5202 matches found
Huawei EulerOS: Security Advisory for libcroco (EulerOS-SA-2020-1808)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : libcroco (EulerOS-SA-2020-1808)
According to the version of the libcroco package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libcroco through 0.6.13 has excessive recursion in crparserparseanycore in cr-parser.c, leading to stack consumption.CVE-2020-12825 Note that...
Mail.ru: Improper Restriction of Excessive Authentication Attempts at http://terrafoot.ru/login.php (Rate Limit bypass via IP Rotation)
Password at terrafoot.ru was not sufficiently protected against bruteforce...
Important: Red Hat Security Advisory: java-11-openjdk security update
An update for java-11-openjdk is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Important: Red Hat Security Advisory: java-11-openjdk security update
An update for java-11-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...
CVE-2020-14303: Excessive Iteration
A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an empty UDP packet to cause the samba server to crash...
Mail.ru: Improper Restriction of Excessive Authentication Attempts at https://mirror.w1.dwar.ru/login.php
Password at dwar.ru was not sufficiently protected against bruteforce...
OpenClinic GA (Update B)
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits are available Vendor: OpenClinic GA is a product of open-source collaboration on Source Forge Equipment: OpenClinic GA Vulnerabilities: Authentication Bypass Using an Alternate Path or...
Design/Logic Flaw
Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when processing HTTP/1.1 headers with long field names or requests with long URLs...
CVE-2020-12605
CVE-2020-12605 affects Envoy up to version 1.14.2 (and 1.13.2, 1.12.4 or earlier per records) with a memory consumption issue when processing HTTP/1.1 headers having long field names or requests with long URLs. Connected documents confirm this CVE alongside related advisories (e.g., openSUSE/SUSE...
CVE-2020-12603
Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when proxying HTTP/2 requests or responses with many small i.e. 1 byte data frames...
Mail.ru: Improper Restriction of Excessive Authentication Attempts at https://ucs.ru/login
Login functionality on ucs.ru was not sufficiently protected against bruteforce...
CVE-2018-21261
An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. An e-mail invite accidentally included the team inviteid, which leads to unintended excessive invitation privileges...
CVE-2018-21261
An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. An e-mail invite accidentally included the team inviteid, which leads to unintended excessive invitation privileges...
PT-2020-8904
Name of the Vulnerable Software and Affected Versions Mattermost Server versions prior to 4.8.1 Mattermost Server version 4.7.4 Mattermost Server version 4.6.3 Description An issue was discovered where an e-mail invite accidentally included the team invite id, leading to unintended excessive...
CVE-2018-21261: Incorrect Permission Assignment for Critical Resource
An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. An e-mail invite accidentally included the team inviteid, which leads to unintended excessive invitation privileges...
SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1605-1)
The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called...
CVE-2020-7508
A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists in Easergy T300 Firmware version 1.5.2 and older which could allow an attacker to gain full access by brute force...