Lucene search
+L

1447 matches found

Citrix
Citrix
added 2024/01/09 12:0 a.m.11 views

Where is the ReceiverCleanupUtility.exe after installing CWA

This article describes the location of ReceiverCleanupUtility.exe Receiver Clean-Up Utility tool after installing Citrix Workspace app for Windows CWA...

7.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/01/02 12:0 a.m.15 views

The vulnerability of the SNMP Notification Receiver function in the managers.php script of the Cacti network monitoring software allows a hacker to execute arbitrary SQL code.

The vulnerability of the SNMP Notification Receiver function in the managers.php script of the Cacti network monitoring software is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code by sending...

9CVSS8.1AI score0.66711EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2023/12/22 11:6 a.m.9 views

OESA-2023-1946 logback security update

Logback is intended as a successor to the popular log4j project. Security Fixes: A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data. CVE-2023-6378 A serialization vulnerability ...

7.5CVSS8.9AI score0.009EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/12/22 12:0 a.m.7 views

The vulnerability of the logback receiver component in the logging library Logback, which allows a hacker to trigger a service failure.

The vulnerability of the logback receiver component in the logging library involves the restoration of unreliable data in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.1CVSS6.6AI score0.009EPSS
SaveExploits0References3Affected Software5
Code423n4
Code423n4
added 2023/12/08 12:0 a.m.17 views

The protocol is susceptible to reentrancy attacks.

Lines of code Vulnerability details Reentrancy is a well know bug in smart contract and the protocol is not handling it, The safeMint function in ERC721 make a callback to the receiver checking if they can hold a nft, this can be used to a receiver to take control of the execution of the call. in...

7.1AI score
SaveExploits0
NVD
NVD
added 2023/12/06 5:15 p.m.26 views

CVE-2023-39326

A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically read a large amount of data up to about...

5.3CVSS0.01208EPSS
SaveExploits0References5
Prion
Prion
added 2023/12/06 5:15 p.m.26 views

Design/Logic Flaw

A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically read a large amount of data up to about...

5CVSS6.7AI score0.01208EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2023/12/06 4:27 p.m.90 views

CVE-2023-39326 Denial of service via chunk extensions in net/http

A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically read a large amount of data up to about...

6.7AI score0.01208EPSS
SaveExploits0References5
OSV
OSV
added 2023/12/06 4:22 p.m.21 views

GO-2023-2382 Denial of service via chunk extensions in net/http

A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically read a large amount of data up to about...

5.3CVSS6.7AI score0.01208EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2023/12/05 12:43 p.m.109 views

CVE-2023-6378

A flaw was found in the logback package, where it is vulnerable to a denial of service caused by a serialization flaw in the receiver component. By sending specially crafted poisoned data, a remote attacker can cause a denial of service condition. Mitigation Mitigation for this issue is either no...

7.5CVSS6.8AI score0.009EPSS
SaveExploits0References3
Citrix
Citrix
added 2023/12/05 12:0 a.m.11 views

503 Error record in event log when try to login Storefront

"Unable to complete your request" error when logging into the Storefront. The operating system event log may record a 503 error as below. LogName: Citrix Delivery Service Source Name: Citrix Receiver for Web Event id: 1 Log Description The remote server returned an error: 503 Server Unavailable...

7.1AI score
SaveExploits0
OSV
OSV
added 2023/12/04 9:30 a.m.10 views

GHSA-GM62-RW4G-VRC4 Logback is vulnerable to an attacker mounting a Denial-Of-Service attack by sending poisoned data

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.1CVSS7.2AI score0.00682EPSS
SaveExploits0References6
OSV
OSV
added 2023/12/04 9:15 a.m.4 views

UBUNTU-CVE-2023-6481

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS5.8AI score0.00682EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2023/12/04 8:35 a.m.84 views

CVE-2023-6481

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS6.7AI score0.00682EPSS
SaveExploits0
Cvelist
Cvelist
added 2023/12/04 8:35 a.m.35 views

CVE-2023-6481 Logback "receiver" DOS vulnerability CVE-2023-6378 incomplete fix

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.1CVSS7.6AI score0.009EPSS
SaveExploits0References2
OSV
OSV
added 2023/11/29 12:30 p.m.9 views

GHSA-VMQ6-5M68-F53M logback serialization vulnerability

A serialization vulnerability in logback receiver component part of logback allows an attacker to mount a Denial-Of-Service attack by sending poisoned data. This is only exploitable if logback receiver component is deployed. See https://logback.qos.ch/manual/receivers.html...

7.1CVSS6.9AI score0.009EPSS
SaveExploits0References10
OSV
OSV
added 2023/11/29 12:15 p.m.4 views

UBUNTU-CVE-2023-6378

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS6.8AI score0.009EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2023/11/29 12:2 p.m.34 views

CVE-2023-6378 Logback "receiver" DOS vulnerability

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.1CVSS7.6AI score0.009EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/11/29 12:0 a.m.5 views

logback code issue vulnerability

Quality Open Software Logback is a logging framework for Java applications from Quality Open Software, Switzerland. A security vulnerability exists in logback version 1.4.11, which stems from a denial of service DOS vulnerability in the component logback receiver...

7.5CVSS6.7AI score0.009EPSS
SaveExploits0References3
GitLab Advisory Database
GitLab Advisory Database
added 2023/11/29 12:0 a.m.54 views

logback serialization vulnerability

A serialization vulnerability in logback receiver component part of logback allows an attacker to mount a Denial-Of-Service attack by sending poisoned data. This is only exploitable if logback receiver component is deployed. See https://logback.qos.ch/manual/receivers.html...

7.5CVSS7AI score0.009EPSS
SaveExploits0References11Affected Software1
Rows per page
Query Builder