3517 matches found
CVE-2022-23837
CVE-2022-23837 affects Sidekiq (api.rb): there is no limit on the number of days when requesting graph statistics, which can overload the system and render the Web UI unavailable. Concrete references in connected docs include Debian/DLA-4407-1 (ruby-sidekiq fix in 6.0.4+dfsg-2+deb11u1; also menti...
CVE-2022-23837
In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users...
CVE-2022-23837
In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users...
CVE-2022-23837: Allocation of Resources Without Limits or Throttling
In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users...
github-readme-stats cross-site scripting vulnerability
github-readme-stats is an open source project. github-readme-stats suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by WEB applications, which can be exploited by attackers to execute client-side code...
CVE-2020-23986
Github Read Me Stats commit 3c7220e4f7144f6cb068fd433c774f6db47ccb95 was discovered to contain a reflected cross-site scripting XSS vulnerability via the function renderError...
CVE-2020-23986
Github Read Me Stats commit 3c7220e4f7144f6cb068fd433c774f6db47ccb95 was discovered to contain a reflected cross-site scripting XSS vulnerability via the function renderError...
CVE-2020-23986: Improper Neutralization of Input During Web Page Generation
Github Read Me Stats commit 3c7220e4f7144f6cb068fd433c774f6db47ccb95 was discovered to contain a reflected cross-site scripting XSS vulnerability via the function renderError...
PT-2021-7530 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16-rc6 Description: The issue is related to the ef100 update stats function in the drivers/net/ethernet/sfc/ef100 nic.c module of the Linux kernel, which lacks a check of the return value of kmalloc. This can...
CVE-2020-36131
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/ratehist.c...
DEBIAN-CVE-2020-36131
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/ratehist.c...
CVE-2020-36131
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/ratehist.c...
UBUNTU-CVE-2020-36131
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/ratehist.c...
CVE-2020-36131
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/ratehist.c...
CVE-2020-36131
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/ratehist.c...
CVE-2020-36131
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/ratehist.c...
CVE-2020-36131: Out-of-bounds Write
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/ratehist.c...
CVE-2021-42364
The Stetic WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the statspage function found in the /stetic.php file, which made it possible for attackers to inject arbitrary web scripts in versions up to, and including 1.0.6...
OESA-2021-1437 trafficserver security update
Apache Traffic Server is an OpenSource HTTP / HTTPS / HTTP/2 / QUIC reverse, forward and transparent proxy and cache. Security Fixes: Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server...
The vulnerability of the stats-over-http plugin in the Apache Traffic Server web server allows a hacker to cause a service failure.
The vulnerability of the stats-over-http plugin in the Apache Traffic Server web server is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability may allow a malicious actor to cause service interruptions remotely...