Lucene search
+L

10333 matches found

Prion
Prion
added 2013/04/22 3:27 a.m.16 views

Sql injection

The Active Record component in Ruby on Rails 2.3.x, 3.0.x, 3.1.x, and 3.2.x does not ensure that the declared data type of a database column is used during comparisons of input values to stored values in that column, which makes it easier for remote attackers to conduct data-type injection attack...

6.4CVSS6.9AI score0.01962EPSS
SaveExploits2References6Affected Software2
Debian CVE
Debian CVE
added 2013/04/22 1:00 a.m.49 views

CVE-2013-3221

The Active Record component in Ruby on Rails 2.3.x, 3.0.x, 3.1.x, and 3.2.x does not ensure that the declared data type of a database column is used during comparisons of input values to stored values in that column, which makes it easier for remote attackers to conduct data-type injection attack...

6.4CVSS6.4AI score0.01962EPSS
SaveExploits2
CVE
CVE
added 2013/04/22 1:00 a.m.81 views

CVE-2013-3221

CVE-2013-3221 involves the Active Record component of Ruby on Rails (versions 2.3.x, 3.0.x, 3.1.x, 3.2.x). The issue arises because the database column data type declared for a column is not consistently used when comparing input values to stored values, enabling data-type injection attacks. The ...

6.4CVSS6.6AI score0.01962EPSS
SaveExploits2References6Affected Software1
Cvelist
Cvelist
added 2013/04/22 1:00 a.m.33 views

CVE-2013-3221

The Active Record component in Ruby on Rails 2.3.x, 3.0.x, 3.1.x, and 3.2.x does not ensure that the declared data type of a database column is used during comparisons of input values to stored values in that column, which makes it easier for remote attackers to conduct data-type injection attack...

6.3AI score0.01962EPSS
SaveExploits2References6
OpenVAS
OpenVAS
added 2013/04/22 12:00 a.m.142 views

Netgear WNDAP350 / WN604 Wireless Access Point Multiple Information Disclosure Vulnerabilities - Active Check

Various Netgear wireless access point devices are prone to multiple remote information disclosure issues because they fail to restrict access to sensitive information. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

6.9CVSS6.1AI score0.45681EPSS
SaveExploits0References3
RubySec
RubySec
added 2013/04/21 12:00 a.m.12 views

Data-type injection vulnerability

The Active Record component in Ruby on Rails 2.3.x, 3.0.x, 3.1.x, and 3.2.x does not ensure that the declared data type of a database column is used during comparisons of input values to stored values in that column, which makes it easier for remote attackers to conduct data-type injection attack...

6.4CVSS5.9AI score0.01962EPSS
SaveExploits2References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2013/04/12 12:00 a.m.45 views

FreeBSD : rubygem-rails -- multiple vulnerabilities (db0c4b00-a24c-11e2-9601-000d601460a4)

Ruby on Rails team reports : Rails versions 3.2.13 has been released. This release contains important security fixes. It is recommended users upgrade as soon as possible. Four vulnerabilities have been discovered and fixed : - CVE-2013-1854 Symbol DoS vulnerability in Active Record - CVE-2013-185...

5.8CVSS7AI score0.03438EPSS
SaveExploits2References9
securityvulns
securityvulns
added 2013/04/12 12:00 a.m.61 views

Microsoft Active Directory DoS

Memory exhaustion...

5CVSS2.6AI score0.27005EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2013/04/10 12:00 a.m.29 views

Microsoft Windows Active Directory Denial of Service Vulnerability (2830914)

This host is missing an important security update according to Microsoft Bulletin MS13-032. OpenVAS Vulnerability Test $Id: secpodms13-032.nasl 8276 2018-01-03 12:29:18Z asteins $ Microsoft Windows Active Directory Denial of Service Vulnerability 2830914 Authors: Antu Sanadi Copyright: Copyright ...

