6602 matches found
PYSEC-2022-43160
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0...
PYSEC-2022-43161
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...
PYSEC-2022-43160
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0...
CVE-2022-3456 Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0...
PYSEC-2022-43158
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...
PYSEC-2022-43158
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...
Intel Confirms Leak of Alder Lake BIOS Source Code
Chipmaker Intel has confirmed that proprietary source code related to its Alder Lake CPUs has been leaked, following its release by an unknown third-party on 4chan and GitHub last week. The published content contains Unified Extensible Firmware Interface UEFI code for Alder Lake, the company's 12...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2451)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 3.0.6.0 : vim (EulerOS-SA-2022-2594)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Out-of-bounds Read CVE-2021-4166, CVE-2021-4193 - vim is vulnerable to Use After Free CVE-2021-4192 - vim is...
CVE-2022-3438 Open Redirect in ikus060/rdiffweb
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...
EulerOS 2.0 SP8 : vim (EulerOS-SA-2022-2483)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software,...
GHSA-PJ2C-H76W-VV6F tiny-csrf has openly visible CSRF tokens
Impact Weak encryption on CSRF so tokens can be read by malicious attackers. Patches Problems have been patched as of v1.1.0 Workarounds Upgrade to v1.1.0 References https://cheatsheetseries.owasp.org/cheatsheets/Cross-SiteRequestForgeryPreventionCheatSheet.html For more information Submit an iss...
tiny-csrf has openly visible CSRF tokens
Impact Weak encryption on CSRF so tokens can be read by malicious attackers. Patches Problems have been patched as of v1.1.0 Workarounds Upgrade to v1.1.0 References https://cheatsheetseries.owasp.org/cheatsheets/Cross-SiteRequestForgeryPreventionCheatSheet.html For more information Submit an iss...
Design/Logic Flaw
Allocation of Resources Without Limits or Throttling in GitHub repository nocodb/nocodb prior to 0.92.0...
CVE-2022-3423 Allocation of Resources Without Limits or Throttling in nocodb/nocodb
Allocation of Resources Without Limits or Throttling in GitHub repository nocodb/nocodb prior to 0.92.0...
CVE-2022-3423
CVE-2022-3423 affects NocoDB prior to version 0.92.0. The issue is a resource management flaw described as Allocation of Resources Without Limits or Throttling, allowing a crafted HTTP request to insert large characters into the input field for creating a new project, which can trigger a Denial o...
Default credentials
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...
Path traversal
Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10...