Lucene search
+L

192 matches found

ATTACKERKB
ATTACKERKB
added 2023/10/22 3:15 a.m.29 views

CVE-2023-46298

Next.js before 13.4.20-canary.13 lacks a cache-control header and thus empty prefetch responses may sometimes be cached by a CDN, causing a denial of service to all users requesting the same URL via that CDN...

7.5CVSS5.8AI score0.01284EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2023/10/22 12:00 a.m.42 views

CVE-2023-46298

Next.js before 13.4.20-canary.13 lacks a cache-control header and thus empty prefetch responses may sometimes be cached by a CDN, causing a denial of service to all users requesting the same URL via that CDN...

7.6AI score0.01284EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/10/21 12:00 a.m.7 views

PT-2023-29944 · Next.Js · Next.Js

Name of the Vulnerable Software and Affected Versions: Next.js versions prior to 13.4.20-canary.13 Description: The issue is related to a lack of a cache-control header in Next.js, which can cause empty prefetch responses to be cached by a CDN. This can lead to a denial of service for all users...

7.5CVSS7.2AI score0.01284EPSS
SaveExploits1References16
Kitploit
Kitploit
added 2023/06/19 12:30 p.m.122 views

Forensia - Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase

AntiForensics Tool For Red Teamers, Used For Erasing Some Footprints In The Post Exploitation Phase. Reduces Payload Burnout And Increases Detection Countdown. Can Be Used To Test The capabilities of Your Incident Response / Forensics Teams. Capabilities Unloading Sysmon Driver. Gutmann Method Fi...

7.5AI score
SaveExploits0References5
F5 Networks
F5 Networks
added 2023/02/21 6:12 p.m.42 views

K15250: BIND vulnerability CVE-2014-3214

Security Advisory Description The prefetch implementation in named in ISC BIND 9.10.0, when a recursive nameserver is enabled, allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit via a DNS query that triggers a response with unspecified attributes...

5CVSS7.5AI score0.17259EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2023/02/15 5:29 a.m.6 views

SUSE CVE-2014-3214

The prefetch implementation in named in ISC BIND 9.10.0, when a recursive nameserver is enabled, allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit via a DNS query that triggers a response with unspecified attributes...

5CVSS8AI score0.17259EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 4:55 a.m.7 views

SUSE CVE-2016-9817

Xen through 4.7.x allows local ARM guest OS users to cause a denial of service host crash via vectors involving a 1 data or 2 prefetch abort with the ESREL2.EA bit set...

6.5CVSS6.3AI score0.00464EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:44 a.m.10 views

SUSE CVE-2021-26318

A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information...

5.1CVSS6.8AI score0.00327EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:30 a.m.6 views

SUSE CVE-2022-4543

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation KPTI. This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems...

5.5CVSS8.2AI score0.00954EPSS
SaveExploits1References3
OSV
OSV
added 2023/01/11 3:15 p.m.7 views

DEBIAN-CVE-2022-4543

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation KPTI. This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems...

5.5CVSS6.5AI score0.00954EPSS
SaveExploits1References1
OSV
OSV
added 2023/01/11 3:15 p.m.12 views

AZL-12989 CVE-2022-4543 affecting package kernel 5.15.200.1-1

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation KPTI. This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems...

5.5CVSS6.7AI score0.00954EPSS
SaveExploits1References1
OSV
OSV
added 2023/01/11 3:15 p.m.15 views

AZL-34862 CVE-2022-4543 affecting package kernel 6.6.126.1-1

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation KPTI. This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems...

5.5CVSS6.7AI score0.00954EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2023/01/11 3:15 p.m.81 views

CVE-2022-4543

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation KPTI. This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems...

5.5CVSS6.7AI score0.00954EPSS
SaveExploits1References4
Prion
Prion
added 2023/01/11 3:15 p.m.30 views

Code injection

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation KPTI. This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems...

1.7CVSS5AI score0.00954EPSS
SaveExploits1References2
OSV
OSV
added 2023/01/11 3:15 p.m.10 views

UBUNTU-CVE-2022-4543

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation KPTI. This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems...

5.5CVSS7.2AI score0.00954EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2022/12/17 12:00 a.m.12 views

PT-2022-6067

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation KPTI. This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timi...

5.5CVSS6.6AI score0.00954EPSS
SaveExploits1References26
Prion
Prion
added 2021/10/13 7:15 p.m.20 views

Information disclosure

A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information...

1.9CVSS4.7AI score0.00327EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2021/10/13 7:15 p.m.405 views

CVE-2021-26318

A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information...

4.7CVSS5.9AI score0.00327EPSS
SaveExploits0References2
OSV
OSV
added 2021/10/13 7:15 p.m.8 views

UBUNTU-CVE-2021-26318

A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information...

4.7CVSS5.8AI score0.00327EPSS
SaveExploits0References3
CVE
CVE
added 2021/10/13 6:29 p.m.83 views

CVE-2021-26318

CVE-2021-26318 corresponds to a timing and power-based side-channel issue on some AMD CPUs that could potentially leak kernel address space information via the x86 PREFETCH instruction. Affected software/hardware: all AMD CPUs (per AMD: Side-channels Related to the x86 PREFETCH Instruction). Root...

4.7CVSS4.6AI score0.00327EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder