Lucene search
K

7 matches found

Openbugbounty
Openbugbounty
added 2017/11/20 6:51 a.m.11 views

forum.gsa-online.de XSS vulnerability

Open Bug Bounty ID: OBB-424129 Description| Value ---|--- Affected Website:| forum.gsa-online.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
Exploits0
Check Point Advisories
Check Point Advisories
added 2017/11/16 12:0 a.m.3 views

Cesanta Mongoose DNS Compressed Name Denial of Service (CVE-2017-2909)

An infinite loop vulnerability exists in the DNS server functionality of Cesanta Mongoose. The vulnerability is due to insufficient handling of compressed names in DNS queries and responses. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted DNS query or respon...

7.8CVSS1.8AI score0.01428EPSS
Exploits1
seebug.org
seebug.org
added 2017/11/09 12:0 a.m.54 views

Cesanta Mongoose DNS Query Compressed Name Pointer Denial Of Service(CVE-2017-2909)

Summary An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinite loop resulting in high CPU usage and Denial Of Service. An attacker can send a packet over network to trigger this vulnerability...

7.6AI score0.01428EPSS
Exploits1
NVD
NVD
added 2017/11/07 4:29 p.m.17 views

CVE-2017-2909

An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinite loop resulting in high CPU usage and Denial Of Service. An attacker can send a packet over the network to trigger this vulnerability...

7.8CVSS7.3AI score0.01428EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2017/11/07 4:29 p.m.25 views

CVE-2017-2909

An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinite loop resulting in high CPU usage and Denial Of Service. An attacker can send a packet over the network to trigger this vulnerability...

7.8CVSS7.1AI score0.01428EPSS
Exploits1References2
Cvelist
Cvelist
added 2017/11/07 4:0 p.m.28 views

CVE-2017-2909

An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinite loop resulting in high CPU usage and Denial Of Service. An attacker can send a packet over the network to trigger this vulnerability...

7.5CVSS7.4AI score0.01428EPSS
Exploits1References1
CVE
CVE
added 2017/11/07 4:0 p.m.66 views

CVE-2017-2909

CVE-2017-2909 affects Cesanta Mongoose 6.8 library’s DNS server functionality. A crafted DNS query/response can trigger an infinite loop in DNS name compression handling, causing high CPU usage and a Denial of Service when sent over the network. Connected advisories describe the issue but do not ...

7.8CVSS7.2AI score0.01428EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder