Lucene search
+L

9056 matches found

OSV
OSV
added 2024/10/01 9:15 a.m.9 views

CVE-2024-9228

The Loggedin – Limit Active Logins plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.3.1. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS6AI score0.0037EPSS
SaveExploits0References2
Mageia
Mageia
added 2024/09/27 5:21 p.m.55 views

Updated java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk, & java-latest-openjdk packages fix security vulnerabilities

Potential UTF8 size overflow. CVE-2024-21131 Excessive symbol length can lead to infinite loop. CVE-2024-21138 Range Check Elimination RCE pre-loop limit overflow. CVE-2024-21140 Pack200 increase loading time due to improper header validation. CVE-2024-21144 Out-of-bounds access in 2D image...

7.4CVSS7.2AI score0.01257EPSS
SaveExploits0References5
NVD
NVD
added 2024/09/27 5:15 p.m.19 views

CVE-2024-38809

Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack. Users of affected versions should upgrade to the corresponding fixed version. Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers,...

5.3CVSS0.00852EPSS
SaveExploits0References2
OSV
OSV
added 2024/09/27 5:15 p.m.22 views

CVE-2024-38809

Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack. Users of affected versions should upgrade to the corresponding fixed version. Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers,...

6.6AI score
SaveExploits0References2
OSV
OSV
added 2024/09/27 5:15 p.m.11 views

UBUNTU-CVE-2024-38809

Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack. Users of affected versions should upgrade to the corresponding fixed version. Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers,...

5.3CVSS6.8AI score0.00852EPSS
SaveExploits0References3
CVE
CVE
added 2024/09/27 4:39 p.m.348 views

CVE-2024-38809

CVE-2024-38809 is a Spring Framework DoS vulnerability arising when parsing ETags from If-Match/If-None-Match headers. Affected OpenPages advisory confirms remediation by upgrading Spring to a fixed package version (OpenPages uses Spring Framework 5.3.x; remediation version stated as 5.3.39.2511)...

5.3CVSS6.7AI score0.00852EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/09/27 4:39 p.m.30 views

CVE-2024-38809

Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack. Users of affected versions should upgrade to the corresponding fixed version. Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers,...

5.3CVSS5.2AI score0.00852EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/09/27 4:39 p.m.35 views

CVE-2024-38809

Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack. Users of affected versions should upgrade to the corresponding fixed version. Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers,...

5.3CVSS0.00852EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/27 1:15 p.m.15 views

UBUNTU-CVE-2024-46816

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Stop amdgpudm initialize when link nums greater than maxlinks Why Coverity report OVERRUN warning. There are only maxlinks elements within dc-links. link count could up to AMDGPUDMMAXDISPLAYINDEX 31. How Make sur...

7.8CVSS6.2AI score0.00265EPSS
SaveExploits0References27
CNNVD
CNNVD
added 2024/09/27 12:00 a.m.9 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to check if the number of streams exceeds a limit during initialization...

5.5CVSS6.3AI score0.00263EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2024/09/27 12:00 a.m.3 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not ensuring that the maximum number of links is not exceeded...

5.5CVSS6.6AI score0.00265EPSS
SaveExploits0References5
OSV
OSV
added 2024/09/26 6:04 p.m.21 views

CLSA-2024-1727373881 gnutls: Fix of CVE-2024-28835

CVE-2024-28835: fix crash when verifying a certificate chain with more than 16 certificates...

5CVSS6.4AI score0.00389EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/26 10:15 a.m.8 views

CVE-2024-9199

Rate limit vulnerability in Clibo Manager v1.1.9.2 that could allow an attacker to send a large number of emails to the victim in a short time, affecting availability and leading to a denial of service DoS...

7.5CVSS5.8AI score0.00322EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/26 10:15 a.m.35 views

CVE-2024-9199

Rate limit vulnerability in Clibo Manager v1.1.9.2 that could allow an attacker to send a large number of emails to the victim in a short time, affecting availability and leading to a denial of service DoS...

7.5CVSS0.00322EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/09/26 9:50 a.m.20 views

CVE-2024-9199 Rate limit vulnerability in Clibo Manager

Rate limit vulnerability in Clibo Manager v1.1.9.2 that could allow an attacker to send a large number of emails to the victim in a short time, affecting availability and leading to a denial of service DoS...

5.8CVSS6.8AI score0.00322EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/26 9:50 a.m.57 views

CVE-2024-9199

CVE-2024-9199 affects Clibo Manager v1.1.9.2. The issue is a rate-limit vulnerability in the email-sending flow, which could allow an attacker to flood recipients with emails in a short period and cause a DoS by impacting availability. Public sources consistently reference the vulnerability in Cl...

7.5CVSS5.9AI score0.00322EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/09/26 9:50 a.m.42 views

CVE-2024-9199 Rate limit vulnerability in Clibo Manager

Rate limit vulnerability in Clibo Manager v1.1.9.2 that could allow an attacker to send a large number of emails to the victim in a short time, affecting availability and leading to a denial of service DoS...

5.8CVSS0.00322EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/09/26 12:00 a.m.13 views

PT-2024-39483 · Unknown · Clibo Manager

Name of the Vulnerable Software and Affected Versions: Clibo Manager version 1.1.9.2 Description: The issue is related to a rate limit vulnerability that could allow an attacker to send a large number of emails to the victim in a short time, affecting availability and leading to a denial of servi...

7.5CVSS7.1AI score0.00322EPSS
SaveExploits0References5
Citrix
Citrix
added 2024/09/26 12:00 a.m.12 views

How to limit NetScaler Management access

With this document you may limit the NetScaler Management access to certain IP address/es...

7AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2024/09/25 7:02 p.m.48 views

Security Bulletin: Vulnerability in RabbitMQ Java Client affects IBM watsonx.data

Summary RabbitMQ Java Client is vulnerable to a denial of service, caused by no message size limit in maxBodyLebgth. By sending a specially crafted message, a remote attacker could exploit this vulnerability to cause a memory overflow, and results in a denial of service condition. This can affect...

7.5CVSS7.8AI score0.01061EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder