4171 matches found
jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck
jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck loop indefinitely until...
jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck
jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck loop indefinitely until...
jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck
jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck loop indefinitely until...
netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data
A flaw was found in Netty's netty-codec due to size restrictions for decompressed data in the Bzip2Decoder. By sending a specially-crafted input, a remote attacker could cause a denial of service...
CVE-2021-24818
The WP Limits WordPress plugin through 1.0 does not have CSRF check when saving its settings, allowing attacker to make a logged in admin change them, which could make the blog unstable by setting low values...
Cross site request forgery (csrf)
The WP Limits WordPress plugin through 1.0 does not have CSRF check when saving its settings, allowing attacker to make a logged in admin change them, which could make the blog unstable by setting low values...
CVE-2021-24818
The CVE-2021-24818 entry maps to the WP Limits WordPress plugin (version
WordPress plugin cross-site request forgeing vulnerability
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WP Limits plugin is a WordPress open source application plugin. WordPress WP Limits plugin in version 1.0 and...
PT-2021-16310
Name of the Vulnerable Software and Affected Versions: WP Limits WordPress plugin versions 1.0 and earlier Description: The issue concerns a lack of CSRF check when saving settings, allowing an attacker to make a logged-in admin change them. This could potentially make the blog unstable by settin...
CVE-2021-24818: Cross-Site Request Forgery (CSRF)
The WP Limits WordPress plugin through 1.0 does not have CSRF check when saving its settings, allowing attacker to make a logged in admin change them, which could make the blog unstable by setting low values...
CVE-2021-37934
Due to insufficient server-side login-attempt limit enforcement, a vulnerability in /account/login in Huntflow Enterprise before 3.10.14 could allow an unauthenticated, remote user to perform multiple login attempts for brute-force password guessing...
Huntflow Enterprise: Permissions management and access control vulnerabilities
Huntflow Enterprise is a highly effective recruitment software from the Russian company Huntflow. Huntflow Enterprise suffers from a privilege-granting and access-control issue vulnerability that stems from an insufficient implementation of server-side login attempt restrictions; the vulnerabilit...
SUSE-SU-2021:3977-1 Security update for xen
This update for xen fixes the following issues: - CVE-2021-28701: Fixed race condition in XENMAPSPACEgranttable handling XSA-384 bsc1189632. - CVE-2021-28702: Fixed PCI devices with RMRRs not deassigned correctly XSA-386 bsc1191363. - CVE-2021-28704, CVE-2021-28707, CVE-2021-28708: Fixed PoD...
MasterCard Tokenisation Service GPay Mastercard Pair Exploitation
The vulnerability of the MasterCard Tokenisation Service MDES is related to the exploitation of a flaw in the GPay/MasterCard pair. Exploiting this vulnerability could allow an attacker to clone transactions and make payments beyond the limits of the Tap & Go service...
FreeRDP Buffer Overflow DoS
The vulnerability of the FreeRDP remote desktop protocol lies in the reading of data beyond the acceptable buffer limit. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...
Discourse < 2.7.11 Multiple Vulnerabilities
Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...
ShonyDanza - A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan
A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan. With ShonyDanza, you can: Obtain IPs based on search criteria Automatically exclude honeypots from the results based on your pre-configured thresholds Pre-configure all IP searches to filte...
Mozilla Firefox UI Layer Restriction
The vulnerability of the Mozilla Firefox browser is related to an improper limitation on the displayed layers of the user interface. Exploiting this vulnerability allows a malicious actor to display a JavaScript alert dialog box with arbitrary code, instead of the web page itself...
