Lucene search
+L

1027 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/20 12:00 a.m.•5 views

CVE-2019-11048: Uncontrolled Resource Consumption

In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleanin...

5.3CVSS6.4AI score0.06264EPSS
SaveExploits1References4
OSV
OSV
•added 2020/05/13 3:15 p.m.•15 views

CVE-2020-12427

The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space...

8.8CVSS7.3AI score0.00454EPSS
SaveExploits0References2
NVD
NVD
•added 2020/05/13 3:15 p.m.•29 views

CVE-2020-12427

The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space...

8.8CVSS8.6AI score0.00454EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/05/13 2:28 p.m.•36 views

CVE-2020-12427

The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space...

8.6AI score0.00454EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/05/13 12:00 a.m.•3 views

PT-2020-13108

Name of the Vulnerable Software and Affected Versions Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS Description The issue allows for Cross-Site Request Forgery CSRF attacks, which can lead to significant impacts such as stealing data, modifying disk...

8.8CVSS0.00454EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2020/05/11 12:00 a.m.•17 views

PT-2020-4630 · Php +8 · Php +8

Name of the Vulnerable Software and Affected Versions: PHP versions 7.2.x through 7.2.30 PHP versions 7.3.x through 7.3.17 PHP versions 7.4.x through 7.4.5 Description: The issue is related to an integer overflow buffer in the PHP language interpreter. Exploitation of this issue could allow a...

9.8CVSS7.1AI score0.9978EPSS
SaveExploits109References426
OSV
OSV
•added 2020/04/28 7:15 p.m.•20 views

CVE-2020-10641

An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication. This results in consuming the entire available hard-disk space on the Ignition 8 Gateway versions prior to 8.0.10, causing a denial-of-service condition...

7.5CVSS5.8AI score0.01278EPSS
SaveExploits0References1
NVD
NVD
•added 2020/04/28 7:15 p.m.•42 views

CVE-2020-10641

An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication. This results in consuming the entire available hard-disk space on the Ignition 8 Gateway versions prior to 8.0.10, causing a denial-of-service condition...

7.5CVSS7.4AI score0.01278EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/28 12:00 a.m.•8 views

CVE-2020-10641: Improper Access Control

An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication. This results in consuming the entire available hard-disk space on the Ignition 8 Gateway versions prior to 8.0.10, causing a denial-of-service condition...

7.5CVSS7.5AI score0.01278EPSS
SaveExploits0References3
Veracode
Veracode
•added 2020/04/10 1:06 a.m.•36 views

Denial Of Service (DoS)

squirrelmail is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way SquirrelMail handled failed log in attempts. A user preference file was created when attempting to log in with a password containing an 8-bit character, even if the username was not valid....

5CVSS6.7AI score0.04048EPSS
SaveExploits0References22Affected Software1
Veracode
Veracode
•added 2020/04/10 12:42 a.m.•60 views

Denial Of Service (DoS)

The Network Time Protocol NTP is vulnerable to Denial Of Service DoS. Robin Park and Dmitri Vinokurov discovered a flaw in the way ntpd handled certain malformed NTP packets. ntpd logged information about all such packets and replied with an NTP packet that was treated as malformed when received ...

6.4CVSS7.4AI score0.32059EPSS
SaveExploits3References96Affected Software1
Veracode
Veracode
•added 2020/04/10 12:30 a.m.•36 views

Denial Of Service (DoS)

java is vulnerable to denial of service DoS. The vulenrability exists as a flaw was found in the way that the Java Virtual Machine JVM handled temporary font files. A malicious applet could use this flaw to use large amounts of disk space, causing a denial of service...

6.4CVSS1.7AI score0.12692EPSS
SaveExploits2References28Affected Software1
Fedora
Fedora
•added 2020/04/09 5:44 p.m.•100 views

[SECURITY] Fedora 30 Update: glibc-2.29-29.fc30

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

7CVSS2AI score0.00764EPSS
SaveExploits1
Fedora
Fedora
•added 2020/03/31 12:19 a.m.•102 views

[SECURITY] Fedora 32 Update: glibc-2.31-2.fc32

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

7CVSS2AI score0.00764EPSS
SaveExploits1
Virtuozzo
Virtuozzo
•added 2020/03/31 12:00 a.m.•43 views

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 9 (VA MN: 7.0.2-645, VA Agent: 7.0.2-364)

Hotfix 9 for Virtuozzo Automator 7.0.2 provides stability and usability fixes. Vulnerability id: PVA-35779 Virtuozzo Automator warns about low disk space on SSDs with storage cache and journals. Vulnerability id: PVA-37393 VA agent can fully load MDS on nodes with lots of containers on Virtuozzo...

3.2AI score
SaveExploits0
CNVD
CNVD
•added 2020/03/24 12:00 a.m.•105 views

Apache Tika Resource Management Error Vulnerability (CNVD-2020-19514)

Apache Tika is the United States Apache Apache Software Foundation, an integrated POI using Java programs to provide MicrosoftOffice format documents read and write functions of the open-source library, Pdfbox read and create PDF documents pure Java class library and for text extraction work to...

5.5CVSS8.6AI score0.02986EPSS
SaveExploits0References1
Fedora
Fedora
•added 2020/01/20 10:49 p.m.•48 views

[SECURITY] Fedora 31 Update: glibc-2.30-10.fc31

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

3.3CVSS2AI score0.00409EPSS
SaveExploits0
Trend Micro Simply Security
Trend Micro Simply Security
•added 2019/12/18 2:42 p.m.•71 views

How to Speed Up a Slow PC Running Windows OS

Working with a slow PC is always annoying and frustrating. Enduring sudden frozen windows and stuttered animations can make you want to throw the machine out the window. Take a deep breath, and consider these 8 tips on how to fix a slow PC running Windows. Why is my Windows Running Slow? First,...

7.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2019/12/04 11:39 a.m.•135 views

LinuxCheck - Linux Information Collection Script

A small linux information collection script is mainly used for emergency response. It can be used under Debian or Centos. Features CPU TOP10, memory TOP10 CPU usage boot time Hard disk space information User information, passwd information Environmental variable detection Service list System...

6.9AI score
SaveExploits0References6
OSV
OSV
•added 2019/11/29 11:15 p.m.•11 views

CVE-2019-19451

When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an endless loop, thus endlessly writing text to stdout. If this launch is from a thumbnailer service, this output will usually be written to disk via the system's...

5.5CVSS5.3AI score
SaveExploits0References4
Rows per page
Query Builder