Lucene search
+L

7656 matches found

NVD
NVD
added 2021/04/13 8:15 p.m.17 views

CVE-2021-23372

All versions of package mongo-express are vulnerable to Denial of Service DoS when exporting an empty collection as CSV, due to an unhandled exception, leading to a crash...

7.5CVSS0.00878EPSS
SaveExploits0References1
Prion
Prion
added 2021/04/13 8:15 p.m.18 views

Design/Logic Flaw

All versions of package mongo-express are vulnerable to Denial of Service DoS when exporting an empty collection as CSV, due to an unhandled exception, leading to a crash...

5CVSS7.5AI score0.00878EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/04/13 3:20 p.m.32 views

CVE-2021-23372 Denial of Service (DoS)

All versions of package mongo-express are vulnerable to Denial of Service DoS when exporting an empty collection as CSV, due to an unhandled exception, leading to a crash...

4.4CVSS7.7AI score0.00878EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/04/13 3:17 p.m.4 views

CVE-2021-23372

All versions of package mongo-express are vulnerable to Denial of Service DoS when exporting an empty collection as CSV, due to an unhandled exception, leading to a crash...

7.5CVSS5.3AI score0.00878EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/04/13 12:00 a.m.8 views

mongo-express 代码问题漏洞

mongo-express is a lightweight, web-based management interface for interactively managing MongoDB databases. A security vulnerability exists in all versions of mongo-express that stems from an unhandled exception...

7.5CVSS7.3AI score0.00878EPSS
SaveExploits0References2
Mageia
Mageia
added 2021/04/12 7:59 p.m.59 views

Updated pdfbox packages fix security vulnerabilities

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox Apache PDFBox version 2.0.22 and prior 2.0.x versions CVE-2021-27807. A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects...

5.5CVSS3.8AI score0.03337EPSS
SaveExploits0References3
OSV
OSV
added 2021/04/12 7:59 p.m.15 views

MGASA-2021-0184 Updated pdfbox packages fix security vulnerabilities

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox Apache PDFBox version 2.0.22 and prior 2.0.x versions CVE-2021-27807. A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects...

5.5CVSS5.3AI score0.03337EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2021/04/12 6:59 p.m.66 views

Denial of Service (DoS) in restify-paginate

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

7.5CVSS7.2AI score0.02589EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2021/04/12 6:59 p.m.50 views

GHSA-QR9H-VR5P-PWWX Denial of Service (DoS) in restify-paginate

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

7.5CVSS7.5AI score0.02589EPSS
SaveExploits1References5
OSV
OSV
added 2021/04/09 6:15 p.m.8 views

CVE-2021-25380

Improper handling of exceptional conditions in Bixby prior to version 3.0.53.02 allows attacker to execute the actions registered by the user...

7.3CVSS7.2AI score0.00596EPSS
SaveExploits0References2
OSV
OSV
added 2021/04/09 6:15 p.m.10 views

CVE-2021-25365

An improper exception control in softsimd prior to SMR APR-2021 Release 1 allows unprivileged applications to access the API in softsimd...

7.8CVSS5.8AI score0.00111EPSS
SaveExploits0References2
NVD
NVD
added 2021/04/09 6:15 p.m.33 views

CVE-2021-25365

An improper exception control in softsimd prior to SMR APR-2021 Release 1 allows unprivileged applications to access the API in softsimd...

7.8CVSS0.00111EPSS
SaveExploits0References2
Prion
Prion
added 2021/04/09 6:15 p.m.21 views

Input validation

An improper exception control in softsimd prior to SMR APR-2021 Release 1 allows unprivileged applications to access the API in softsimd...

7.2CVSS7.5AI score0.00111EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/04/09 5:36 p.m.33 views

CVE-2021-25365

An improper exception control in softsimd prior to SMR APR-2021 Release 1 allows unprivileged applications to access the API in softsimd...

5.9CVSS7.8AI score0.00111EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/04/09 12:00 a.m.12 views

Samsung Bixby 安全漏洞

Samsung Bixby Voice is an application from the South Korean company Samsung. It provides a voice recognition function. A security vulnerability exists in Bixby prior to version 3.0.53.02, which stems from mishandling of exceptions in Bixby prior to version 3.0.53.02, and can be exploited by an...

7.5CVSS5.6AI score0.00596EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/04/09 12:00 a.m.8 views

PT-2021-16571 · Samsung · Bixby

Name of the Vulnerable Software and Affected Versions: Bixby versions prior to 3.0.53.02 Description: The issue arises from improper handling of exceptional conditions, allowing an attacker to execute actions registered by the user. Recommendations: For versions prior to 3.0.53.02, update to...

7.5CVSS7.2AI score0.00596EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/04/09 12:00 a.m.12 views

Samsung SMR 安全漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in SMR APR-2021 Release 1, which stems from a faulty exception control in softsimd that allows an unprivileged application to access APIs in...

7.8CVSS5.5AI score0.00111EPSS
SaveExploits0References3
OSV
OSV
added 2021/04/07 9:51 p.m.93 views

GHSA-244R-FCJ3-GHJQ Exposure of class information in RESTEasy

A flaw was found in RESTEasy in all current versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value...

5.3CVSS6AI score0.01439EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2021/04/07 9:51 p.m.64 views

Exposure of class information in RESTEasy

A flaw was found in RESTEasy in all current versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value...

5.3CVSS2.2AI score0.01439EPSS
SaveExploits0References7Affected Software1
CNNVD
CNNVD
added 2021/04/06 12:00 a.m.11 views

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A security signature issue vulnerability exists in the ASUS BMC Firmware Web management page, which originates from a buffer overflow vulnerability caused by the CD media configuration function not validating the length of a user-entered string. A...

4.9CVSS6AI score0.0181EPSS
SaveExploits0References3
Rows per page
Query Builder