Lucene search
+L

2373 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/17 12:00 a.m.•5 views

CVE-2022-0639: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7...

6.5CVSS6.7AI score0.01535EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/02/17 12:00 a.m.•17 views

url-parse 安全漏洞

Url-Parse is a small Url parser that works seamlessly across Node.js and browser environments. A security vulnerability exists in url-parse versions prior to 1.5.7, which can be exploited by an attacker to bypass authorization via a user-controlled key...

6.5CVSS7AI score0.01535EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2022/02/17 12:00 a.m.•38 views

CVE-2022-0639

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7...

6.5CVSS6.8AI score0.01535EPSS
SaveExploits1
attackerkb
attackerkb
•added 2022/02/16 9:15 a.m.•13 views

CVE-2022-0613

Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8...

6.5CVSS6.2AI score0.0158EPSS
SaveExploits1References5
Prion
Prion
•added 2022/02/16 9:15 a.m.•31 views

Authorization

Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8...

6.4CVSS5.6AI score0.0158EPSS
SaveExploits1References3Affected Software2
OSV
OSV
•added 2022/02/16 9:15 a.m.•12 views

UBUNTU-CVE-2022-0613

Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8...

6.5CVSS6.8AI score0.0158EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/02/16 8:40 a.m.•53 views

CVE-2022-0613 Authorization Bypass Through User-Controlled Key in medialize/uri.js

Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8...

5.3CVSS6.5AI score0.0158EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/02/16 12:00 a.m.•11 views

PT-2022-13299 · Uri.Js · Uri.Js

Name of the Vulnerable Software and Affected Versions: urijs versions prior to 1.19.8 Description: The issue allows an attacker to bypass authorization through a user-controlled key. Specifically, it is possible to use case-insensitive protocol schemes, such as HTTP, htTP, HTtp, etc., to bypass...

6.5CVSS5.5AI score0.0158EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/16 12:00 a.m.•5 views

CVE-2022-0613: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8...

6.5CVSS6.5AI score0.0158EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/02/15 10:13 p.m.•32 views

CVE-2021-46249

An authorization bypass exploited by a user-controlled key in SpecificApps REST API in ScratchOAuth2 before commit d856dc704b2504cd3b92cf089fdd366dd40775d6 allows app owners to set flags that indicate whether an app is verified on their own apps...

6.5CVSS6.7AI score0.00643EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2022/02/15 12:02 a.m.•45 views

Authorization bypass in url-parse

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6...

8.8CVSS2.9AI score0.01782EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2022/02/15 12:02 a.m.•29 views

GHSA-RQFF-837H-MM52 Authorization bypass in url-parse

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6...

5.3CVSS6.9AI score0.01782EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/15 12:00 a.m.•5 views

CVE-2021-46249: Authorization Bypass Through User-Controlled Key

An authorization bypass exploited by a user-controlled key in SpecificApps REST API in ScratchOAuth2 before commit d856dc704b2504cd3b92cf089fdd366dd40775d6 allows app owners to set flags that indicate whether an app is verified on their own apps...

6.5CVSS6.7AI score0.00643EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/02/14 4:15 p.m.•14 views

CVE-2022-0512

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6...

8.8CVSS6.7AI score0.01782EPSS
SaveExploits1References4
OSV
OSV
•added 2022/02/14 4:15 p.m.•9 views

DEBIAN-CVE-2022-0512

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6...

5.3CVSS6.7AI score0.01782EPSS
SaveExploits1References1
OSV
OSV
•added 2022/02/14 4:15 p.m.•12 views

UBUNTU-CVE-2022-0512

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6...

8.8CVSS7.3AI score0.01782EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2022/02/14 4:15 p.m.•54 views

CVE-2022-0512

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6...

8.8CVSS6.8AI score0.01782EPSS
SaveExploits1References4
OSV
OSV
•added 2022/02/14 12:00 a.m.•27 views

CVE-2022-0512 Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6...

8.8CVSS6.8AI score
SaveExploits0References5
CNNVD
CNNVD
•added 2022/02/14 12:00 a.m.•15 views

NPM url-parse 安全漏洞

Url-Parse is a small Url parser that works seamlessly across Node.js and browser environments. A security vulnerability exists in NPM url-parse that stems from bypassing authorization via a user-controlled key in NPM url-parse before 1.5.6...

8.8CVSS7AI score0.01782EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2022/02/14 12:00 a.m.•10 views

PT-2022-13228 · Parse-Url +2 · Url-Parse +2

Name of the Vulnerable Software and Affected Versions: url-parse versions prior to 1.5.6 Description: The issue is related to an authorization bypass through a user-controlled key. This allows for unauthorized access. The estimated number of potentially affected devices is not specified...

10CVSS6.3AI score0.03805EPSS
SaveExploits7References40
Rows per page
Query Builder