Lucene search
+L

273 matches found

NVD
NVD
•added 2020/07/14 10:15 p.m.•42 views

CVE-2020-15101

In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk. This can be problematic in a case where an administrator scans the dirs of potentially untrusted users. This has been patched in 0.1.1...

4CVSS0.00693EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/07/14 10:15 p.m.•10 views

CVE-2020-15101

In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk. This can be problematic in a case where an administrator scans the dirs of potentially untrusted users. This has been patched in 0.1.1...

4CVSS5AI score0.00693EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
•added 2020/07/14 10:15 p.m.•21 views

PYSEC-2020-233

In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk. This can be problematic in a case where an administrator scans the dirs of potentially untrusted users. This has been patched in 0.1.1...

4CVSS6.6AI score0.00693EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2020/07/14 10:15 p.m.•35 views

Design/Logic Flaw

In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk. This can be problematic in a case where an administrator scans the dirs of potentially untrusted users. This has been patched in 0.1.1...

4CVSS4.1AI score0.00693EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2020/07/14 9:35 p.m.•74 views

CVE-2020-15101

CVE-2020-15101 affects freewvs prior to version 0.1.1. A directory structure with more than 1000 nested directories can interrupt a freewvs scan due to Python’s recursion limit and os.walk(), potentially affecting administrators scanning directories of potentially untrusted users. The underlying ...

4CVSS3.6AI score0.00693EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/07/14 9:35 p.m.•53 views

CVE-2020-15101 Nested directory structure can lead to Uncontrolled Resource Consumption in freewvs

In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk. This can be problematic in a case where an administrator scans the dirs of potentially untrusted users. This has been patched in 0.1.1...

2.8CVSS3.9AI score0.00693EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/14 12:00 a.m.•3 views

CVE-2020-15101: Uncontrolled Resource Consumption

In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk. This can be problematic in a case where an administrator scans the dirs of potentially untrusted users. This has been patched in 0.1.1...

4CVSS5.7AI score0.00693EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/07/14 12:00 a.m.•21 views

PT-2020-14185 · Python · Freewvs

Name of the Vulnerable Software and Affected Versions: freewvs versions prior to 0.1.1 Description: A directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk. This can be problematic when an administrator scans directories ...

4CVSS7.2AI score0.00693EPSS
SaveExploits0References8
Mageia
Mageia
•added 2020/06/10 11:59 p.m.•111 views

Updated perl packages fix security vulnerability

This update from 5.28.2 to 5.28.3 fixes bugs several bugs the RPM package manager. - Update to 5.23.3 See https://metacpan.org/pod/release/XSAWYERX/perl-5.28.3/pod/perldelta.pod for release notes - Security release fixes CVE-2020-10543, CVE-2020-10878 and CVE-2020-12723 - Work around a glibc bug...

8.6CVSS7.1AI score0.11334EPSS
SaveExploits0References1
osv_mgasa
osv_mgasa
•added 2020/06/10 11:59 p.m.•19 views

MGASA-2020-0255 Updated perl packages fix security vulnerability

This update from 5.28.2 to 5.28.3 fixes bugs several bugs the RPM package manager. - Update to 5.23.3 See https://metacpan.org/pod/release/XSAWYERX/perl-5.28.3/pod/perldelta.pod for release notes - Security release fixes CVE-2020-10543, CVE-2020-10878 and CVE-2020-12723 - Work around a glibc bug ...

8.6CVSS7.1AI score0.11334EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2020/06/05 6:16 a.m.•22 views

XACK DNS vulnerable to denial-of-service (DoS)

Overview XACK DNS is DNS server software provided by XACK, Inc. XACK DNS contains a denial-of-service DoS vulnerability due to an issue commonly referred to as NXNSAttack. XACK, Inc. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and XACK, Inc. coordinat...

8.6CVSS6.8AI score0.01639EPSS
SaveExploits0References7
OpenVAS
OpenVAS
•added 2020/04/16 12:00 a.m.•29 views

Huawei EulerOS: Security Advisory for screen (EulerOS-SA-2020-1433)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.5AI score0.04148EPSS
SaveExploits1References2
NVD
NVD
•added 2020/04/10 9:15 p.m.•18 views

CVE-2020-11647

In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This was addressed in epan/dissectors/packet-bacapp.c by limiting the amount of recursion...

7.5CVSS7.3AI score0.03514EPSS
SaveExploits0References7
osv_ubuntu
osv_ubuntu
•added 2020/04/10 9:15 p.m.•15 views

UBUNTU-CVE-2020-11647

In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This was addressed in epan/dissectors/packet-bacapp.c by limiting the amount of recursion...

7.5CVSS7.1AI score0.03514EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2020/04/10 9:15 p.m.•35 views

CVE-2020-11647

In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This was addressed in epan/dissectors/packet-bacapp.c by limiting the amount of recursion...

7.5CVSS7.1AI score0.03514EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•25 views

Huawei EulerOS: Security Advisory for screen (EulerOS-SA-2019-2548)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.5AI score0.04148EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2019/12/09 12:00 a.m.•30 views

EulerOS 2.0 SP5 : screen (EulerOS-SA-2019-2548)

According to the version of the screen package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial o...

5CVSS7.3AI score0.04148EPSS
SaveExploits1References2
osv_debian
osv_debian
•added 2019/05/23 12:29 p.m.•7 views

DEBIAN-CVE-2019-12295

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion...

7.5CVSS7.3AI score0.03765EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2019/05/23 12:29 p.m.•19 views

CVE-2019-12295

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion...

7.5CVSS7.3AI score
SaveExploits0References8
Prion
Prion
•added 2018/01/18 11:29 p.m.•16 views

Stack overflow

jQuery 3.0.0-rc.1 is vulnerable to Denial of Service DoS due to removing a logic that lowercased attribute names. Any attribute getter using a mixed-cased name for boolean attributes goes into an infinite recursion, exceeding the stack call limit...

5CVSS6.8AI score0.03232EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder