Lucene search
+L

13 matches found

Github Security Blog
Github Security Blog
•added 2025/10/10 10:53 p.m.•23 views

python-ldap is Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination

Summary ldap.dn.escapednchars escapes \x00 incorrectly by emitting a backslash followed by a literal NUL byte instead of the RFC-4514 hex form \00. Any application that uses this helper to construct DNs from untrusted input can be made to consistently fail before a request is sent to the LDAP...

6.9CVSS6.3AI score0.00458EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•31 views

EUVD-2021-24341

Malware in sbrugna...

5.7CVSS5.6AI score0.00835EPSS
SaveExploits0References3
NVD
NVD
•added 2025/07/15 12:15 a.m.•21 views

CVE-2025-53891

The timelineofficial/Time-Line- repository contains the source code for the TIME LINE website. A vulnerability was found in the TIME LINE website where uploaded files instruction/message media are not strictly validated for type and size. A user may upload renamed or oversized files that can...

4.3CVSS0.0037EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/15 12:00 a.m.•6 views

CVE-2025-53891: Unrestricted Upload of File with Dangerous Type

The timelineofficial/Time-Line- repository contains the source code for the TIME LINE website. A vulnerability was found in the TIME LINE website where uploaded files instruction/message media are not strictly validated for type and size. A user may upload renamed or oversized files that can...

4.3CVSS5.7AI score0.0037EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 8:53 p.m.•13 views

CVE-2021-37863

Mattermost 6.0 and earlier fails to sufficiently validate parameters during post creation, which allows authenticated attackers to cause a client-side crash of the web application via a maliciously crafted post...

5.7CVSS6.2AI score0.00835EPSS
SaveExploits0References1
OSV
OSV
•added 2021/12/17 5:15 p.m.•22 views

CVE-2021-37863

Mattermost 6.0 and earlier fails to sufficiently validate parameters during post creation, which allows authenticated attackers to cause a client-side crash of the web application via a maliciously crafted post...

5.7CVSS6.5AI score
SaveExploits0References2
attackerkb
attackerkb
•added 2021/12/17 5:15 p.m.•16 views

CVE-2021-37863

Mattermost 6.0 and earlier fails to sufficiently validate parameters during post creation, which allows authenticated attackers to cause a client-side crash of the web application via a maliciously crafted post...

5.7CVSS5.9AI score0.00835EPSS
SaveExploits0References3
NVD
NVD
•added 2021/12/17 5:15 p.m.•49 views

CVE-2021-37863

Mattermost 6.0 and earlier fails to sufficiently validate parameters during post creation, which allows authenticated attackers to cause a client-side crash of the web application via a maliciously crafted post...

5.7CVSS0.00835EPSS
SaveExploits0References2
Prion
Prion
•added 2021/12/17 5:15 p.m.•21 views

Code injection

Mattermost 6.0 and earlier fails to sufficiently validate parameters during post creation, which allows authenticated attackers to cause a client-side crash of the web application via a maliciously crafted post...

3.5CVSS5.5AI score0.00835EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/12/17 4:10 p.m.•49 views

CVE-2021-37863

Mattermost 6.0 and earlier fails to sufficiently validate parameters during post creation, which allows authenticated attackers to cause a client-side crash of the web application via a maliciously crafted post...

3.5CVSS5.7AI score0.00835EPSS
SaveExploits0References2
Mend
Mend
•added 2021/12/17 4:10 p.m.•1 views

CVE-2021-37863

Mattermost 6.0 and earlier fails to sufficiently validate parameters during post creation, which allows authenticated attackers to cause a client-side crash of the web application via a maliciously crafted post...

5.7CVSS0.00835EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/17 12:00 a.m.•2 views

CVE-2021-37863: Improper Input Validation

Mattermost 6.0 and earlier fails to sufficiently validate parameters during post creation, which allows authenticated attackers to cause a client-side crash of the web application via a maliciously crafted post...

5.7CVSS5.8AI score0.00835EPSS
SaveExploits0References3
FreeBSD Advisory
FreeBSD Advisory
•added 2000/07/05 12:00 a.m.•12 views

FreeBSD-SA-00:32.bitchx

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:32 Security Advisory FreeBSD, Inc. Topic: bitchx port contains client-side vulnerability Category: ports Module: bitchx Announced: 2000-07-05 Affects: Ports collection...

6.3AI score
SaveExploits0
Rows per page
Query Builder