and making...

6.8CVSS5.7AI score0.02892EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/01/09 3:30 a.m.•38 views

juzawebCMS Incorrect Access Control vulnerability

juzaweb = 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code. The payload in the timezone field was not correctly validated...

4.9CVSS7AI score0.00694EPSS
SaveExploits1References4Affected Software1
osv_ghsa
osv_ghsa
•added 2024/01/09 3:30 a.m.•75 views

GHSA-93P6-9CXV-5RPQ juzawebCMS Incorrect Access Control vulnerability

juzaweb = 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code. The payload in the timezone field was not correctly validated...

4.9CVSS4.9AI score0.00694EPSS
SaveExploits1References3
NVD
NVD
•added 2024/01/09 1:15 a.m.•39 views

CVE-2023-46906

juzaweb = 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code. The payload in the timezone field was not correctly validated...

4.9CVSS5AI score0.00694EPSS
SaveExploits1References2
Prion
Prion
•added 2024/01/09 1:15 a.m.•31 views

Improper access control

juzaweb = 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code. The payload in the timezone field was not correctly validated...

3.3CVSS7AI score0.00694EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2024/01/09 12:00 a.m.•3 views

CVE-2023-46906

juzaweb = 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code. The payload in the timezone field was not correctly validated...

6.9CVSS0.00694EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/01/09 12:00 a.m.•53 views

CVE-2023-46906

juzaweb = 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code. The payload in the timezone field was not correctly validated...

5.3AI score0.00694EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/01/09 12:00 a.m.•8 views

CVE-2023-46906

juzaweb = 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code. The payload in the timezone field was not correctly validated...

5.1AI score0.00694EPSS
SaveExploits1References2
CVE
CVE
•added 2024/01/09 12:00 a.m.•67 views

CVE-2023-46906

CVE-2023-46906 affects juzaweb CMS (

4.9CVSS5AI score0.00694EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/09 12:00 a.m.•6 views

CVE-2023-46906: Incorrect Authorization

juzaweb = 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code. The payload in the timezone field was not correctly validated...

4.9CVSS5.7AI score0.00694EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/12/25 9:15 a.m.•13 views

CVE-2023-38321

OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial of service NULL pointer dereference, daemon crash, and Captive Portal outage via a GET request to /openndsauth/ that lacks a custom query string parameter and client-token...

7.5CVSS7.2AI score0.01103EPSS
SaveExploits0References4
Prion
Prion
•added 2023/12/25 9:15 a.m.•38 views

Null pointer dereference

OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial of service NULL pointer dereference, daemon crash, and Captive Portal outage via a GET request to /openndsauth/ that lacks a custom query string parameter and client-token...

5CVSS7.1AI score0.01103EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2023/12/18 10:15 p.m.•27 views

CVE-2023-23576

Incorrect behavior order in the Command Centre Server could allow privileged users to gain physical access to the site for longer than intended after a network outage when competencies are used in the access decision. This issue affects: Gallagher Command Centre: 8.90 prior to vEL8.90.1620 MR2,...

4.3CVSS0.00281EPSS
SaveExploits0References1
Rows per page
Query Builder