Lucene search
+L

20306 matches found

RedHat Linux
RedHat Linux
added 2024/02/12 8:44 a.m.9 views

squid-cache: Squid Buffer Overflow

A heap-based buffer overflow flaw was found in the Squid caching proxy. When processing the Uniform Resource Name URNs, specific conditions can lead to remote code execution...

9.8CVSS6.3AI score0.22918EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
added 2024/02/12 8:40 a.m.10 views

squid: Buffer over-read in the HTTP Message processing feature

A buffer over-read flaw was found in Squid's HTTP Message processing feature. This issue may allow attackers to perform remote denial of service...

8.6CVSS5.9AI score0.88818EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2024/02/12 8:38 a.m.8 views

squid-cache: Squid Buffer Overflow

A heap-based buffer overflow flaw was found in the Squid caching proxy. When processing the Uniform Resource Name URNs, specific conditions can lead to remote code execution...

9.8CVSS6.3AI score0.22918EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
added 2024/02/12 8:38 a.m.9 views

squid: Buffer over-read in the HTTP Message processing feature

A buffer over-read flaw was found in Squid's HTTP Message processing feature. This issue may allow attackers to perform remote denial of service...

8.6CVSS5.9AI score0.88818EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/02/12 8:15 a.m.18 views

CVE-2023-41706

Processing time of drive search expressions now gets monitored, and the related request is terminated if a resource threshold is reached. Availability of OX App Suite could be reduced due to high processing load. Please deploy the provided updates and patch releases. Processing of user-defined...

6.5CVSS7AI score0.00785EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/02/12 8:15 a.m.16 views

CVE-2023-41707

Processing of user-defined mail search expressions is not limited. Availability of OX App Suite could be reduced due to high processing load. Please deploy the provided updates and patch releases. Processing time of mail search expressions now gets monitored, and the related request is terminated...

6.5CVSS7AI score0.00785EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/02/12 8:15 a.m.24 views

CVE-2023-41707

Processing of user-defined mail search expressions is not limited. Availability of OX App Suite could be reduced due to high processing load. Please deploy the provided updates and patch releases. Processing time of mail search expressions now gets monitored, and the related request is terminated...

6.5CVSS6.8AI score0.00785EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/02/12 8:15 a.m.16 views

CVE-2023-41705

Processing of user-defined DAV user-agent strings is not limited. Availability of OX App Suite could be reduced due to high processing load. Please deploy the provided updates and patch releases. Processing time of DAV user-agents now gets monitored, and the related request is terminated if a...

6.5CVSS7.2AI score0.00785EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/02/12 8:15 a.m.36 views

CVE-2023-41705

Processing of user-defined DAV user-agent strings is not limited. Availability of OX App Suite could be reduced due to high processing load. Please deploy the provided updates and patch releases. Processing time of DAV user-agents now gets monitored, and the related request is terminated if a...

6.5CVSS6.7AI score0.00785EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/02/12 12:0 a.m.8 views

PT-2024-12962 · Open Xchange Gmbh +1 · Ox App Suite +2

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: The issue concerns the processing of CID references in E-Mail, which can be exploited to inject malicious script code that bypasses the...

7.1CVSS7.4AI score0.00528EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2024/02/12 12:0 a.m.9 views

Open-Xchange App Suite Security Vulnerability

Open-Xchange App Suite is an email and productivity suite client software from Open-Xchange Germany. A security vulnerability exists in Open-Xchange App Suite that stems from unrestricted processing of user-defined driver search expressions, where usability may be reduced...

6.5CVSS6.8AI score0.00785EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/02/12 12:0 a.m.7 views

Open-Xchange App Suite Security Vulnerability

Open-Xchange App Suite is an email and productivity suite client software from Open-Xchange Germany. A security vulnerability exists in Open-Xchange App Suite that stems from unrestricted processing of user-defined DAV user agent strings, which may have reduced usability...

6.5CVSS6.9AI score0.00785EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/02/12 12:0 a.m.13 views

PT-2024-12965 · Unknown · Ox App Suite

Name of the Vulnerable Software and Affected Versions: OX App Suite affected versions not specified Description: The issue arises from the processing of user-defined mail search expressions without limitations, potentially reducing the availability of OX App Suite due to high processing load. The...

6.5CVSS7.2AI score0.00785EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/02/12 12:0 a.m.10 views

Open-Xchange App Suite Security Vulnerability

Open-Xchange App Suite is an email and productivity suite client software from Open-Xchange, a German company. A security vulnerability exists in Open-Xchange App Suite that stems from the unrestricted processing of user-defined email search expressions, where usability may be reduced...

6.5CVSS6.8AI score0.00785EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/02/12 12:0 a.m.31 views

RHEL 8 : squid:4 (RHSA-2024:0771)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0771 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fixes: squid: DoS against...

9.8CVSS8.1AI score0.88818EPSS
SaveExploits1References15
Positive Technologies
Positive Technologies
added 2024/02/10 12:0 a.m.7 views

PT-2024-3009 · Uamqp +2 · Uamqp +2

Name of the Vulnerable Software and Affected Versions: uAMQP affected versions not specified Description: The uAMQP library, used for AMQP 1.0 communication to Azure Cloud Services, contains an error related to the incorrect processing of an AMQP VALUE failed state, which may cause a double free...

9.8CVSS8.4AI score0.01418EPSS
SaveExploits0References29
CNNVD
CNNVD
added 2024/02/09 12:0 a.m.8 views

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an illegal authorization vulnerability that stems from the Jira plugin's inability to check the security level of incoming issues when processing subscriptions and to restrict...

4.1CVSS6.8AI score0.00456EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2024/02/08 6:38 p.m.46 views

Important: Red Hat Security Advisory: python-pillow security update

An update for python-pillow is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

8.1CVSS6.9AI score0.01703EPSS
SaveExploits0References2
OSV
OSV
added 2024/02/08 11:6 a.m.9 views

OESA-2024-1135 nodejs security update

Node.js is an open-source, cross-platform, JavaScript runtime environment, it executes JavaScript code outside of a browser. Security Fixes: A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include polic...

7.5CVSS8.9AI score0.03658EPSS
SaveExploits0References3
OSV
OSV
added 2024/02/08 11:6 a.m.6 views

OESA-2024-1134 nodejs security update

Node.js is an open-source, cross-platform, JavaScript runtime environment, it executes JavaScript code outside of a browser. Security Fixes: A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include polic...

7.5CVSS8.9AI score0.03658EPSS
SaveExploits0References3
Rows per page
Query Builder