Lucene search
+L

5772 matches found

PyPA
PyPA
added 2019/08/18 8:15 p.m.11 views

PYSEC-2019-104

DISPUTED core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. NOTE: the vendor disputes this issue because it is exploitable only in conjunction with...

9.8CVSS7.1AI score0.01646EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2019/08/18 8:15 p.m.12 views

Design/Logic Flaw

DISPUTED core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. NOTE: the vendor disputes this issue because it is exploitable only in conjunction with...

6.8CVSS9.4AI score0.01646EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2019/08/18 8:15 p.m.8 views

PYSEC-2019-34

DISPUTED core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. NOTE: the vendor disputes this issue because it is exploitable only in conjunction with...

5.9AI score
SaveExploits0References2
OSV
OSV
added 2019/08/18 8:15 p.m.5 views

PYSEC-2019-104

DISPUTED core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. NOTE: the vendor disputes this issue because it is exploitable only in conjunction with...

9.8CVSS5.9AI score0.01646EPSS
SaveExploits0References3
CVE
CVE
added 2019/08/18 7:56 p.m.59 views

CVE-2019-15149

CVE-2019-15149 affects Mitogen's core.py in versions before 0.2.8, where a typo drops the unidirectional-routing protection when a child is initiated by another child; the Ansible extension is unaffected. Public details in the connected documents confirm the root cause (typo in core.py) and the i...

9.8CVSS9.3AI score0.01646EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/08/18 7:56 p.m.24 views

CVE-2019-15149

core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. NOTE: the vendor disputes this issue because it is exploitable only in conjunction with hypothetica...

9.5AI score0.01646EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2019/08/18 12:0 a.m.5 views

PT-2019-14014 · Mitogen · Mitogen

Name of the Vulnerable Software and Affected Versions: Mitogen versions prior to 0.2.8 Description: The issue is related to a typo in core.py that affects the unidirectional-routing protection mechanism when a child is initiated by another child. The Ansible extension is not affected. The vendor...

9.8CVSS9.6AI score0.01646EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2019/08/16 12:0 a.m.45 views

Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability

According to its self-reported version, Cisco IOS XR Software is affected by multiple vulnerabilities: - A vulnerability in the implementation of the Intermediate System-to-Intermediate System IS-IS routing protocol functionality in Cisco IOS XR Software could allow an unauthenticated attacker wh...

7.4CVSS7.3AI score0.00525EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2019/08/14 12:0 a.m.60 views

Debian DLA-1884-1 : linux security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2017-18509 Denis Andzakovic reported a missing type check in the IPv4 multicast routing implementation. A user with the CAPNETADMIN capability in a...

9.3CVSS7.4AI score0.05111EPSS
SaveExploits6References11
OSV
OSV
added 2019/08/13 2:15 p.m.5 views

DEBIAN-CVE-2017-18509

An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an attacker can control a pointer in kernel land and cause an inetcsklistenstop general protection fault, or potentially execute arbitrary code under certain circumstances. The issue...

7.8CVSS7.1AI score0.00839EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2019/08/12 12:0 a.m.33 views

NewStart CGSL MAIN 4.05 : quagga Multiple Vulnerabilities (NS-SA-2019-0101)

The remote NewStart CGSL host, running version MAIN 4.05, has quagga packages installed that are affected by multiple vulnerabilities: - A denial of service flaw affecting various daemons in Quagga was found. A remote attacker could use this flaw to cause the various Quagga daemons, which expose...

9.8CVSS7.3AI score0.18803EPSS
SaveExploits0References6
CNVD
CNVD
added 2019/08/08 12:0 a.m.7 views

Cisco IOS XR Input Validation Error Vulnerability (CNVD-2019-46438)

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. An input validation error vulnerability exists in the Intermediate System-to-Intermediate System IS-IS routing protocol feature in Cisco IOS XR versions prior to 6.6.3, which arises...

7.4CVSS6.6AI score0.00447EPSS
SaveExploits0References1
Prion
Prion
added 2019/08/07 10:15 p.m.16 views

Race condition

A vulnerability in the implementation of Intermediate SystemtoIntermediate System ISIS routing protocol functionality in Cisco IOS XR Software could allow an unauthenticated attacker who is in the same IS-IS area to cause a denial of service DoS condition. The vulnerability is due to incorrect...

6.1CVSS7.4AI score0.00525EPSS
SaveExploits0References1Affected Software2
Prion
Prion
added 2019/08/07 9:15 p.m.16 views

Race condition

A vulnerability in the implementation of the Intermediate SystemtoIntermediate System ISIS routing protocol functionality in Cisco IOS XR Software could allow an unauthenticated attacker who is in the same ISIS area to cause a denial of service DoS condition. The vulnerability is due to incorrect...

6.1CVSS7.3AI score0.00447EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2019/08/07 9:10 p.m.29 views

CVE-2019-1918 Cisco IOS XR Software Intermediate System–to–Intermediate System Denial of Service Vulnerability

A vulnerability in the implementation of Intermediate SystemtoIntermediate System ISIS routing protocol functionality in Cisco IOS XR Software could allow an unauthenticated attacker who is in the same IS-IS area to cause a denial of service DoS condition. The vulnerability is due to incorrect...

7.4CVSS7.4AI score0.00525EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2019/08/07 9:0 p.m.12 views

CVE-2019-1910 Cisco IOS XR Software Intermediate System to Intermediate System Denial of Service Vulnerability

A vulnerability in the implementation of the Intermediate SystemtoIntermediate System ISIS routing protocol functionality in Cisco IOS XR Software could allow an unauthenticated attacker who is in the same ISIS area to cause a denial of service DoS condition. The vulnerability is due to incorrect...

7.4CVSS6.9AI score0.00447EPSS
SaveExploits0References1
Cisco
Cisco
added 2019/08/07 4:0 p.m.58 views

Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability

A vulnerability in the implementation of Intermediate System–to–Intermediate System IS–IS routing protocol functionality in Cisco IOS XR Software could allow an unauthenticated attacker who is in the same IS-IS area to cause a denial of service DoS condition. The vulnerability is due to incorrect...

7.4CVSS7.5AI score0.00525EPSS
SaveExploits0References1
OSV
OSV
added 2019/07/30 3:15 p.m.4 views

CVE-2019-14403

cPanel before 78.0.18 offers an open mail relay because of incorrect domain-redirect routing SEC-483...

4.3CVSS5.8AI score0.0069EPSS
SaveExploits0References1
NVD
NVD
added 2019/07/30 3:15 p.m.26 views

CVE-2019-14403

cPanel before 78.0.18 offers an open mail relay because of incorrect domain-redirect routing SEC-483...

4.3CVSS4.7AI score0.0069EPSS
SaveExploits0References1
OSV
OSV
added 2019/07/30 2:15 p.m.5 views

CVE-2019-14392

cPanel before 80.0.22 allows remote code execution by a demo account because of incorrect URI dispatching SEC-501...

8.8CVSS7.8AI score0.01841EPSS
SaveExploits0References1
Rows per page
Query Builder