Lucene search
+L

141 matches found

SUSE CVE
SUSE CVE
•added 2023/07/14 2:04 a.m.•17 views

SUSE CVE-2023-29449

JavaScript preprocessing, webhooks and global scripts can cause uncontrolled CPU, memory, and disk I/O utilization. Preprocessing/webhook/global script configuration and testing are only available to Administrative roles Admin and Superadmin. Administrative privileges should be typically granted ...

5.9CVSS6.9AI score0.01156EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2023/07/13 9:15 a.m.•114 views

CVE-2023-29449

JavaScript preprocessing, webhooks and global scripts can cause uncontrolled CPU, memory, and disk I/O utilization. Preprocessing/webhook/global script configuration and testing are only available to Administrative roles Admin and Superadmin. Administrative privileges should be typically granted ...

5.9CVSS7.3AI score0.01156EPSS
SaveExploits0References2
NVD
NVD
•added 2023/07/13 9:15 a.m.•38 views

CVE-2023-29449

JavaScript preprocessing, webhooks and global scripts can cause uncontrolled CPU, memory, and disk I/O utilization. Preprocessing/webhook/global script configuration and testing are only available to Administrative roles Admin and Superadmin. Administrative privileges should be typically granted ...

5.9CVSS0.01156EPSS
SaveExploits0References2
OSV
OSV
•added 2023/07/13 9:15 a.m.•9 views

DEBIAN-CVE-2023-29449

JavaScript preprocessing, webhooks and global scripts can cause uncontrolled CPU, memory, and disk I/O utilization. Preprocessing/webhook/global script configuration and testing are only available to Administrative roles Admin and Superadmin. Administrative privileges should be typically granted ...

4.9CVSS5.5AI score0.01156EPSS
SaveExploits0References1
OSV
OSV
•added 2023/07/13 9:15 a.m.•41 views

CVE-2023-29449

JavaScript preprocessing, webhooks and global scripts can cause uncontrolled CPU, memory, and disk I/O utilization. Preprocessing/webhook/global script configuration and testing are only available to Administrative roles Admin and Superadmin. Administrative privileges should be typically granted ...

4.9CVSS7.1AI score
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2023/07/13 9:15 a.m.•39 views

CVE-2023-29449

JavaScript preprocessing, webhooks and global scripts can cause uncontrolled CPU, memory, and disk I/O utilization. Preprocessing/webhook/global script configuration and testing are only available to Administrative roles Admin and Superadmin. Administrative privileges should be typically granted ...

5.9CVSS6AI score0.01156EPSS
SaveExploits0References2
Prion
Prion
•added 2023/07/13 9:15 a.m.•32 views

Code injection

JavaScript preprocessing, webhooks and global scripts can cause uncontrolled CPU, memory, and disk I/O utilization. Preprocessing/webhook/global script configuration and testing are only available to Administrative roles Admin and Superadmin. Administrative privileges should be typically granted ...

3.3CVSS5.1AI score0.01156EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2023/07/13 9:15 a.m.•16 views

UBUNTU-CVE-2023-29449

JavaScript preprocessing, webhooks and global scripts can cause uncontrolled CPU, memory, and disk I/O utilization. Preprocessing/webhook/global script configuration and testing are only available to Administrative roles Admin and Superadmin. Administrative privileges should be typically granted ...

5.9CVSS5.8AI score0.01156EPSS
SaveExploits0References3
OSV
OSV
•added 2023/07/13 9:15 a.m.•14 views

UBUNTU-CVE-2023-29450

JavaScript pre-processing can be used by the attacker to gain access to the file system read-only access on behalf of user "zabbix" on the Zabbix Server or Zabbix Proxy, potentially leading to unauthorized access to sensitive data...

8.5CVSS7.1AI score0.01262EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/07/13 8:25 a.m.•26 views

CVE-2023-29450 Unauthorized limited filesystem access from preprocessing

JavaScript pre-processing can be used by the attacker to gain access to the file system read-only access on behalf of user "zabbix" on the Zabbix Server or Zabbix Proxy, potentially leading to unauthorized access to sensitive data...

8.5CVSS6.8AI score0.01262EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/07/13 8:25 a.m.•68 views

CVE-2023-29450 Unauthorized limited filesystem access from preprocessing

JavaScript pre-processing can be used by the attacker to gain access to the file system read-only access on behalf of user "zabbix" on the Zabbix Server or Zabbix Proxy, potentially leading to unauthorized access to sensitive data...

8.5CVSS8.7AI score0.01262EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/07/13 8:24 a.m.•51 views

CVE-2023-29449 Limited control of resource utilization in JS preprocessing

JavaScript preprocessing, webhooks and global scripts can cause uncontrolled CPU, memory, and disk I/O utilization. Preprocessing/webhook/global script configuration and testing are only available to Administrative roles Admin and Superadmin. Administrative privileges should be typically granted ...

5.9CVSS6AI score0.01156EPSS
SaveExploits0References1
CVE
CVE
•added 2023/07/13 8:24 a.m.•113 views

CVE-2023-29449

CVE-2023-29449 affects Zabbix frontend components related to JavaScript preprocessing, webhooks and global scripts. The issue is described as causing uncontrolled CPU, memory, and disk I/O utilization when these features are configured or tested, with access restricted to Administrative roles (Ad...

5.9CVSS5.6AI score0.01156EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/07/13 8:24 a.m.•25 views

CVE-2023-29449 Limited control of resource utilization in JS preprocessing

JavaScript preprocessing, webhooks and global scripts can cause uncontrolled CPU, memory, and disk I/O utilization. Preprocessing/webhook/global script configuration and testing are only available to Administrative roles Admin and Superadmin. Administrative privileges should be typically granted ...

5.9CVSS6.8AI score0.01156EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2023/03/08 12:00 a.m.•21 views

Debian: Security Advisory (DLA-297-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS4.5AI score0.01715EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2023/02/15 5:56 a.m.•7 views

SUSE CVE-2010-3836

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service assertion failure and server crash via vectors related to view preparation, pre-evaluation of LIKE predicates, and IN Optimizers...

4CVSS6.5AI score0.02437EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/01/06 12:00 a.m.•13 views

PT-2023-9379 · Zabbix +3 · Zabbix +3

Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: The issue is related to uncontrolled CPU, memory, and disk I/O utilization caused by JavaScript preprocessing, webhooks, and global scripts. This can be exploited to cause a denial of servic...

9.9CVSS6.1AI score0.03927EPSS
SaveExploits4References99
OSV
OSV
•added 2022/07/11 1:15 a.m.•13 views

CVE-2022-31540

The kumardeepak/hin-eng-preprocessing repository through 2019-07-16 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01337EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/11 12:00 a.m.•5 views

CVE-2022-31540: Improper Limitation of a Pathname to a Restricted Directory

The kumardeepak/hin-eng-preprocessing repository through 2019-07-16 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS8.2AI score0.01337EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/07/11 12:00 a.m.•12 views

hin-eng-preprocessing 路径遍历漏洞

hin-eng-preprocessing is an English parallel corpus of NMT by individual developers in KD, Belarus. It is used to enhance IITB Hindi. A security vulnerability exists in hin-eng-preprocessing version 2019-07-16 and earlier, which stems from an incorrect call to Flask's sendfile function resulting ...

9.3CVSS8.3AI score0.01337EPSS
SaveExploits1References2
Rows per page
Query Builder