Lucene search
+L

4455 matches found

Prion
Prion
•added 2022/12/14 9:15 a.m.•30 views

Race condition

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden...

2.6CVSS5.7AI score0.03434EPSS
SaveExploits5References2Affected Software1
osv_ubuntu
osv_ubuntu
•added 2022/12/14 9:15 a.m.•18 views

UBUNTU-CVE-2022-3590

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden...

5.9CVSS6.3AI score0.03434EPSS
SaveExploits5References4
UbuntuCve
UbuntuCve
•added 2022/12/14 9:15 a.m.•96 views

CVE-2022-3590

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden...

5.9CVSS6.2AI score0.03434EPSS
SaveExploits5References3
osv_cve
osv_cve
•added 2022/12/14 8:33 a.m.•32 views

CVE-2022-3590 WP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebinding

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden...

5.9CVSS6.3AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2022/12/14 8:33 a.m.•82 views

CVE-2022-3590 WP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebinding

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden...

6AI score0.03434EPSS
SaveExploits5References2
Mend
Mend
•added 2022/12/14 8:33 a.m.•5 views

CVE-2022-3590

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden...

8.2CVSS0.03434EPSS
SaveExploits5References5
CVE
CVE
•added 2022/12/14 8:33 a.m.•847 views

CVE-2022-3590

WordPress (versions

5.9CVSS5.6AI score0.03434EPSS
SaveIn wildExploits5References2Affected Software1
Debian CVE
Debian CVE
•added 2022/12/14 8:33 a.m.•193 views

CVE-2022-3590

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden...

5.9CVSS6.2AI score0.03434EPSS
SaveExploits5
Hewlett-Packard
Hewlett-Packard
•added 2022/12/14 12:00 a.m.•57 views

HP PC BIOS December 2022 Security Update (TOCTOU)

A potential Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in the BIOS for certain HP PC products which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability. HP has identifi...

7CVSS1.4AI score0.00138EPSS
SaveExploits0Affected Software324
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/14 12:00 a.m.•4 views

CVE-2022-3590: Time-of-check Time-of-use (TOCTOU) Race Condition

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden...

5.9CVSS5.8AI score0.03434EPSS
SaveExploits5References2
OpenVAS
OpenVAS
•added 2022/12/14 12:00 a.m.•19 views

Mageia: Security Advisory (MGASA-2022-0455)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.7CVSS5.2AI score0.00307EPSS
SaveExploits0References4
osv_mgasa
osv_mgasa
•added 2022/12/13 10:09 p.m.•29 views

MGASA-2022-0455 Updated shadowutils packages fix security vulnerability

shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees. CVE-2013-4235...

4.7CVSS4.5AI score0.00307EPSS
SaveExploits0References3
Mageia
Mageia
•added 2022/12/13 10:09 p.m.•46 views

Updated shadowutils packages fix security vulnerability

shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees. CVE-2013-4235...

4.7CVSS2.8AI score0.00307EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/13 12:00 a.m.•3 views

CVE-2022-44670: Time-of-check Time-of-use (TOCTOU) Race Condition

Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...

8.1CVSS8.3AI score0.01218EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
•added 2022/12/13 12:00 a.m.•593 views

WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding

Description WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden. PoC...

5.9CVSS5.7AI score0.03434EPSS
SaveExploits5References1
osv_cve
osv_cve
•added 2022/12/08 4:15 p.m.•15 views

CVE-2022-39908

TOCTOU vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-Of-Bounds Write...

7.4CVSS5.8AI score0.00102EPSS
SaveExploits0References1
NVD
NVD
•added 2022/12/08 4:15 p.m.•23 views

CVE-2022-39908

TOCTOU vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-Of-Bounds Write...

7.4CVSS0.00102EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/08 12:00 a.m.•8 views

CVE-2022-39908: Time-of-check Time-of-use (TOCTOU) Race Condition

TOCTOU vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-Of-Bounds Write...

7.4CVSS5.8AI score0.00102EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2022/12/08 12:00 a.m.•10 views

CVE-2022-39908

TOCTOU vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-Of-Bounds Write...

6.9CVSS7.3AI score0.00102EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/12/08 12:00 a.m.•38 views

CVE-2022-39908

TOCTOU vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-Of-Bounds Write...

6.9CVSS7.5AI score0.00102EPSS
SaveExploits0References1
Rows per page
Query Builder