Lucene search
+L

2576 matches found

NVD
NVD
added 2022/10/16 6:15 a.m.27 views

CVE-2022-42969

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not bein...

7.5CVSS0.01603EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2022/10/16 6:15 a.m.40 views

CVE-2022-42969

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not bein...

7.5CVSS6.7AI score0.01603EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/10/16 12:0 a.m.7 views

Pytest 安全漏洞

Pytest is a Python language-based testing framework from the Pytest team. A security vulnerability exists in Pytest versions prior to 1.11.0 that stems from the mishandling of its InfoSvnCommand parameter allowing remote attackers to conduct regular expression denial-of-service attacks via...

7.5CVSS6.7AI score0.01603EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2022/10/16 12:0 a.m.8 views

PT-2022-26687

Name of the Vulnerable Software and Affected Versions py versions through 1.11.0 Description The py library allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled...

8.7CVSS7.2AI score0.01603EPSS
SaveExploits1References47
OSV
OSV
added 2022/10/16 12:0 a.m.35 views

CVE-2022-42969

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not bein...

5.3CVSS5.3AI score
SaveExploits0References6
Debian CVE
Debian CVE
added 2022/10/16 12:0 a.m.35 views

CVE-2022-42969

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not bein...

7.5CVSS6.1AI score0.01603EPSS
SaveExploits1
Cvelist
Cvelist
added 2022/10/16 12:0 a.m.41 views

CVE-2022-42969

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not bein...

5.3CVSS7.7AI score0.01603EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2022/10/14 12:0 a.m.30 views

Amazon Linux 2022 : python3-subversion, subversion, subversion-devel (ALAS2022-2022-149)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-149 advisory. A flaw was found in Subversion. When using path-based authorization authz, the helper function detectchanged does not omit potentially sensitive information from log messages. In particular, if...

7.5CVSS6.1AI score0.09254EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2022/09/19 12:0 a.m.7 views

The vulnerability of the centralized Subversion version control system, related to improper authorization, allows a violator to gain access to confidential data.

The vulnerability of the centralized version control system Subversion is related to improper authorization. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential data...

4.3CVSS5.8AI score0.02788EPSS
SaveExploits1References17Affected Software12
BDU FSTEC
BDU FSTEC
added 2022/09/19 12:0 a.m.10 views

The vulnerability of the mod_dav_svn module in a centralized version control system for Subversion allows a hacker to trigger a service failure.

The vulnerability of the moddavsvn module in a centralized version control system like Subversion is related to an error in the path-based authentication rule search mechanism. Exploiting this vulnerability allows a malicious actor to cause service failures...

7.8CVSS6.8AI score0.09254EPSS
SaveExploits0References19Affected Software12
OSV
OSV
added 2022/09/15 3:15 p.m.2 views

DEBIAN-CVE-2022-38861

The MPlayer Project mplayer SVN-r38374-13.0.1 is vulnerable to memory corruption via function freempimage of libmpcodecs/mpimage.c...

5.5CVSS5.8AI score0.00317EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/09/15 12:0 a.m.7 views

PT-2022-7413 · Mplayer +2 · Mplayer +2

Name of the Vulnerable Software and Affected Versions: Mplayer versions SVN-r38374-13.0.1 Description: The issue is related to a memory leak in the Mplayer media player, specifically in the files vf.c and vf vo.c, due to the lack of memory release after its effective term of service. Exploitation...

5.5CVSS6.7AI score0.00358EPSS
SaveExploits1References17
CNNVD
CNNVD
added 2022/09/15 12:0 a.m.7 views

MPlayer 缓冲区错误漏洞

MPlayer is an open source multimedia player from the MPlayer team. A security vulnerability exists in MPlayer SVN-r38374-13.0.1 version and mencoder SVN-r38374-13.0.1 version, which stems from a buffer overflow via readaviheader in libmpdemux/aviheader.c. The vulnerability is caused by a buffer...

5.5CVSS6.2AI score0.00283EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/09/15 12:0 a.m.9 views

MPlayer 缓冲区错误漏洞

MPlayer is an open source multimedia player from the MPlayer team. A security vulnerability exists in MPlayer SVN-r38374-13.0.1 version, mencoder SVN-r38374-13.0.1 version, which originates from a buffer overflow in the mpgetbits function in libmpdemux/mpeghdr.c. The vulnerability is caused by a...

5.5CVSS6AI score0.00344EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2022/09/15 12:0 a.m.8 views

MPlayer 缓冲区错误漏洞

MPlayer is an open source multimedia player from the MPlayer team. A security vulnerability exists in MPlayer SVN-r38374-13.0.1 version, mencoder SVN-r38374-13.0.1 version, which originates from a buffer overflow in the genshvideo function in MPlayer/libmpdemux/demuxmov.c. The vulnerability is...

5.5CVSS5.9AI score0.00344EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2022/09/15 12:0 a.m.39 views

RHEL 7 : OpenShift Container Platform 4.4.33 (RHSA-2021:0282)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0282 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...

6.5CVSS7.2AI score0.01496EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2022/09/15 12:0 a.m.8 views

MPlayer 数字错误漏洞

MPlayer is an open source multimedia player from the MPlayer team. A security vulnerability exists in MPlayer SVN-r38374-13.0.1 version, mencoder SVN-r38374-13.0.1 version, which originates from an easy-to-zero out via the demuxopenavi function in libmpdemux/demuxavi.c. The vulnerability is cause...

5.5CVSS5.6AI score0.00317EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2022/09/08 12:0 a.m.38 views

RHEL 7 : OpenShift Container Platform 3.11.705 (RHSA-2022:2280)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:2280 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...

7.5CVSS7.2AI score0.7855EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2022/09/08 12:0 a.m.45 views

RHEL 8 : OpenShift Container Platform 4.7.52 paackages (RHSA-2022:4909)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:4909 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...

5.4CVSS6.2AI score0.7855EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2022/09/08 12:0 a.m.47 views

RHEL 7 / 8 : OpenShift Container Platform 4.6.59 (RHSA-2022:4947)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:4947 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

7.8CVSS7.3AI score0.7855EPSS
SaveExploits1References8
Rows per page
Query Builder