Lucene search
+L

231 matches found

attackerkb
attackerkb
•added 2020/07/14 10:15 p.m.•7 views

CVE-2020-15101

In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk. This can be problematic in a case where an administrator scans the dirs of potentially untrusted users. This has been patched in 0.1.1...

4CVSS5AI score0.00693EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
•added 2020/07/14 10:15 p.m.•16 views

PYSEC-2020-233

In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk. This can be problematic in a case where an administrator scans the dirs of potentially untrusted users. This has been patched in 0.1.1...

4CVSS6.6AI score0.00693EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2020/07/14 9:35 p.m.•67 views

CVE-2020-15101

CVE-2020-15101 affects freewvs prior to version 0.1.1. A directory structure with more than 1000 nested directories can interrupt a freewvs scan due to Python’s recursion limit and os.walk(), potentially affecting administrators scanning directories of potentially untrusted users. The underlying ...

4CVSS3.6AI score0.00693EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/07/14 9:35 p.m.•49 views

CVE-2020-15101 Nested directory structure can lead to Uncontrolled Resource Consumption in freewvs

In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk. This can be problematic in a case where an administrator scans the dirs of potentially untrusted users. This has been patched in 0.1.1...

2.8CVSS3.9AI score0.00693EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/07/14 12:00 a.m.•16 views

PT-2020-14185 · Python · Freewvs

Name of the Vulnerable Software and Affected Versions: freewvs versions prior to 0.1.1 Description: A directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk. This can be problematic when an administrator scans directories ...

4CVSS7.2AI score0.00693EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/14 12:00 a.m.•1 views

CVE-2020-15101: Uncontrolled Resource Consumption

In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk. This can be problematic in a case where an administrator scans the dirs of potentially untrusted users. This has been patched in 0.1.1...

4CVSS5.7AI score0.00693EPSS
SaveExploits0References3
OSV
OSV
•added 2020/06/10 11:59 p.m.•14 views

MGASA-2020-0255 Updated perl packages fix security vulnerability

This update from 5.28.2 to 5.28.3 fixes bugs several bugs the RPM package manager. - Update to 5.23.3 See https://metacpan.org/pod/release/XSAWYERX/perl-5.28.3/pod/perldelta.pod for release notes - Security release fixes CVE-2020-10543, CVE-2020-10878 and CVE-2020-12723 - Work around a glibc bug ...

8.6CVSS7.1AI score0.11334EPSS
SaveExploits0References2
Mageia
Mageia
•added 2020/06/10 11:59 p.m.•102 views

Updated perl packages fix security vulnerability

This update from 5.28.2 to 5.28.3 fixes bugs several bugs the RPM package manager. - Update to 5.23.3 See https://metacpan.org/pod/release/XSAWYERX/perl-5.28.3/pod/perldelta.pod for release notes - Security release fixes CVE-2020-10543, CVE-2020-10878 and CVE-2020-12723 - Work around a glibc bug...

8.6CVSS7.1AI score0.11334EPSS
SaveExploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2020/06/05 6:16 a.m.•11 views

XACK DNS vulnerable to denial-of-service (DoS)

Overview XACK DNS is DNS server software provided by XACK, Inc. XACK DNS contains a denial-of-service DoS vulnerability due to an issue commonly referred to as NXNSAttack. XACK, Inc. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and XACK, Inc. coordinat...

8.6CVSS6.8AI score0.01639EPSS
SaveExploits0References7
OpenVAS
OpenVAS
•added 2020/04/16 12:00 a.m.•26 views

Huawei EulerOS: Security Advisory for screen (EulerOS-SA-2020-1433)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.5AI score0.04148EPSS
SaveExploits1References2
NVD
NVD
•added 2020/04/10 9:15 p.m.•17 views

CVE-2020-11647

In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This was addressed in epan/dissectors/packet-bacapp.c by limiting the amount of recursion...

7.5CVSS7.3AI score0.03377EPSS
SaveExploits0References7
OSV
OSV
•added 2020/04/10 9:15 p.m.•13 views

UBUNTU-CVE-2020-11647

In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This was addressed in epan/dissectors/packet-bacapp.c by limiting the amount of recursion...

7.5CVSS7.1AI score0.03377EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2020/04/10 9:15 p.m.•34 views

CVE-2020-11647

In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This was addressed in epan/dissectors/packet-bacapp.c by limiting the amount of recursion...

7.5CVSS7.1AI score0.03377EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•21 views

Huawei EulerOS: Security Advisory for screen (EulerOS-SA-2019-2548)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.5AI score0.04148EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2019/12/09 12:00 a.m.•28 views

EulerOS 2.0 SP5 : screen (EulerOS-SA-2019-2548)

According to the version of the screen package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial o...

5CVSS7.3AI score0.04148EPSS
SaveExploits1References2
OSV
OSV
•added 2019/05/23 12:29 p.m.•5 views

DEBIAN-CVE-2019-12295

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion...

7.5CVSS7.3AI score0.03765EPSS
SaveExploits0References1
OSV
OSV
•added 2019/05/23 12:29 p.m.•15 views

CVE-2019-12295

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion...

7.5CVSS7.3AI score
SaveExploits0References8
Prion
Prion
•added 2018/01/18 11:29 p.m.•16 views

Stack overflow

jQuery 3.0.0-rc.1 is vulnerable to Denial of Service DoS due to removing a logic that lowercased attribute names. Any attribute getter using a mixed-cased name for boolean attributes goes into an infinite recursion, exceeding the stack call limit...

5CVSS6.8AI score0.02886EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2017/10/23 8:29 a.m.•10 views

DEBIAN-CVE-2017-15377

In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic with a certain signature, because of DetectEngineContentInspection in detect-engine-content-inspection.c. The search engine doesn't stop when it should after no match is found;...

7.5CVSS6.8AI score0.01965EPSS
SaveExploits0References1
OSV
OSV
•added 2017/10/23 8:29 a.m.•8 views

UBUNTU-CVE-2017-15377

In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic with a certain signature, because of DetectEngineContentInspection in detect-engine-content-inspection.c. The search engine doesn't stop when it should after no match is found;...

7.5CVSS7.1AI score0.01965EPSS
SaveExploits0References3
Rows per page
Query Builder