Lucene search
+L

6912 matches found

GithubExploit
GithubExploit
added 2023/03/16 5:28 p.m.711 views

Exploit for Uncontrolled Resource Consumption in Microsoft

CVE-2023-23396 Here you can download the exploit. H...

6.5CVSS7.1AI score0.03829EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2023/03/13 12:00 a.m.10 views

PT-2023-1883 · Mcafee · Mcafee Total Protection

Name of the Vulnerable Software and Affected Versions: McAfee Total Protection versions prior to 16.0.49 Description: The issue is related to an uncontrolled search path element in McAfee Total Protection, which can be exploited to elevate user privileges due to DLL sideloading. This could enable...

5.5CVSS7.2AI score0.00254EPSS
SaveExploits0References9
OSV
OSV
added 2023/03/10 9:15 p.m.5 views

CVE-2023-25143

An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote code execution state on affected products...

9.8CVSS7.8AI score0.01742EPSS
SaveExploits0References1
Prion
Prion
added 2023/03/10 9:15 p.m.24 views

Path traversal

An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote code execution state on affected products...

7.5CVSS9.5AI score0.01742EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/03/10 12:00 a.m.11 views

Trend Micro Apex One 代码问题漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One Server that stems from an uncontrolled search path element vulnerability in the installer, which can be exploited by an attacker to achieve remote code execution on th...

9.8CVSS9.2AI score0.01742EPSS
SaveExploits0References2
OSV
OSV
added 2023/03/07 5:15 p.m.8 views

CVE-2022-41333

An uncontrolled resource consumption vulnerability CWE-400 in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism may allow an unauthenticated attacker to make the device unavailable via crafted GET requests...

7.5CVSS5.8AI score0.0723EPSS
SaveExploits3References2
Prion
Prion
added 2023/03/07 5:15 p.m.22 views

Design/Logic Flaw

An uncontrolled resource consumption vulnerability CWE-400 in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism may allow an unauthenticated attacker to make the device unavailable via crafted GET requests...

5CVSS7.6AI score0.0723EPSS
SaveExploits3References2Affected Software1
Cvelist
Cvelist
added 2023/03/07 4:04 p.m.42 views

CVE-2022-41333

An uncontrolled resource consumption vulnerability CWE-400 in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism may allow an unauthenticated attacker to make the device unavailable via crafted GET requests...

7.5CVSS7.8AI score0.0723EPSS
SaveExploits3References2
NVD
NVD
added 2023/03/07 1:15 a.m.29 views

CVE-2023-23554

Uncontrolled search path element vulnerability exists in pgivm versions prior to 1.5.1. When refreshing an IMMV, pgivm executes functions without specifying schema names. Under certain conditions, pgivm may be tricked to execute unexpected functions from other schemas with the IMMV owner's...

8.8CVSS8.8AI score0.00939EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/03/07 12:00 a.m.10 views

CVE-2023-23554

Uncontrolled search path element vulnerability exists in pgivm versions prior to 1.5.1. When refreshing an IMMV, pgivm executes functions without specifying schema names. Under certain conditions, pgivm may be tricked to execute unexpected functions from other schemas with the IMMV owner's...

7.3AI score0.00939EPSS
SaveExploits0References3
OSV
OSV
added 2023/03/07 12:00 a.m.16 views

CVE-2023-23554

Uncontrolled search path element vulnerability exists in pgivm versions prior to 1.5.1. When refreshing an IMMV, pgivm executes functions without specifying schema names. Under certain conditions, pgivm may be tricked to execute unexpected functions from other schemas with the IMMV owner's...

8.8CVSS7.3AI score
SaveExploits0References5
CNNVD
CNNVD
added 2023/03/07 12:00 a.m.14 views

pg_ivm 代码问题漏洞

pgivm is a library in the SRA OSS open source . IVM Incremental View Maintenance implementation as a PostgreSQL extension. A security vulnerability exists in pgivm versions prior to 1.5.1, which stems from the presence of an uncontrolled search path element vulnerability that can be exploited by ...

8.8CVSS6.7AI score0.00939EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/03/07 12:00 a.m.13 views

The vulnerability of the optimizing compiler oneAPI DPC++/C++ Compiler, related to the uncontrolled search path element, allows attackers to enhance their privileges.

The vulnerability of the optimizing compiler oneAPI DPC++/C++ Compiler is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS7.2AI score0.00195EPSS
SaveExploits0References2Affected Software2
UbuntuCve
UbuntuCve
added 2023/03/06 11:15 p.m.49 views

CVE-2022-3277

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significa...

6.5CVSS6.5AI score0.01065EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/03/06 12:00 a.m.39 views

XWiki 7.1-milestone-1 < 14.0 Uncontrolled Resource Consumption Vulnerability (GHSA-92wp-r7hm-42g7)

Xwiki is prone to an uncontrolled resource consumption vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki...

7.5CVSS7.2AI score0.00855EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2023/03/03 10:50 p.m.44 views

XWiki Platform subject to Uncontrolled Resource Consumption

Impact It's possible to make the farm unusable by adding an object to a page with a huge number e.g. 67108863. This will most of the time fill the memory allocated to XWiki and make it unusable every time this document is manipulated. Patches It has been patched in XWiki 14.0 Workarounds There is...

7.5CVSS7.3AI score0.00855EPSS
SaveExploits1References7Affected Software1
OSV
OSV
added 2023/03/03 10:50 p.m.31 views

GHSA-92WP-R7HM-42G7 XWiki Platform subject to Uncontrolled Resource Consumption

Impact It's possible to make the farm unusable by adding an object to a page with a huge number e.g. 67108863. This will most of the time fill the memory allocated to XWiki and make it unusable every time this document is manipulated. Patches It has been patched in XWiki 14.0 Workarounds There is...

5.7CVSS6.3AI score0.00855EPSS
SaveExploits1References7
CNVD
CNVD
added 2023/03/02 12:00 a.m.45 views

Dell PowerScale OneFS Resource Management Error Vulnerability

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS is vulnerable to a resource management error that stems from the presence of uncontrolled resource consumption, which could be exploited by an attacker to compromise built-in hardware management functions and...

7.5CVSS3.1AI score0.00616EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/03/01 12:00 a.m.18 views

The vulnerability of NVIDIA GeForce Experience’s software, related to an uncontrolled search path, allows a hacker to execute arbitrary code.

The vulnerability of NVIDIA GeForce Experience software relates to an uncontrolled element in the search process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.6AI score0.00209EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/03/01 12:00 a.m.29 views

Schneider Electric Modicon Uncontrolled Resource Consumption (CVE-2013-2763)

DISPUTED The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service resource consumption via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it could not be duplicated and an attacker could not remotely exploit this observed behavior t...

5CVSS5.7AI score0.02133EPSS
SaveExploits0References2
Rows per page
Query Builder