CVE-2023-44388 Malicious requests can fill up the log files resulting in a deinal of service in Discourse

Discourse is an open source platform for community discussion. A malicious request can cause production log files to quickly fill up and thus result in the server running out of disk space. This problem has been patched in the 3.1.1 stable and 3.2.0.beta2 versions of Discourse. It is possible to...

CVE-2023-45641

Cross-Site Request Forgery CSRF vulnerability in Caret Inc. Caret Country Access Limit plugin = 1.0.2 versions...

CVE-2023-45641

Cross-Site Request Forgery CSRF vulnerability in Caret Inc. Caret Country Access Limit plugin = 1.0.2 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Caret Inc. Caret Country Access Limit plugin = 1.0.2 versions...

CVE-2023-45641 WordPress Caret Country Access Limit Plugin <= 1.0.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Caret Inc. Caret Country Access Limit plugin = 1.0.2 versions...

CVE-2023-45641

CVE-2023-45641 affects the Caret Country Access Limit WordPress plugin (

CVE-2023-45606

Cross-Site Request Forgery CSRF vulnerability in Lasso Simple URLs plugin = 120 versions...

PT-2023-6442 · Nextcloud +2 · Nextcloud +2

Name of the Vulnerable Software and Affected Versions: Nextcloud versions prior to 25.0.11 Nextcloud versions prior to 26.0.6 Nextcloud versions prior to 27.1.0 Description: The issue is related to the use of Memcached as memcache.distributed in Nextcloud, which can cause the rate limiting on the...

WordPress Plugin Caret Country Access Limit Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

PT-2023-29618 · Unknown · Caret Country Access Limit

Name of the Vulnerable Software and Affected Versions: Caret Country Access Limit plugin versions prior to 1.0.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to perform unintended actions on a web application...

PT-2023-29222 · Nginx +1 · Nginx +1

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 3.1.1 stable and 3.2.0.beta2 Description: Discourse is an open source platform for community discussion. A malicious request can cause production log files to quickly fill up and thus result in the server running o...

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2023-2975)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

bind: Fix of CVE-2023-3341

CVE-2023-3341: Limit iscccccfromwire recursion depth...

CLSA-2023-1697135570 bind: Fix of CVE-2023-3341

CVE-2023-3341: Limit iscccccfromwire recursion depth...

CLSA-2023-1697134618 bind: Fix of CVE-2023-3341

CVE-2023-3341: Limit iscccccfromwire recursion depth...

WordPress Caret Country Access Limit Plugin <= 1.0.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Caret Country Access Limit Type Plugin Vulnerable versions = 1.0.2 Fixed in 1.0.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-45641 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID eb3f86ef6148 Credits Prasanna...

AZL-33330 CVE-2023-39325 affecting package packer for versions less than 1.8.7-2

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...

AZL-34747 CVE-2023-39325 affecting package golang for versions less than 1.20.7-2

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...

AZL-34590 CVE-2023-39325 affecting package cf-cli for versions less than 8.7.3-2

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...

AZL-39895 CVE-2023-39325 affecting package git-lfs for versions less than 3.5.1-1

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...