Lucene search
+L

4151 matches found

Fedora
Fedora
added 2021/04/08 8:57 p.m.81 views

[SECURITY] Fedora 33 Update: perl-Net-Netmask-2.0001-1.fc33

Net::Netmask parses and understands IPv4 and IPv6 CIDR blocks see for more information on CIDR blocks. There are also functions to insert a network block into a table and then later look up network blocks by an IP address using that table...

7.5CVSS0.5AI score0.01797EPSS
SaveExploits1
OSV
OSV
added 2021/04/06 4:15 p.m.14 views

CVE-2021-29424

The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses...

7.5CVSS7.5AI score
SaveExploits0References6
Fedora
Fedora
added 2021/04/06 2:03 p.m.61 views

[SECURITY] Fedora 34 Update: perl-Net-Netmask-2.0001-1.fc34

Net::Netmask parses and understands IPv4 and IPv6 CIDR blocks see for more information on CIDR blocks. There are also functions to insert a network block into a table and then later look up network blocks by an IP address using that table...

7.5CVSS0.5AI score0.01797EPSS
SaveExploits1
Kitploit
Kitploit
added 2021/04/06 12:30 p.m.551 views

Scylla - The Simplistic Information Gathering Engine | Find Advanced Information On A Username, Website, Phone Number, Etc...

Scylla is an OSINT tool developed in Python 3.6. Scylla lets users perform advanced searches on Instagram & Twitter accounts, websites/webservers, phone numbers, and names. Scylla also allows users to find all social media profiles main platforms assigned to a certain username. In continuation,...

7.2AI score
SaveExploits0References1
CNNVD
CNNVD
added 2021/04/06 12:00 a.m.11 views

Perl 代码问题漏洞

Perl is a general-purpose, interpreted, dynamic cross-platform programming language from the Perl PERL community. A security vulnerability exists in Perl versions prior to 2.0000, which stems from a failure to properly account for extra zero characters at the beginning of an IP address string, an...

7.5CVSS7.2AI score0.01797EPSS
SaveExploits1References8
NVD
NVD
added 2021/04/02 4:15 p.m.33 views

CVE-2020-11922

An issue was discovered in WiZ Colors A60 1.14.0. The device sends unnecessary information to the cloud controller server. Although this information is sent encrypted and has low risk in isolation, it decreases the privacy of the end user. The information sent includes the local IP address being...

4.3CVSS0.01124EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2021/04/02 3:47 p.m.36 views

CVE-2020-11922

An issue was discovered in WiZ Colors A60 1.14.0. The device sends unnecessary information to the cloud controller server. Although this information is sent encrypted and has low risk in isolation, it decreases the privacy of the end user. The information sent includes the local IP address being...

4.4AI score0.01124EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2021/04/02 3:47 p.m.11 views

CVE-2020-11922

An issue was discovered in WiZ Colors A60 1.14.0. The device sends unnecessary information to the cloud controller server. Although this information is sent encrypted and has low risk in isolation, it decreases the privacy of the end user. The information sent includes the local IP address being...

6.3AI score0.01124EPSS
SaveExploits1References3
CNVD
CNVD
added 2021/04/02 12:00 a.m.11 views

Unspecified Bypass Vulnerability in Data-Validate-IP

Data-Validate-IP is an open source application by Dave Rolsky. Provides IPv4 and IPv6 validation methods. Data-Validate-IP version before 0.29 has a security vulnerability that can be exploited by attackers to bypass IP address-based access control...

7.5CVSS6.8AI score0.02219EPSS
SaveExploits1References1
OSV
OSV
added 2021/03/31 6:15 p.m.13 views

UBUNTU-CVE-2021-29662

The Data::Validate::IP module through 0.29 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses...

7.5CVSS5.8AI score0.02219EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2021/03/30 5:56 p.m.36 views

CVE-2021-29418

The netmask package before 2.0.1 for Node.js mishandles certain unexpected characters in an IP address string, such as an octal digit of 9. This in some situations allows attackers to bypass access control that is based on IP addresses. NOTE: this issue exists because of an incomplete fix for...

9.1CVSS5.1AI score0.16657EPSS
SaveExploits1References4
NVD
NVD
added 2021/03/30 7:15 a.m.28 views

CVE-2021-29418

The netmask package before 2.0.1 for Node.js mishandles certain unexpected characters in an IP address string, such as an octal digit of 9. This in some situations allows attackers to bypass access control that is based on IP addresses. NOTE: this issue exists because of an incomplete fix for...

5.3CVSS0.01682EPSS
SaveExploits0References3
CVE
CVE
added 2021/03/30 6:08 a.m.155 views

CVE-2021-29418

CVE-2021-29418 affects the Node.js netmask module, where the library mishandles certain unexpected characters in IP address strings (e.g., octal digit 9). This can allow a remote attacker to bypass access control based on IP addresses. The issue arises from an incomplete fix for CVE-2021-28918. A...

5.3CVSS7AI score0.01682EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/03/30 6:08 a.m.34 views

CVE-2021-29418

The netmask package before 2.0.1 for Node.js mishandles certain unexpected characters in an IP address string, such as an octal digit of 9. This in some situations allows attackers to bypass access control that is based on IP addresses. NOTE: this issue exists because of an incomplete fix for...

7.4AI score0.01682EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2021/03/29 11:02 p.m.62 views

CVE-2021-29424

The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses...

7.5CVSS7.5AI score0.01797EPSS
SaveExploits1
CNVD
CNVD
added 2021/03/25 12:00 a.m.21 views

GitLab EE Information Disclosure Vulnerability (CNVD-2021-22909)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. GitLab EE has an information disclosure vulnerability. The...

4.3CVSS6.1AI score0.00831EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/24 6:15 p.m.20 views

CVE-2021-22169

An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages...

4.3CVSS6.5AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/03/24 6:15 p.m.4 views

CVE-2021-22169

An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages...

4.3CVSS5.8AI score0.00831EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2021/03/24 5:03 p.m.69 views

CVE-2021-22169

GitLab EE 13.4+ is identified as leaking internal IP addresses via error messages (CVE-2021-22169). Available sources consistently describe an information-disclosure issue in GitLab Enterprise Edition that reveals internal IPs through error handling. The concrete details beyond the high-level des...

4.3CVSS4.2AI score0.00831EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2021/03/24 5:03 p.m.61 views

CVE-2021-22169

Removed by vendor...

4.3CVSS5.8AI score0.00831EPSS
SaveExploits0
Rows per page
Query Builder