Lucene search
+L

870 matches found

OSV
OSV
added 2023/02/21 4:15 p.m.8 views

UBUNTU-CVE-2023-23009

Libreswan 4.9 allows remote attackers to cause a denial of service assert failure and daemon restart via crafted TS payload with an incorrect selector length...

6.5CVSS6.6AI score0.01606EPSS
SaveExploits1References3
Prion
Prion
added 2023/02/21 4:15 p.m.25 views

Code injection

Libreswan 4.9 allows remote attackers to cause a denial of service assert failure and daemon restart via crafted TS payload with an incorrect selector length...

4CVSS6.3AI score0.01606EPSS
SaveExploits1References4Affected Software2
Debian CVE
Debian CVE
added 2023/02/21 12:00 a.m.32 views

CVE-2023-23009

Libreswan 4.9 allows remote attackers to cause a denial of service assert failure and daemon restart via crafted TS payload with an incorrect selector length...

6.5CVSS6.4AI score0.01606EPSS
SaveExploits1
Cvelist
Cvelist
added 2023/02/21 12:00 a.m.28 views

CVE-2023-23009

Libreswan 4.9 allows remote attackers to cause a denial of service assert failure and daemon restart via crafted TS payload with an incorrect selector length...

6.7AI score0.01606EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2023/02/21 12:00 a.m.5 views

CVE-2023-23009

Libreswan 4.9 allows remote attackers to cause a denial of service assert failure and daemon restart via crafted TS payload with an incorrect selector length...

6.4AI score0.01606EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:21 a.m.8 views

SUSE CVE-2004-0367

Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service crash via a zero-length Presentation protocol selector...

5CVSS6.8AI score0.05275EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:11 a.m.6 views

SUSE CVE-2007-3731

The Linux kernel 2.6.20 and 2.6.21 does not properly handle an invalid LDT segment selector in %cs the xcs field during ptrace single-step operations, which allows local users to cause a denial of service NULL dereference and OOPS via certain code that makes ptrace PTRACESETREGS and...

4.9CVSS6.7AI score0.00512EPSS
SaveExploits2References3
SUSE CVE
SUSE CVE
added 2023/02/15 6:03 a.m.7 views

SUSE CVE-2009-1958

charon/sa/tasks/childcreate.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial of service via an IKEAUTH request without a 1 TSi or 2 TSr traffic selector...

5CVSS6.9AI score0.02947EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:59 a.m.3 views

SUSE CVE-2010-1417

The Cascading Style Sheets CSS implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via HTML content th...

9.3CVSS7.8AI score0.06563EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 5:33 a.m.6 views

SUSE CVE-2013-7106

Multiple stack-based buffer overflows in Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long string to the 1 displaynavtable, 2 pagelimitselector, 3 printexportlink, or 4...

6.5CVSS8.1AI score0.0254EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:27 a.m.5 views

SUSE CVE-2018-11694

An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::selectorappend which could be leveraged by an attacker to cause a denial of service application crash or possibly have unspecified other impact...

8.8CVSS8.9AI score0.01707EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:21 a.m.8 views

SUSE CVE-2018-19797

In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::SelectorList::populateextends in SharedPtr.hpp used by ast.cpp and astselectors.cpp may cause a Denial of Service application crash via a crafted sass input file...

6.5CVSS8.9AI score0.01829EPSS
SaveExploits0References6
OSV
OSV
added 2023/02/06 12:29 a.m.10 views

MAL-2023-328 Malicious code in fc-account-selector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2a2b9137afe6979e5b25e3e2aba4da1a9152feee7e21f1fc61c909273642d2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7.2AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/02/06 12:29 a.m.8 views

Malicious code in fc-account-selector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2a2b9137afe6979e5b25e3e2aba4da1a9152feee7e21f1fc61c909273642d2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Hacker One
Hacker One
added 2023/01/21 10:45 p.m.22 views

Adobe: Adobe Experience Manager 'Childlist selector' - Cross-Site Scripting on cbconnection-stage.adobe.com

We appreciate the collaboration and responsible disclosure of this researcher...

7AI score
SaveExploits0
Veracode
Veracode
added 2023/01/10 5:50 a.m.20 views

Regular Expression Denial Of Service (ReDoS)

mootools-core is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability exists via the Slick.parse function in Slick.Parser.js, which does not properly handle user-injected string into a CSS selector at runtime, which allows remote attackers to cause denial of service...

7.5CVSS7AI score0.00644EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2023/01/03 6:30 p.m.4 views

GHSA-V63Q-HGQC-QVPG MooTools Regular Expression Denial of Service

MooTools is a collection of JavaScript utilities for JavaScript developers. All known versions include a CSS selector parser that is vulnerable to Regular Expression Denial of Service ReDoS. An attack requires that an attacker can inject a string into a CSS selector at runtime, which is quite...

7.5CVSS7.1AI score0.00644EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2023/01/03 6:30 p.m.45 views

MooTools Regular Expression Denial of Service

MooTools is a collection of JavaScript utilities for JavaScript developers. All known versions include a CSS selector parser that is vulnerable to Regular Expression Denial of Service ReDoS. An attack requires that an attacker can inject a string into a CSS selector at runtime, which is quite...

7.5CVSS6.9AI score0.00644EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2023/01/03 5:15 p.m.3 views

DEBIAN-CVE-2021-32821

MooTools is a collection of JavaScript utilities for JavaScript developers. All known versions include a CSS selector parser that is vulnerable to Regular Expression Denial of Service ReDoS. An attack requires that an attacker can inject a string into a CSS selector at runtime, which is quite...

7.5CVSS7.3AI score0.00644EPSS
SaveExploits1References1
NVD
NVD
added 2023/01/03 5:15 p.m.65 views

CVE-2021-32821

MooTools is a collection of JavaScript utilities for JavaScript developers. All known versions include a CSS selector parser that is vulnerable to Regular Expression Denial of Service ReDoS. An attack requires that an attacker can inject a string into a CSS selector at runtime, which is quite...

7.5CVSS6.6AI score0.00644EPSS
SaveExploits1References1
Rows per page
Query Builder