Lucene search
+L

6 matches found

OSV
OSV
added 2024/05/23 2:41 p.m.15 views

GHSA-W8FQ-XGVH-CXC2 Silverstripe Forum Module CSRF Vulnerability

A number of form actions in the Forum module are directly accessible. A malicious user e.g. spammer can use GET requests to create Members and post to forums, bypassing CSRF and anti-spam measures. Additionally, a forum moderator could be tricked into clicking a specially crafted URL, resulting i...

5.3CVSS7.1AI score
SaveExploits0References5
OSV
OSV
added 2023/09/29 8:38 p.m.21 views

GHSA-HQ58-P9MV-338C CometBFT's default for `BlockParams.MaxBytes` consensus parameter may increase block times and affect consensus participation

Amulet Security Advisory for CometBFT: ASA-2023-002 Component: CometBFT Criticality: Low Affected versions: All Affected users: Validators, Chain Builders + Maintainers Summary A default configuration in CometBFT has been found to be large for common use cases, and may affect block times and...

7AI score
SaveExploits0References10
Github Security Blog
Github Security Blog
added 2023/09/29 8:38 p.m.40 views

CometBFT's default for `BlockParams.MaxBytes` consensus parameter may increase block times and affect consensus participation

Amulet Security Advisory for CometBFT: ASA-2023-002 Component: CometBFT Criticality: Low Affected versions: All Affected users: Validators, Chain Builders + Maintainers Summary A default configuration in CometBFT has been found to be large for common use cases, and may affect block times and...

7AI score
SaveExploits0References10Affected Software1
OpenVAS
OpenVAS
added 2019/06/13 12:00 a.m.74 views

Debian: Security Advisory (DSA-4460-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.2AI score0.87218EPSS
SaveExploits4References4
Tenable Nessus
Tenable Nessus
added 2019/06/13 12:00 a.m.51 views

Debian DSA-4460-1 : mediawiki - security update

Multiple security vulnerabilities have been discovered in MediaWiki, a website engine for collaborative work, which may result in authentication bypass, denial of service, cross-site scripting, information disclosure and bypass of anti-spam measures. C Tenable Network Security, Inc. The descripti...

9.8CVSS6.7AI score0.87218EPSS
SaveExploits4References13
Debian
Debian
added 2019/06/11 10:27 p.m.307 views

[SECURITY] [DSA 4460-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4460-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 12, 2019 https://www.debian.org/security/faq -...

9.8CVSS8.2AI score0.87218EPSS
SaveExploits4
Rows per page
Query Builder