Lucene search
+L

6633 matches found

Packet Storm
Packet Storm
•added 2022/01/28 12:00 a.m.•216 views

Fetch Softworks Fetch FTP Client 5.8 Denial Of Service

!/usr/bin/env python Fetch Softworks Fetch FTP Client 5.8 Remote CPU Consumption Denial of Service Vendor: Fetch Softworks Product web page: https://www.fetchsoftworks.com Affected version: 5.8.2 5K1354 Summary: Fetch is a reliable, full-featured file transfer client for the Apple Macintosh whose...

7.4AI score
SaveExploits0
zdt
zdt
•added 2022/01/28 12:00 a.m.•179 views

Fetch Softworks Fetch FTP Client 5.8 Denial Of Service Exploit

Fetch Softworks Fetch FTP Client version 5.8 suffers from a remote CPU consumption denial of service vulnerability. !/usr/bin/env python Fetch Softworks Fetch FTP Client 5.8 Remote CPU Consumption Denial of Service Vendor: Fetch Softworks Product web page: https://www.fetchsoftworks.com Affected...

0.4AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
•added 2022/01/27 12:00 a.m.•253 views

Fetch Softworks Fetch FTP Client 5.8 Remote CPU Consumption (Denial of Service)

Summary Fetch is a reliable, full-featured file transfer client for the Apple Macintosh whose user interface emphasizes simplicity and ease of use. Fetch supports FTP and SFTP, the most popular file transfer protocols on the Internet for compatibility with thousands of Internet service providers,...

7.5CVSS5.8AI score0.00416EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2022/01/24 12:00 a.m.•2 views

PT-2022-37265

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

5.9AI score
SaveExploits0References2
vulnersOsv
vulnersOsv
•added 2022/01/21 11:55 p.m.•10 views

10secondsofcode-custom (1.0.0), 123-x-ed-eied (>=1.0.5, <=1.0.6) +10673 more potentially affected by CVE-2022-0235 via node-fetch (>=2.0.0, <=2.6.6)

node-fetch NPM version =2.0.0, =1.0.5, =1.0.0, =1.0.1, =1.0.0-beta.32, =0.24.0, =0.0.8, =0.0.1, =0.0.0-alpha.1, =1.0.43, =0.0.80, =0.1.3-rc9 and more Source cves: CVE-2022-0235 Source advisory: OSV:GHSA-R683-J2X4-V87G...

8.8CVSS7.1AI score0.01653EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/01/21 11:55 p.m.•5 views

4i18n-cli (>=0.0.2, <=0.0.7), @2060.io/credo-ts-didcomm-media-sharing (>=0.0.2, <=0.0.3) +1049 more potentially affected by CVE-2022-0235 via node-fetch (>=3.0.0, <=3.1.0)

node-fetch NPM version =3.0.0, =0.0.2, =0.0.2, =0.0.4, =0.0.0-alpha.117, =0.0.0-alpha.117, =0.0.0-alpha.119, =1.2.1-dev.3, =1.2.1-dev.3, =1.2.1-dev.3, =1.0.0, =2.0.0-beta.0, =2.0.0-beta.1 and more Source cves: CVE-2022-0235 Source advisory: OSV:GHSA-R683-J2X4-V87G...

8.8CVSS7.1AI score0.01653EPSS
SaveExploits1
OSV
OSV
•added 2022/01/21 11:55 p.m.•18 views

GHSA-R683-J2X4-V87G node-fetch forwards secure headers to untrusted sites

node-fetch forwards secure headers such as authorization, www-authenticate, cookie, & cookie2 when redirecting to a untrusted site...

8.8CVSS6.9AI score0.01653EPSS
SaveExploits1References10
Github Security Blog
Github Security Blog
•added 2022/01/21 11:55 p.m.•1211 views

node-fetch forwards secure headers to untrusted sites

node-fetch forwards secure headers such as authorization, www-authenticate, cookie, & cookie2 when redirecting to a untrusted site...

8.8CVSS7.7AI score0.01653EPSS
SaveExploits1References10Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/19 12:00 a.m.•6 views

CVE-2022-22156: Improperly Implemented Security Check for Standard

An Improper Certificate Validation weakness in the Juniper Networks Junos OS allows an attacker to perform Person-in-the-Middle PitM attacks when a system script is fetched from a remote source at a specified HTTPS URL, which may compromise the integrity and confidentiality of the device. The...

7.4CVSS5.9AI score0.0055EPSS
SaveExploits1References4
wpexploit
wpexploit
•added 2022/01/18 12:00 a.m.•148 views

Five Star Business Profile and Schema < 2.1.7 - Subscriber+ Page Creation & Settings Update to Stored XSS

The plugin does not have any authorisation and CSRF in its bpfwpwelcomeaddcontactpage and bpfwpwelcomesetcontactinformation AJAX action, allowing any authenticated users, such as subscribers, to call them. Furthermore, due to the lack of sanitisation, it also lead to Stored Cross-Site Scripting...

5.4CVSS0.4AI score0.006EPSS
SaveExploits2
Veracode
Veracode
•added 2022/01/17 9:09 a.m.•51 views

Information Disclosure

node-fetch is vulnerable to information disclosure. The vulnerability exists due to the cookie header being leaked to third party site which allows an attacker to gain access to sensitive information...

6.1CVSS1.9AI score0.01653EPSS
SaveExploits1References5Affected Software8
BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•16 views

The vulnerability of the fetch module in the Ansible configuration management system stems from deficiencies in path name restrictions, allowing attackers to access confidential data and compromise its integrity.

The vulnerability of the fetch module in the Ansible configuration system is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability could allow an attacker to access confidential data and compromise its integrity...

4.6CVSS6.5AI score0.00472EPSS
SaveExploits1References10Affected Software5
OSV
OSV
•added 2022/01/16 5:15 p.m.•6 views

DEBIAN-CVE-2022-0235

node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor...

6.1CVSS7AI score0.01653EPSS
SaveExploits1References1
NVD
NVD
•added 2022/01/16 5:15 p.m.•31 views

CVE-2022-0235

node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor...

8.8CVSS0.01653EPSS
SaveExploits1References4
OSV
OSV
•added 2022/01/16 5:15 p.m.•16 views

UBUNTU-CVE-2022-0235

node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor...

8.8CVSS6.9AI score0.01653EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
•added 2022/01/16 5:15 p.m.•95 views

CVE-2022-0235

node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor...

8.8CVSS6.9AI score0.01653EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2022/01/16 5:15 p.m.•10 views

CVE-2022-0235

node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor...

8.8CVSS6.9AI score0.01653EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2022/01/16 12:00 a.m.•14 views

PT-2022-13054

Name of the Vulnerable Software and Affected Versions node-fetch versions affected versions not specified Description The issue concerns exposure of sensitive information to an unauthorized actor. Specifically, node-fetch forwards secure headers such as authorization, www-authenticate, cookie, an...

8.8CVSS6.5AI score0.01653EPSS
SaveExploits1References78
Debian CVE
Debian CVE
•added 2022/01/16 12:00 a.m.•90 views

CVE-2022-0235

node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor...

8.8CVSS7.7AI score0.01653EPSS
SaveExploits1
CNNVD
CNNVD
•added 2022/01/16 12:00 a.m.•8 views

node-fetch 信息泄露漏洞

node-fetch is a lightweight module that brings the Fetch API to Node.js. An information disclosure vulnerability exists in node-fetch, which is vulnerable to the exposure of sensitive information to unauthorized participants...

8.8CVSS7.1AI score0.01653EPSS
SaveExploits1References34
Rows per page
Query Builder