Lucene search
K

13 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-2611

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00582EPSS
Exploits1References3
OSV
OSV
added 2024/08/21 2:30 p.m.9 views

GO-2023-2067 Faktory Web Dashboard can lead to denial of service(DOS) via malicious user input in github.com/contribsys/faktory

Faktory Web Dashboard can lead to denial of serviceDOS via malicious user input in github.com/contribsys/faktory...

7.5CVSS7.3AI score0.00582EPSS
Exploits1References2
Veracode
Veracode
added 2023/09/25 11:1 a.m.12 views

Denial Of Service

faktory package is vulnerable to Denial of Service. The vulnerability is related to how the backend reads the days URL query parameter in the Faktory web dashboard which is used without any validation. If a huge value is provided, the backend service could consume significant amount of memory and...

7.5CVSS6.7AI score0.00582EPSS
Exploits1References3Affected Software1
Github Security Blog
Github Security Blog
added 2023/09/20 10:51 p.m.22 views

Faktory Web Dashboard can lead to denial of service(DOS) via malicious user input

Summary Faktory web dashboard can suffer from denial of service by a crafted malicious url query param days. Details The vulnerability is related to how the backend reads the days URL query parameter in the Faktory web dashboard. The value is used directly without any checks to create a string...

7.5CVSS6.6AI score0.00582EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2023/09/20 10:51 p.m.275 views

GHSA-X4HH-VJM7-G2JV Faktory Web Dashboard can lead to denial of service(DOS) via malicious user input

Summary Faktory web dashboard can suffer from denial of service by a crafted malicious url query param days. Details The vulnerability is related to how the backend reads the days URL query parameter in the Faktory web dashboard. The value is used directly without any checks to create a string...

7.5CVSS7.4AI score0.00582EPSS
Exploits1References3
NVD
NVD
added 2023/09/20 10:15 p.m.9 views

CVE-2023-37279

Faktory is a language-agnostic persistent background job server. Prior to version 1.8.0, the Faktory web dashboard can suffer from denial of service by a crafted malicious url query param days. The vulnerability is related to how the backend reads the days URL query parameter in the Faktory web...

7.5CVSS7.3AI score0.00582EPSS
Exploits1References1
Prion
Prion
added 2023/09/20 10:15 p.m.9 views

Sql injection

Faktory is a language-agnostic persistent background job server. Prior to version 1.8.0, the Faktory web dashboard can suffer from denial of service by a crafted malicious url query param days. The vulnerability is related to how the backend reads the days URL query parameter in the Faktory web...

5CVSS7.3AI score0.00582EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/20 9:27 p.m.7 views

CVE-2023-37279 Faktory Web Dashboard can lead to denial of service(DOS) via malicious user input

Faktory is a language-agnostic persistent background job server. Prior to version 1.8.0, the Faktory web dashboard can suffer from denial of service by a crafted malicious url query param days. The vulnerability is related to how the backend reads the days URL query parameter in the Faktory web...

7.5CVSS6.6AI score0.00582EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/09/20 9:27 p.m.14 views

CVE-2023-37279 Faktory Web Dashboard can lead to denial of service(DOS) via malicious user input

Faktory is a language-agnostic persistent background job server. Prior to version 1.8.0, the Faktory web dashboard can suffer from denial of service by a crafted malicious url query param days. The vulnerability is related to how the backend reads the days URL query parameter in the Faktory web...

7.5CVSS7.5AI score0.00582EPSS
Exploits1References1
OSV
OSV
added 2023/09/20 9:27 p.m.18 views

CVE-2023-37279 Faktory Web Dashboard can lead to denial of service(DOS) via malicious user input

Faktory is a language-agnostic persistent background job server. Prior to version 1.8.0, the Faktory web dashboard can suffer from denial of service by a crafted malicious url query param days. The vulnerability is related to how the backend reads the days URL query parameter in the Faktory web...

7.5CVSS7.2AI score0.00582EPSS
Exploits1References3
CVE
CVE
added 2023/09/20 9:27 p.m.38 views

CVE-2023-37279

Faktory web dashboard vulnerability: prior to version 1.8.0, a crafted malicious days URL query parameter is read without validation, used to create a string slice, leading to memory growth and potential DoS. The issue is fixed in 1.8.0. Public advisory (GHSA) provides PoC details; impact is serv...

7.5CVSS7.3AI score0.00582EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/09/20 12:0 a.m.3 views

PT-2023-25879 · Faktory · Faktory

Name of the Vulnerable Software and Affected Versions: Faktory versions prior to 1.8.0 Description: The Faktory web dashboard can suffer from denial of service by a crafted malicious URL query parameter days. This issue is related to how the backend reads the days URL query parameter in the Fakto...

7.5CVSS7AI score0.00582EPSS
Exploits1References11
CNNVD
CNNVD
added 2023/09/20 12:0 a.m.2 views

Faktory Security Breach

Faktory is a job server. It is a repository for background jobs in the application. Jobs have a type and a set of parameters and are placed in a queue for staff to fetch and execute. A security vulnerability exists in Faktory versions prior to 1.8.0 that stems from the Faktory Web dashboard that...

7.5CVSS6.5AI score0.00582EPSS
Exploits1References2
Rows per page
Query Builder