Lucene search
+L

1047 matches found

attackerkb
attackerkb
•added 2024/09/18 3:15 p.m.•6 views

CVE-2023-49203

Technitium 11.5.3 allows remote attackers to cause a denial of service bandwidth amplification because the DNSBomb manipulation causes accumulation of low-rate DNS queries such that there is a large-sized response in a burst of traffic...

7.5CVSS5.8AI score0.00648EPSS
SaveExploits0References3
NVD
NVD
•added 2024/09/18 3:15 p.m.•21 views

CVE-2023-49203

Technitium 11.5.3 allows remote attackers to cause a denial of service bandwidth amplification because the DNSBomb manipulation causes accumulation of low-rate DNS queries such that there is a large-sized response in a burst of traffic...

7.5CVSS0.00648EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/09/18 12:00 a.m.•28 views

CVE-2023-49203

Technitium 11.5.3 allows remote attackers to cause a denial of service bandwidth amplification because the DNSBomb manipulation causes accumulation of low-rate DNS queries such that there is a large-sized response in a burst of traffic...

0.00648EPSS
SaveExploits0References2
CVE
CVE
•added 2024/09/18 12:00 a.m.•87 views

CVE-2023-49203

Technitium version 11.5.3 is vulnerable to a denial of service attack via bandwidth amplification . The issue is caused by a DNSBomb manipulation that allows remote attackers to accumulate low-rate DNS queries, triggering a burst of large-sized responses. While a sighting of this vulnerability wa...

7.5CVSS7.1AI score0.00648EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/09/18 12:00 a.m.•18 views

CVE-2023-49203

Technitium 11.5.3 allows remote attackers to cause a denial of service bandwidth amplification because the DNSBomb manipulation causes accumulation of low-rate DNS queries such that there is a large-sized response in a burst of traffic...

6.9AI score0.00648EPSS
SaveExploits0References2
OSV
OSV
•added 2024/09/18 12:00 a.m.•14 views

CVE-2023-49203

Technitium 11.5.3 allows remote attackers to cause a denial of service bandwidth amplification because the DNSBomb manipulation causes accumulation of low-rate DNS queries such that there is a large-sized response in a burst of traffic...

7.5CVSS6.5AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/18 12:00 a.m.•2 views

CVE-2023-49203: Insufficient Control of Network Message Volume (Network Amplification)

Technitium 11.5.3 allows remote attackers to cause a denial of service bandwidth amplification because the DNSBomb manipulation causes accumulation of low-rate DNS queries such that there is a large-sized response in a burst of traffic...

7.5CVSS5.8AI score0.00648EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2024/09/05 2:46 a.m.•7 views

SUSE CVE-2024-45006

In the Linux kernel, the following vulnerability has been resolved: xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration re-enumerating full-speed devices after a failed address device command can trigger a NULL pointer dereference. Full-speed devices may need to reconfigure th...

5.5CVSS6.3AI score0.00253EPSS
SaveExploits0References14
OSV
OSV
•added 2024/09/04 8:15 p.m.•14 views

AZL-48696 CVE-2024-45006 affecting package kernel for versions less than 6.6.51.1-1

In the Linux kernel, the following vulnerability has been resolved: xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration re-enumerating full-speed devices after a failed address device command can trigger a NULL pointer dereference. Full-speed devices may need to reconfigure th...

5.5CVSS6.3AI score0.00253EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/04 8:15 p.m.•9 views

DEBIAN-CVE-2024-45006

In the Linux kernel, the following vulnerability has been resolved: xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration re-enumerating full-speed devices after a failed address device command can trigger a NULL pointer dereference. Full-speed devices may need to reconfigure th...

5.5CVSS5.5AI score0.00253EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/04 8:15 p.m.•11 views

UBUNTU-CVE-2024-45006

In the Linux kernel, the following vulnerability has been resolved: xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration re-enumerating full-speed devices after a failed address device command can trigger a NULL pointer dereference. Full-speed devices may need to reconfigure th...

5.5CVSS5.9AI score0.00253EPSS
SaveExploits0References29
Vulnrichment
Vulnrichment
•added 2024/09/04 7:54 p.m.•16 views

CVE-2024-45006 xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration

In the Linux kernel, the following vulnerability has been resolved: xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration re-enumerating full-speed devices after a failed address device command can trigger a NULL pointer dereference. Full-speed devices may need to reconfigure th...

6.9AI score0.00253EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2024/09/04 7:54 p.m.•34 views

CVE-2024-45006

In the Linux kernel, the following vulnerability has been resolved: xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration re-enumerating full-speed devices after a failed address device command can trigger a NULL pointer dereference. Full-speed devices may need to reconfigure th...

5.5CVSS5.5AI score0.00253EPSS
SaveExploits0
NVD
NVD
•added 2024/08/30 6:15 p.m.•33 views

CVE-2024-21658

discourse-calendar is a discourse plugin which adds the ability to create a dynamic calendar in the first post of a topic. The limit on region value length is too generous. This allows a malicious actor to cause a Discourse instance to use excessive bandwidth and disk space. This issue has been...

4.3CVSS0.00362EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/30 5:18 p.m.•27 views

CVE-2024-21658 Insufficient control of region value length in discourse-calendar

discourse-calendar is a discourse plugin which adds the ability to create a dynamic calendar in the first post of a topic. The limit on region value length is too generous. This allows a malicious actor to cause a Discourse instance to use excessive bandwidth and disk space. This issue has been...

4.3CVSS4.7AI score0.00362EPSS
SaveExploits0References1
CVE
CVE
•added 2024/08/30 5:18 p.m.•80 views

CVE-2024-21658

CVE-2024-21658 affects the discourse-calendar plugin for Discourse. The issue is an overly loose restriction on the region value length, which can cause a Discourse instance to consume excessive bandwidth and disk space. The vulnerability is fixed in the main branch; there are no public workaroun...

4.3CVSS4.5AI score0.00362EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/08/30 5:18 p.m.•60 views

CVE-2024-21658 Insufficient control of region value length in discourse-calendar

discourse-calendar is a discourse plugin which adds the ability to create a dynamic calendar in the first post of a topic. The limit on region value length is too generous. This allows a malicious actor to cause a Discourse instance to use excessive bandwidth and disk space. This issue has been...

4.3CVSS0.00362EPSS
SaveExploits0References1
OSV
OSV
•added 2024/08/30 5:18 p.m.•17 views

CVE-2024-21658 Insufficient control of region value length in discourse-calendar

discourse-calendar is a discourse plugin which adds the ability to create a dynamic calendar in the first post of a topic. The limit on region value length is too generous. This allows a malicious actor to cause a Discourse instance to use excessive bandwidth and disk space. This issue has been...

4.3CVSS6.8AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2024/08/30 12:00 a.m.•16 views

Discourse Calendar 资源管理错误漏洞

Discourse Calendar is an open source calendar plugin for Discourse. A resource management error vulnerability exists in Discourse Calendar, which stems from an overly loose restriction on the length of data, which can lead to abnormal bandwidth and disk space usage...

4.3CVSS6.7AI score0.00362EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/30 12:00 a.m.•2 views

CVE-2024-21658: Uncontrolled Resource Consumption

discourse-calendar is a discourse plugin which adds the ability to create a dynamic calendar in the first post of a topic. The limit on region value length is too generous. This allows a malicious actor to cause a Discourse instance to use excessive bandwidth and disk space. This issue has been...

4.3CVSS5.8AI score0.00362EPSS
SaveExploits0References1
Rows per page
Query Builder