Lucene search
+L

233 matches found

OSV
OSV
added 2022/09/06 10:15 a.m.29 views

CVE-2022-2714 Improper Handling of Length Parameter Inconsistency in francoisjacquet/rosariosis

Improper Handling of Length Parameter Inconsistency in GitHub repository francoisjacquet/rosariosis prior to 10.0...

8.1CVSS8.2AI score
SaveExploits0References4
CNNVD
CNNVD
added 2022/09/06 12:00 a.m.15 views

RosarioSIS 安全漏洞

RosarioSIS is a free and open source student information system. It is used to manage students, create reports and make sound decisions. A security vulnerability exists in RosarioSIS versions prior to 10.0 that stems from mishandling of length parameter inconsistencies...

9.8CVSS7.6AI score0.00849EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/09/06 12:00 a.m.9 views

PT-2022-18245 · Unknown · Rosariosis Student Information System +1

Name of the Vulnerable Software and Affected Versions: rosariosis versions prior to 10.0 RosarioSIS Student Information System versions prior to 10.1 Description: The issue is related to improper handling of length parameter inconsistency in the GitHub repository francoisjacquet/rosariosis...

9.8CVSS7.9AI score0.00849EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2022/05/05 3:17 p.m.11 views

CVE-2021-38445 OCI OpenDDS Secure Improper Handling of Length Parameter Inconsistency

OCI OpenDDS versions prior to 3.18.1 do not handle a length parameter consistent with the actual length of the associated data, which may allow an attacker to remotely execute arbitrary code...

7CVSS7.3AI score0.02581EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/05/05 3:17 p.m.44 views

CVE-2021-38445 OCI OpenDDS Secure Improper Handling of Length Parameter Inconsistency

OCI OpenDDS versions prior to 3.18.1 do not handle a length parameter consistent with the actual length of the associated data, which may allow an attacker to remotely execute arbitrary code...

7CVSS9.7AI score0.02581EPSS
SaveExploits0References2
NVD
NVD
added 2022/04/29 6:15 p.m.29 views

CVE-2022-1543

Improper handling of Length parameter in GitHub repository erudika/scoold prior to 1.49.4. When the text size is large enough the service results in a momentary outage in a production environment. That can lead to memory corruption on the server...

9.3CVSS0.01097EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/04/29 6:15 p.m.8 views

CVE-2022-1543

Improper handling of Length parameter in GitHub repository erudika/scoold prior to 1.49.4. When the text size is large enough the service results in a momentary outage in a production environment. That can lead to memory corruption on the server...

9.3CVSS7.3AI score0.01097EPSS
SaveExploits1References3
Prion
Prion
added 2022/04/29 6:15 p.m.20 views

Design/Logic Flaw

Improper handling of Length parameter in GitHub repository erudika/scoold prior to 1.49.4. When the text size is large enough the service results in a momentary outage in a production environment. That can lead to memory corruption on the server...

6.5CVSS8.9AI score0.01097EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2022/04/29 6:10 p.m.88 views

CVE-2022-1543

CVE-2022-1543 affects erudika/scoold prior to 1.49.4. The root cause is improper handling of the Length parameter in large text inputs, which can cause a momentary outage and potential memory corruption on the server. CVSS metrics indicate high/critical impact (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H...

9.3CVSS9AI score0.01097EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/04/29 6:10 p.m.40 views

CVE-2022-1543 Improper handling of Length parameter in erudika/scoold

Improper handling of Length parameter in GitHub repository erudika/scoold prior to 1.49.4. When the text size is large enough the service results in a momentary outage in a production environment. That can lead to memory corruption on the server...

9.3CVSS9.1AI score0.01097EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/29 12:00 a.m.9 views

Erudika Scoold 安全漏洞

Erudika Scoold is an open source question and answer/knowledge base platform written in Java by the Bulgarian company Erudika. A security vulnerability exists in Scoold prior to version 1.49.4, which stems from improper handling of the Length parameter. When the text size was large enough, the...

9.3CVSS8.3AI score0.01097EPSS
SaveExploits1References3
Huntr
Huntr
added 2022/04/24 8:28 p.m.38 views

Improper handling of Length parameter

Description There was no restriction on the amount of text that can be inserted into a user's name field. When the text size was large enough the service resulted in a momentary outage in our non-production environment not high availability. An internal reproduction showed isolated disruption but...

6.5CVSS0.1AI score0.01097EPSS
SaveExploits1References4
OSV
OSV
added 2022/04/07 7:15 p.m.11 views

CVE-2022-0677

Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools in relay role, GravityZone in Update Server role allows an attacker to cause a Denial-of-Service. This issue affects: Bitdefender Update Server versions prior to...

7.5CVSS5.8AI score0.01249EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/04/07 6:21 p.m.31 views

CVE-2022-0677 Improper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144)

Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools in relay role, GravityZone in Update Server role allows an attacker to cause a Denial-of-Service. This issue affects: Bitdefender Update Server versions prior to...

7.5CVSS7.5AI score0.01249EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/03/28 12:00 a.m.11 views

The vulnerability of the TCP protocol implementation in the Stack Trace TCP/IP protocol allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the TCP protocol implementation in the Stack Trace TCP/IP protocol is related to integer overflow when processing the length parameter. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.3CVSS6.6AI score0.0196EPSS
SaveExploits1References10Affected Software5
ATTACKERKB
ATTACKERKB
added 2022/03/10 10:00 a.m.13 views

CVE-2022-0677

Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools in relay role, GravityZone in Update Server role allows an attacker to cause a Denial-of-Service. This issue affects: Bitdefender Update Server versions prior to...

7.5CVSS7.2AI score0.01249EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/12/17 5:15 p.m.6 views

CVE-2021-20608

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior allows a remote unauthenticated attacker to cause a DoS condition in GX Works2 by getting GX Works2 to read a tampered program file from a Mitsubishi Electric PLC by sendin...

7.5CVSS7.2AI score0.02711EPSS
SaveExploits0References4
OSV
OSV
added 2021/12/17 5:15 p.m.12 views

CVE-2021-20608

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior allows a remote unauthenticated attacker to cause a DoS condition in GX Works2 by getting GX Works2 to read a tampered program file from a Mitsubishi Electric PLC by sendin...

7.5CVSS5.8AI score0.02711EPSS
SaveExploits0References3
CVE
CVE
added 2021/12/17 4:10 p.m.63 views

CVE-2021-20608

CVE-2021-20608 concerns Mitsubishi Electric GX Works2. The issue is an improper handling of a length parameter inconsistency when reading a tampered program file from a Mitsubishi PLC, which can allow a remote attacker to cause a denial of service in GX Works2. Affected products are GX Works2 ver...

7.5CVSS7.3AI score0.02711EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/12/01 3:41 p.m.35 views

CVE-2021-20610

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120ENCPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R Seri...

7.5CVSS7.7AI score0.03077EPSS
SaveExploits0References3
Rows per page
Query Builder