Lucene search
+L

1534 matches found

attackerkb
attackerkb
•added 2021/12/27 12:15 a.m.•11 views

CVE-2021-45704

An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket unconditionally implements the Send and Sync traits...

8.1CVSS5.9AI score0.00766EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2021/12/18 12:00 a.m.•15 views

GHSA-74XW-GWFM-7PV7 bounter Null pointer reference

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

7.5CVSS6.7AI score0.01071EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2021/12/17 9:15 p.m.•9 views

CVE-2021-41497

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

7.5CVSS7.1AI score0.01071EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2021/12/17 9:15 p.m.•17 views

CVE-2021-41497

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

7.5CVSS5.8AI score0.01071EPSS
SaveExploits1References1
PyPA
PyPA
•added 2021/12/17 9:15 p.m.•19 views

PYSEC-2021-880

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

7.5CVSS6.9AI score0.01071EPSS
SaveExploits1References3Affected Software1
osv_pysec
osv_pysec
•added 2021/12/17 9:15 p.m.•18 views

PYSEC-2021-880

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

7.5CVSS7AI score0.01071EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/12/17 12:00 a.m.•21 views

RaRe-Technologies counter code issue vulnerabilities

Bounter is Rare Technologies open source a Python library written in C . Used for extremely fast probabilistic counting of item frequencies in massive datasets. RaRe-Technologies bounter versions 1.01 and 1.10 has a security vulnerability that stems from the presence of a null pointer reference i...

7.5CVSS7.3AI score0.01071EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/17 12:00 a.m.•3 views

CVE-2021-41497: NULL Pointer Dereference

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

7.5CVSS5.7AI score0.01071EPSS
SaveExploits1References2
Veracode
Veracode
•added 2021/12/15 11:55 p.m.•32 views

Privilege Escalation

github.com/couchbase/syncgateway is vulnerable to privilege escalation. The vulnerability exists because of storage of bucket credentials in the metadata within sync documents written to the bucket, allowing a user with read privilege to perform write access to data in Couchbase Server. Note: Thi...

8.1CVSS3.4AI score0.00518EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2021/12/07 10:15 p.m.•22 views

CVE-2021-43963

An issue was discovered in Couchbase Sync Gateway 2.7.0 through 2.8.2. The bucket credentials used to read and write data in Couchbase Server were insecurely being stored in the metadata within sync documents written to the bucket. Users with read access could use these credentials to obtain writ...

8.1CVSS7.3AI score0.00518EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/12/07 10:15 p.m.•12 views

CVE-2021-43963

An issue was discovered in Couchbase Sync Gateway 2.7.0 through 2.8.2. The bucket credentials used to read and write data in Couchbase Server were insecurely being stored in the metadata within sync documents written to the bucket. Users with read access could use these credentials to obtain writ...

8.1CVSS7.3AI score0.00518EPSS
SaveExploits0References2
Mend
Mend
•added 2021/12/07 9:05 p.m.•8 views

CVE-2021-43963

An issue was discovered in Couchbase Sync Gateway 2.7.0 through 2.8.2. The bucket credentials used to read and write data in Couchbase Server were insecurely being stored in the metadata within sync documents written to the bucket. Users with read access could use these credentials to obtain writ...

8.6CVSS0.00518EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/12/07 12:00 a.m.•8 views

PT-2021-23987

Name of the Vulnerable Software and Affected Versions: Couchbase Sync Gateway versions 2.7.0 through 2.8.2 Description: An issue was discovered where the bucket credentials used to read and write data in Couchbase Server were insecurely being stored in the metadata within sync documents written t...

8.1CVSS0.00518EPSS
SaveExploits0References5
Veracode
Veracode
•added 2021/11/30 4:26 a.m.•37 views

Path Traversal

S3Scanner is vulnerable to path traversal. An attacker can save files outside the folder specified with --dump-dir via a crafted bucket when the ListBucketResult element contains special characters...

5.3CVSS4.8AI score0.01646EPSS
SaveExploits0References5Affected Software1
RedHat Linux
RedHat Linux
•added 2021/11/29 1:24 p.m.•93 views

Moderate: Red Hat Security Advisory: Red Hat OpenShift Container Storage 4.8.5 Security and Bug Fix Update

An update is now available for Red Hat OpenShift Container Storage 4.8.5 on Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

10CVSS7.4AI score0.03832EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/11/29 3:15 a.m.•10 views

CVE-2021-32061

S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a ../ substring in a ListBucketResult element...

5.3CVSS6.2AI score0.01646EPSS
SaveExploits0References4
NVD
NVD
•added 2021/11/29 3:15 a.m.•48 views

CVE-2021-32061

S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a ../ substring in a ListBucketResult element...

5.3CVSS0.01646EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2021/11/29 3:15 a.m.•28 views

CVE-2021-32061

S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a ../ substring in a ListBucketResult element...

5.3CVSS6.7AI score
SaveExploits0References3
Prion
Prion
•added 2021/11/29 3:15 a.m.•37 views

Directory traversal

S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a ../ substring in a ListBucketResult element...

5CVSS5.2AI score0.01646EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
•added 2021/11/29 3:15 a.m.•18 views

PYSEC-2021-433

S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a ../ substring in a ListBucketResult element...

5.3CVSS6.8AI score0.01646EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder