Lucene search
+L

1416 matches found

osv_cve
osv_cve
•added 2022/10/06 12:00 a.m.•40 views

CVE-2022-27810

It was possible to trigger an infinite recursion condition in the error handler when Hermes executed specific maliciously formed JavaScript. This condition was only possible to trigger in dev-mode when asserts were enabled. This issue affects Hermes versions prior to v0.12.0...

6.8AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2022/10/05 12:00 a.m.•133 views

Debian DSA-5246-1 : mediawiki - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5246 advisory. - An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite...

8.1CVSS6.3AI score0.01961EPSS
SaveExploits3References33
NVD
NVD
•added 2022/09/19 9:15 p.m.•24 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS0.00423EPSS
SaveExploits1References4
osv_debian
osv_debian
•added 2022/09/19 9:15 p.m.•11 views

DEBIAN-CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS4.8AI score0.00423EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2022/09/19 9:15 p.m.•60 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS5.9AI score0.00423EPSS
SaveExploits1References3
Prion
Prion
•added 2022/09/19 9:15 p.m.•22 views

Design/Logic Flaw

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

1.4CVSS5.7AI score0.00423EPSS
SaveExploits1References4Affected Software2
attackerkb
attackerkb
•added 2022/09/19 9:15 p.m.•12 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS5.9AI score0.00423EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/19 12:00 a.m.•6 views

CVE-2022-28201: Uncontrolled Recursion

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS5.6AI score0.00423EPSS
SaveExploits1References2
Mend
Mend
•added 2022/09/19 12:00 a.m.•7 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

6.7CVSS0.00423EPSS
SaveExploits1References7
CVE
CVE
•added 2022/09/19 12:00 a.m.•108 views

CVE-2022-28201

CVE-2022-28201 affects MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. The root cause is an infinite recursion triggered when a user with editinterface permission mishandles a bare local interwiki for the mainpage message. This can lead to a denial of service via recursio...

4.4CVSS5.6AI score0.00423EPSS
SaveExploits1References4Affected Software1
osv_cve
osv_cve
•added 2022/09/19 12:00 a.m.•44 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

6.5AI score
SaveExploits0References6
Debian CVE
Debian CVE
•added 2022/09/19 12:00 a.m.•129 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS4.5AI score0.00423EPSS
SaveExploits1
Cvelist
Cvelist
•added 2022/09/19 12:00 a.m.•44 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

6.1AI score0.00423EPSS
SaveExploits1References4
osv_ghsa
osv_ghsa
•added 2022/08/02 12:00 a.m.•91 views

GHSA-H3QM-JRRF-CGJ3 graphql-go has infinite recursion in the type definition parser

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS7.5AI score0.01211EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2022/08/01 10:15 p.m.•11 views

CVE-2022-37315

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS5.8AI score0.01211EPSS
SaveExploits1References2
NVD
NVD
•added 2022/08/01 10:15 p.m.•29 views

CVE-2022-37315

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS0.01211EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2022/08/01 10:15 p.m.•25 views

UBUNTU-CVE-2022-37315

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS7.1AI score0.01211EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2022/08/01 10:15 p.m.•75 views

CVE-2022-37315

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

7.5CVSS7.1AI score0.01211EPSS
SaveExploits1References3
Prion
Prion
•added 2022/08/01 10:15 p.m.•28 views

Design/Logic Flaw

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

5CVSS7.5AI score0.01211EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2022/08/01 9:53 p.m.•8 views

CVE-2022-37315

graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...

8.7CVSS0.01211EPSS
SaveExploits1References8
Rows per page
Query Builder