Lucene search
+L

1414 matches found

Prion
Prion
added 2021/10/22 8:15 p.m.20 views

Cross site scripting

Swift File Transfer Mobile v1.1.2 and below was discovered to contain a cross-site scripting XSS vulnerability via the 'path' parameter of the 'list' and 'download' exception-handling...

4.3CVSS6AI score0.00725EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/10/22 7:20 p.m.30 views

CVE-2020-36486

Swift File Transfer Mobile v1.1.2 and below was discovered to contain a cross-site scripting XSS vulnerability via the 'path' parameter of the 'list' and 'download' exception-handling...

6.1AI score0.00725EPSS
SaveExploits1References1
Fedora
Fedora
added 2021/10/12 11:47 p.m.73 views

[SECURITY] Fedora 33 Update: xstream-1.4.18-2.fc33

XStream is a simple library to serialize objects to XML and back again. A high level facade is supplied that simplifies common use cases. Custom objects can be serialized without need for specifying mappings. Speed and low memory footprint are a crucial part of the design, making it suitable for...

9.9CVSS0.4AI score0.98124EPSS
SaveExploits34
Cvelist
Cvelist
added 2021/10/06 5:08 p.m.39 views

CVE-2021-25474

Assuming a shell privilege is gained, an improper exception handling for multisimbarshowonqspanel value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent denial of service in user device before factory reset...

4.4CVSS5.1AI score0.00104EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/06 12:00 a.m.10 views

Samsung SMR 安全漏洞

Samsung SystemUI is a system application for Samsung Samsung mobile devices. A denial of service vulnerability exists in Samsung SystemUI that stems from an exception handling error in SystemUI for multisimbarhidebymeadiafull, which can be exploited by an attacker to cause a denial of service...

4.9CVSS5.3AI score0.00104EPSS
SaveExploits0References1
OSV
OSV
added 2021/09/27 2:15 p.m.18 views

CVE-2021-37786

Certain Federal Office of Information Technology Systems and Telecommunication FOITT products are affected by improper handling of exceptional conditions. This affects COVID Certificate App IOS 2.2.0 and below affected, patch in progress and COVID Certificate Check App IOS 2.2.0 and below affecte...

4.6CVSS6.7AI score
SaveExploits0References1
CVE
CVE
added 2021/09/27 1:52 p.m.55 views

CVE-2021-37786

The CVE-2021-37786 entry concerns FOITT-related COVID Certificate apps on iOS, specifically COVID Certificate App iOS and COVID Certificate Check App (version 2.2.0 and below). The underlying issue is improper handling of exceptional conditions, leading to a denial of service when presented with ...

4.6CVSS4.6AI score0.00195EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2021/09/25 12:00 a.m.17 views

OSV-2021-1367 Uncaught exception in org.jsoup.parser.HtmlTreeBuilderState$18.process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39164 Crash type: Uncaught exception Crash state: org.jsoup.parser.HtmlTreeBuilderState$18.process org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$7.process...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/09/22 12:00 a.m.7 views

PT-2025-39959

Name of the Vulnerable Software and Affected Versions node-static affected versions not specified @nubosoftware/node-static affected versions not specified Description The software does not properly handle user input containing null bytes. This can allow attackers to access http://host/%00 and...

7.5CVSS6.4AI score0.00489EPSS
SaveExploits0References17
OSV
OSV
added 2021/09/21 12:00 a.m.17 views

OSV-2021-1338 Uncaught exception in org.jsoup.parser.HtmlTreeBuilder.process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38982 Crash type: Uncaught exception Crash state: org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$18.process org.jsoup.parser.HtmlTreeBuilder.process...

7.2AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/09/15 12:00 a.m.12 views

The vulnerability of the TCP protocol implementation in NicheLite and InterNiche TCP/IP implementations allows a attacker to cause service failures.

The vulnerability of the TCP protocol implementation in NicheLite and InterNiche protocols is related to an error in exception handling. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.4AI score0.01493EPSS
SaveExploits0References6Affected Software2
Prion
Prion
added 2021/09/08 5:15 p.m.20 views

Design/Logic Flaw

An improper handling of exceptional conditions vulnerability exists in the Palo Alto Networks PAN-OS dataplane that enables an unauthenticated network-based attacker to send specifically crafted traffic through the firewall that causes the service to crash. Repeated attempts to send this request...

7.1CVSS7.4AI score0.01008EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/09/08 12:00 a.m.29 views

Palo Alto Networks PAN-OS 8.1.x < 8.1.20 / 9.0.x < 9.0.14 / 9.1.x < 9.1.9 / 10.0.x < 10.0.5 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.20 or 9.0.x prior to 9.0.14 or 9.1.x prior to 9.1.9 or 10.0.x prior to 10.0.5. It is, therefore, affected by a vulnerability. - An improper handling of exceptional conditions vulnerability exists in the Palo...

7.5CVSS7.4AI score0.01008EPSS
SaveExploits0References3
OSV
OSV
added 2021/09/02 5:10 p.m.28 views

GHSA-7XRJ-F5RP-J55H Uncontrolled Resource Consumption in transpile

All versions of package transpile are vulnerable to Denial of Service DoS due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to function...

6.5CVSS7.5AI score0.01016EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2021/09/02 5:10 p.m.34 views

Uncontrolled Resource Consumption in transpile

All versions of package transpile are vulnerable to Denial of Service DoS due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to function...

7.5CVSS3.7AI score0.01016EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
added 2021/08/25 1:22 a.m.18 views

Denial Of Service (DoS)

transpile is vulnerable to denial of service. The vulnerability exists due to failure to sanitize and insecure exception handling in the .to function, causing an application crash...

7.5CVSS1.4AI score0.01016EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2021/08/24 8:15 a.m.5 views

CVE-2021-23429

All versions of package transpile are vulnerable to Denial of Service DoS due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to function...

7.5CVSS7.1AI score0.01016EPSS
SaveExploits1References2
NVD
NVD
added 2021/08/24 8:15 a.m.19 views

CVE-2021-23429

All versions of package transpile are vulnerable to Denial of Service DoS due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to function...

7.5CVSS0.01016EPSS
SaveExploits1References2
Prion
Prion
added 2021/08/24 8:15 a.m.12 views

Input validation

All versions of package transpile are vulnerable to Denial of Service DoS due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to function...

5CVSS7.4AI score0.01016EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/08/24 7:45 a.m.27 views

CVE-2021-23429 Denial of Service (DoS)

All versions of package transpile are vulnerable to Denial of Service DoS due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to function...

6.5CVSS7.7AI score0.01016EPSS
SaveExploits1References2
Rows per page
Query Builder