Lucene search
+L

66 matches found

vulnersOsv
vulnersOsv
•added 2020/09/10 5:46 p.m.•1 views

@evolvere/sgp-ui (>=1.6.4, <=1.6.10), @node-amazon/mws (>=0.0.2, <=0.0.3) +24 more potentially affected by CVE-2020-15168 via node-fetch (>=3.0.0-beta.7, <=3.0.0-beta.8)

node-fetch NPM version =3.0.0-beta.7, =1.6.4, =0.0.2, =0.0.2, =0.0.2, =1.2.8, =1.2.9, =0.1.1, =1.2.0, =3.6.11, =1.10.46, =7.9.40, =7.16.4 - ky-universal 0.8.1 - letterboxd-client 0.1.0 - node-walmart 0.0.8 and more Source cves: CVE-2020-15168 Source advisory: OSV:GHSA-W7RC-RWVF-8Q5R...

5.3CVSS0.01692EPSS
SaveExploits0
Snyk
Snyk
•added 2020/04/17 12:00 a.m.•8 views

Malicious Package

Overview auth-client is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using auth-client...

8CVSS6.9AI score
SaveExploits0References2
CNVD
CNVD
•added 2018/01/26 12:00 a.m.•38 views

Dovecot Memory Leak Vulnerability

Dovecot is an open source Linux/UNIX-based class of IMAP and POP3 mail server . auth client is one of the authentication client . A memory leak vulnerability exists in the auth client in Dovecot versions 2.0 through 2.2.33 and 2.3.0. An attacker can exploit this vulnerability to cause a denial of...

7.5CVSS6.9AI score0.0312EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2018/01/25 8:29 p.m.•16 views

DEBIAN-CVE-2017-15132

A flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results in a memory leak in dovecot's auth client used by login processes. The leak has impact in high performance configuration where same login processes are reused and can cause the process to crash due to...

7.5CVSS6.7AI score0.0312EPSS
SaveExploits0References1
Mend
Mend
•added 2018/01/25 8:00 p.m.•5 views

CVE-2017-15132

A flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results in a memory leak in dovecot's auth client used by login processes. The leak has impact in high performance configuration where same login processes are reused and can cause the process to crash due to...

8.7CVSS0.0312EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/25 12:00 a.m.•5 views

CVE-2017-15132: Uncontrolled Resource Consumption

A flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results in a memory leak in dovecot's auth client used by login processes. The leak has impact in high performance configuration where same login processes are reused and can cause the process to crash due to...

7.5CVSS6.1AI score0.0312EPSS
SaveExploits0References3
Rows per page
Query Builder