Lucene search
+L

2886 matches found

Code423n4
Code423n4
•added 2021/05/30 12:00 a.m.•21 views

Witch can't give back vault after 2x grab

Handle gpersoon Vulnerability details Impact The witch.sol contract gets access to a vault via the grab function, in case of liquidation. If the witch.sol contract can't sell the debt within a certain amount of time, a second grab can occur. After the second grab, the information of the original...

6.8AI score
SaveExploits0
NVD
NVD
•added 2021/05/28 5:15 p.m.•33 views

CVE-2021-32637

Authelia is a a single sign-on multi-factor portal for web apps. This affects uses who are using nginx ngxhttpauthrequestmodule with Authelia, it allows a malicious individual who crafts a malformed HTTP request to bypass the authentication mechanism. It additionally could theoretically affect...

10CVSS0.01868EPSS
SaveExploits1References2
Prion
Prion
•added 2021/05/28 5:15 p.m.•31 views

Authentication flaw

Authelia is a a single sign-on multi-factor portal for web apps. This affects uses who are using nginx ngxhttpauthrequestmodule with Authelia, it allows a malicious individual who crafts a malformed HTTP request to bypass the authentication mechanism. It additionally could theoretically affect...

7.5CVSS9.6AI score0.01868EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/05/28 5:00 p.m.•49 views

CVE-2021-32637 Authentication bypassed with malformed request URI

Authelia is a a single sign-on multi-factor portal for web apps. This affects uses who are using nginx ngxhttpauthrequestmodule with Authelia, it allows a malicious individual who crafts a malformed HTTP request to bypass the authentication mechanism. It additionally could theoretically affect...

10CVSS9.9AI score0.01868EPSS
SaveExploits1References2
OSV
OSV
•added 2021/05/24 2:15 p.m.•19 views

CVE-2020-4990

IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 192710...

8.8CVSS7.2AI score0.0112EPSS
SaveExploits0References2
NVD
NVD
•added 2021/05/24 2:15 p.m.•35 views

CVE-2020-4990

IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 192710...

8.8CVSS0.0112EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/05/24 1:55 p.m.•40 views

CVE-2020-4990

IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 192710...

7.6CVSS8.6AI score0.0112EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/24 12:00 a.m.•8 views

CVE-2020-4990: Improper Neutralization of Special Elements used in an SQL Command

IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 192710...

8.8CVSS5.9AI score0.0112EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/05/24 12:00 a.m.•4 views

PT-2021-12270

Name of the Vulnerable Software and Affected Versions IBM Security Guardium version 11.2 Description The issue allows a remote attacker to send specially crafted SQL statements, potentially enabling them to view, add, modify, or delete information in the back-end database. This is a result of a S...

8.8CVSS0.0112EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2021/05/21 12:00 a.m.•11 views

CVE-2020-4990

IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 192710...

8.8CVSS7.9AI score0.0112EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2021/05/21 12:00 a.m.•19 views

IBM Security Guardium SQL注入漏洞

IBM Security Guardium is a product of IBM IBM in the U.S. etc. IBM Security Guardium is a suite of platforms that provide data protection capabilities. github rd is a software application. github ic etc. are open source products. github ic is a software application. IBM Security Guardium suffers...

8.8CVSS7.8AI score0.0112EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2021/05/14 7:16 p.m.•18 views

CVE-2021-29572

TensorFlow is an end-to-end open source platform for machine learning. The implementation of tf.rawops.SdcaOptimizer triggers undefined behavior due to dereferencing a null pointer. The...

5.5CVSS6.9AI score0.00189EPSS
SaveExploits1
OSV
OSV
•added 2021/05/13 7:15 p.m.•14 views

DEBIAN-CVE-2021-29510

Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Pydantic has been patched with fixes...

7.5CVSS7.1AI score0.00975EPSS
SaveExploits0References1
NVD
NVD
•added 2021/05/13 7:15 p.m.•28 views

CVE-2021-29510

Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Pydantic has been patched with fixes...

7.5CVSS0.00975EPSS
SaveExploits0References5
OSV
OSV
•added 2021/05/13 7:15 p.m.•33 views

CVE-2021-29510

Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Pydantic has been patched with fixes...

7.5CVSS7.1AI score
SaveExploits0References5
OSV
OSV
•added 2021/05/13 7:15 p.m.•28 views

UBUNTU-CVE-2021-29510

Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Pydantic has been patched with fixes...

7.5CVSS7AI score0.00975EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2021/05/13 6:55 p.m.•142 views

CVE-2021-29510

Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Pydantic has been patched with fixes...

7.5CVSS7.5AI score0.00975EPSS
SaveExploits0
Cvelist
Cvelist
•added 2021/05/13 6:55 p.m.•100 views

CVE-2021-29510 Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic

Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Pydantic has been patched with fixes...

3.3CVSS7.6AI score0.00975EPSS
SaveExploits0References5
Veracode
Veracode
•added 2021/05/10 2:19 p.m.•32 views

SQL Injection

odata4j-core is vulnerable to SQL injection. An attacker is able to modify or delete, causing persistent changes to the queries that the application makes to its database, mainly SQL, to compromise the underlying server or other back-end infrastructure...

9.8CVSS4.4AI score0.01411EPSS
SaveExploits0References2Affected Software1
Fedora
Fedora
•added 2021/05/09 1:16 a.m.•141 views

[SECURITY] Fedora 33 Update: bind-dyndb-ldap-11.3-7.fc33

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

7.5CVSS7.2AI score0.11387EPSS
SaveExploits0
Rows per page
Query Builder