5CVSS6.5AI score0.27005EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2013/04/10 12:00 a.m.16 views

Microsoft Windows Active Directory Denial of Service Vulnerability (2830914)

This host is missing an important security update according to Microsoft Bulletin MS13-032. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

5CVSS5AI score0.27005EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2013/04/10 12:00 a.m.35 views

MS13-032: Vulnerability in Active Directory Could Lead to Denial of Service (2830914)

The version of Active Directory installed on the remote host is is affected by a denial of service vulnerability. A remote, authenticated attacker can exploit this flaw by sending a specially crafted query to the LDAP service that could cause the LDAP service to stop responding. C Tenable Network...

5CVSS5.6AI score0.27005EPSS
SaveExploits0References2
Prion
Prion
added 2013/04/09 10:55 p.m.22 views

Memory corruption

The LDAP service in Microsoft Active Directory, Active Directory Application Mode ADAM, Active Directory Lightweight Directory Service AD LDS, and Active Directory Services allows remote attackers to cause a denial of service memory consumption and service outage via a crafted query, aka "Memory...

5CVSS6.8AI score0.27005EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2013/04/09 10:00 p.m.26 views

CVE-2013-1282

The LDAP service in Microsoft Active Directory, Active Directory Application Mode ADAM, Active Directory Lightweight Directory Service AD LDS, and Active Directory Services allows remote attackers to cause a denial of service memory consumption and service outage via a crafted query, aka "Memory...

6.3AI score0.27005EPSS
SaveExploits0References3
CVE
CVE
added 2013/04/09 10:00 p.m.172 views

CVE-2013-1282

CVE-2013-1282 affects the LDAP service in Microsoft Active Directory family (AD DS, ADAM, AD LDS). The vulnerability allows a remote attacker to cause memory consumption and a denial of service by sending a crafted LDAP query, leading to service outage. The root cause is the LDAP service failing ...

5CVSS6.4AI score0.27005EPSS
SaveExploits0References3Affected Software4
OpenVAS
OpenVAS
added 2013/04/09 12:00 a.m.27 views

Active Perl Denial of Service Vulnerability - Windows

Active Perl is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.2AI score0.03577EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2013/04/09 12:00 a.m.30 views

D-Link Devices Multiple Vulnerabilities (Apr 2013) - Active Check

D-Link devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8CVSS7.5AI score0.42414EPSS
SaveExploits2References4
Microsoft KB
Microsoft KB
added 2013/04/09 12:00 a.m.50 views

MS13-032: Description of the security update for Active Directory: April 9, 2013

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2013/04/09 12:00 a.m.34 views

MS13-032: Vulnerability in Active Directory could lead to denial of service: April 9, 2013

Resolves a vulnerability in Active Directory that could allow denial of service if an attacker sends a specially crafted query to the Lightweight Directory Access Protocol LDAP service.INTRODUCTIONMicrosoft has released security bulletin MS13-032. To view the complete security bulletin, go to one...

5CVSS5.8AI score0.27005EPSS
SaveExploits0
Symantec
Symantec
added 2013/04/09 12:00 a.m.37 views

Microsoft Windows Active Directory CVE-2013-1282 Denial of Service Vulnerability

Description Microsoft Windows is prone to a denial-of-service vulnerability. Successful exploits may allow the attacker to cause the LDAP service to become non-responsive, resulting in denial-of-service conditions. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5....

5CVSS6.5AI score0.27005EPSS
SaveExploits0References1Affected Software14
OpenVAS
OpenVAS
added 2013/04/09 12:00 a.m.31 views

Active Perl Denial of Service Vulnerability (Windows)

The host is installed with Active Perl and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbactiveperldosvulnwin.nasl 6093 2017-05-10 09:03:18Z teissa $ Active Perl Denial of Service Vulnerability Windows Authors: Arun Kallavi Copyright: Copyright c 2013 Greenbone...

7.5CVSS9.3AI score0.03577EPSS
SaveExploits0References4
Rows per page
Query Builder