10436 matches found
CVE-2023-44388
Discourse is an open source platform for community discussion. A malicious request can cause production log files to quickly fill up and thus result in the server running out of disk space. This problem has been patched in the 3.1.1 stable and 3.2.0.beta2 versions of Discourse. It is possible to...
Design/Logic Flaw
Discourse is an open source platform for community discussion. A malicious request can cause production log files to quickly fill up and thus result in the server running out of disk space. This problem has been patched in the 3.1.1 stable and 3.2.0.beta2 versions of Discourse. It is possible to...
CVE-2023-44388 Malicious requests can fill up the log files resulting in a deinal of service in Discourse
Discourse is an open source platform for community discussion. A malicious request can cause production log files to quickly fill up and thus result in the server running out of disk space. This problem has been patched in the 3.1.1 stable and 3.2.0.beta2 versions of Discourse. It is possible to...
CVE-2023-45641
Cross-Site Request Forgery CSRF vulnerability in Caret Inc. Caret Country Access Limit plugin = 1.0.2 versions...
CVE-2023-45641
Cross-Site Request Forgery CSRF vulnerability in Caret Inc. Caret Country Access Limit plugin = 1.0.2 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Caret Inc. Caret Country Access Limit plugin = 1.0.2 versions...
CVE-2023-45641 WordPress Caret Country Access Limit Plugin <= 1.0.2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Caret Inc. Caret Country Access Limit plugin = 1.0.2 versions...
CVE-2023-45641
CVE-2023-45641 affects the Caret Country Access Limit WordPress plugin (
CVE-2023-45606
Cross-Site Request Forgery CSRF vulnerability in Lasso Simple URLs plugin = 120 versions...
PT-2023-29222 · Nginx +1 · Nginx +1
Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 3.1.1 stable and 3.2.0.beta2 Description: Discourse is an open source platform for community discussion. A malicious request can cause production log files to quickly fill up and thus result in the server running o...
WordPress Plugin Caret Country Access Limit Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...
PT-2023-29618 · Unknown · Caret Country Access Limit
Name of the Vulnerable Software and Affected Versions: Caret Country Access Limit plugin versions prior to 1.0.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to perform unintended actions on a web application...
CVE-2023-45641: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Caret Inc. Caret Country Access Limit plugin = 1.0.2 versions...
PT-2023-6442 · Nextcloud +2 · Nextcloud +2
Name of the Vulnerable Software and Affected Versions: Nextcloud versions prior to 25.0.11 Nextcloud versions prior to 26.0.6 Nextcloud versions prior to 27.1.0 Description: The issue is related to the use of Memcached as memcache.distributed in Nextcloud, which can cause the rate limiting on the...
CVE-2023-45130
Frontier is Substrate's Ethereum compatibility layer. Prior to commit aea528198b3b226e0d20cce878551fd4c0e3d5d0, at the end of a contract execution, when opcode SUICIDE marks a contract to be deleted, the software uses storage::removeprefix now renamed to storage::clearprefix to remove all storage...
CVE-2023-45130: Allocation of Resources Without Limits or Throttling
Frontier is Substrate's Ethereum compatibility layer. Prior to commit aea528198b3b226e0d20cce878551fd4c0e3d5d0, at the end of a contract execution, when opcode SUICIDE marks a contract to be deleted, the software uses storage::removeprefix now renamed to storage::clearprefix to remove all storage...
Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2023-2975)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
bind: Fix of CVE-2023-3341
CVE-2023-3341: Limit iscccccfromwire recursion depth...
