Lucene search
+L

38 matches found

NVD
NVD
added 2022/04/11 10:15 p.m.33 views

CVE-2022-24839

org.cyberneko.html is an html parser written in Java. The fork of org.cyberneko.html used by Nokogiri Rubygem raises a java.lang.OutOfMemoryError exception when parsing ill-formed HTML markup. Users are advised to upgrade to = 1.9.22.noko2. Note: The upstream library org.cyberneko.html is no long...

7.5CVSS0.02148EPSS
SaveExploits0References3
OSV
OSV
added 2022/04/11 10:15 p.m.8 views

UBUNTU-CVE-2022-24839

org.cyberneko.html is an html parser written in Java. The fork of org.cyberneko.html used by Nokogiri Rubygem raises a java.lang.OutOfMemoryError exception when parsing ill-formed HTML markup. Users are advised to upgrade to = 1.9.22.noko2. Note: The upstream library org.cyberneko.html is no long...

7.5CVSS6.8AI score0.02148EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2022/04/11 9:25 p.m.35 views

CVE-2022-24839 Uncontrolled Resource Consumption in org.cyberneko.html (nokogiri fork)

org.cyberneko.html is an html parser written in Java. The fork of org.cyberneko.html used by Nokogiri Rubygem raises a java.lang.OutOfMemoryError exception when parsing ill-formed HTML markup. Users are advised to upgrade to = 1.9.22.noko2. Note: The upstream library org.cyberneko.html is no long...

7.5CVSS7.6AI score0.02148EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2022/04/11 9:25 p.m.8 views

CVE-2022-24839 Uncontrolled Resource Consumption in org.cyberneko.html (nokogiri fork)

org.cyberneko.html is an html parser written in Java. The fork of org.cyberneko.html used by Nokogiri Rubygem raises a java.lang.OutOfMemoryError exception when parsing ill-formed HTML markup. Users are advised to upgrade to = 1.9.22.noko2. Note: The upstream library org.cyberneko.html is no long...

7.5CVSS7.4AI score0.02148EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/04/11 12:00 a.m.13 views

PT-2022-7276

Name of the Vulnerable Software and Affected Versions Nokogiri versions prior to 1.9.22.noko2 Description The issue is related to uncontrolled resource consumption when parsing ill-formed HTML markup, which can lead to a java.lang.OutOfMemoryError exception. This can be exploited by a remote...

10CVSS7AI score0.81039EPSS
SaveExploits17References77
Tenable Nessus
Tenable Nessus
added 2020/05/27 12:00 a.m.40 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : thunderbird Multiple Vulnerabilities (NS-SA-2020-0025)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has thunderbird packages installed that are affected by multiple vulnerabilities: - When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location. This vulnerability...

8.8CVSS7.5AI score0.02274EPSS
SaveExploits1References7
NVD
NVD
added 2020/03/02 5:15 a.m.18 views

CVE-2020-6793

When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location. This vulnerability affects Thunderbird 68.5...

6.5CVSS6.9AI score0.01511EPSS
SaveExploits0References5
OSV
OSV
added 2020/03/02 5:15 a.m.6 views

DEBIAN-CVE-2020-6793

When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location. This vulnerability affects Thunderbird 68.5...

6.5CVSS7.4AI score0.01511EPSS
SaveExploits0References1
OSV
OSV
added 2020/03/02 5:15 a.m.7 views

UBUNTU-CVE-2020-6793

When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location. This vulnerability affects Thunderbird 68.5...

6.5CVSS6.7AI score0.01511EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2020/02/24 12:53 p.m.7 views

Mozilla: Out-of-bounds read when processing certain email messages

When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location. This vulnerability affects Thunderbird 68.5...

6.5CVSS7.4AI score0.01511EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2020/02/24 12:36 p.m.7 views

Mozilla: Out-of-bounds read when processing certain email messages

When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location. This vulnerability affects Thunderbird 68.5...

6.5CVSS7.4AI score0.01511EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2020/02/24 12:18 p.m.8 views

Mozilla: Out-of-bounds read when processing certain email messages

When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location. This vulnerability affects Thunderbird 68.5...

6.5CVSS7.4AI score0.01511EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2020/02/20 10:17 p.m.6 views

Mozilla: Out-of-bounds read when processing certain email messages

When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location. This vulnerability affects Thunderbird 68.5...

6.5CVSS7.4AI score0.01511EPSS
SaveExploits0References5
Mageia
Mageia
added 2020/02/18 2:05 p.m.52 views

Updated thunderbird packages fix security vulnerabilities

Updated thunderbird packages fix security vulnerabilities: When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents CVE-2020-6792. When processing an email message with an ill-formed envelope, Thunderbird could read data from a random...

8.8CVSS0.9AI score0.02274EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2013/04/02 11:13 p.m.74 views

[Acunetix Web Vulnerability Scanner 8] Automated Web Application Security Testing Tool

Acunetix W eb V ulnerability S canner WVS is an automated web application security testing tool that audits your web applications by checking for exploitable hacking vulnerabilities. Automated scans may be supplemented and cross-checked with the variety of manual tools to allow for comprehensive...

7.3AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2011/02/03 6:55 p.m.11 views

php: XSS mitigation bypass via utf8_decode()

The utf8decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting XSS and SQL injection protection mechanisms via a crafted string...

6.8CVSS6.6AI score0.11281EPSS
SaveExploits2References4
UbuntuCve
UbuntuCve
added 2010/11/12 12:00 a.m.35 views

CVE-2010-3870

The utf8decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting XSS and SQL injection protection mechanisms via a crafted string...

6.8CVSS6.7AI score0.11281EPSS
SaveExploits2References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2010/06/29 6:35 a.m.5 views

Forced Shutdown or Restart with JP1/ServerConductor/Deployment Manager

Overview JP1/ServerConductor/Deployment Manager's Client Service for DPM has a vulnerability which could cause a shutdown or restart of the client computer when receiving ill-formed data. Impact A remote attacker could shut down or restart the target system. Solution Please refer to the 'Vendor...

7.8CVSS6.9AI score
SaveExploits0References2
Rows per page
Query Builder