Lucene search
+L

1213 matches found

IBM Security Bulletins
IBM Security Bulletins
•added 2021/06/18 8:19 p.m.•40 views

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2021-29754)

Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities, Maximo Adapter for Primavera,...

8.8CVSS1.1AI score0.00744EPSS
SaveExploits0Affected Software14
Schneier on Security
Schneier on Security
•added 2021/06/17 6:51 p.m.•58 views

Intentional Flaw in GPRS Encryption Algorithm GEA-1

General Packet Radio Service GPRS is a mobile data standard that was widely used in the early 2000s. The first encryption algorithm for that standard was GEA-1, a stream cipher built on three linear-feedback shift registers and a non-linear combining function. Although the algorithm has a 64-bit...

1AI score
SaveExploits0
osv_ghsa
osv_ghsa
•added 2021/06/07 10:11 p.m.•40 views

GHSA-Q8PJ-2VQX-8GGC Denial of service in css-what

The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input...

7.5CVSS7.5AI score0.02036EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2021/05/31 5:27 p.m.•35 views

CVE-2021-33587

A flaw was found in nodejs-css-what. The css-what package for Node.js does not ensure that attribute parsing has a Linear Time Complexity relative to the size of the input. The highest threat from this vulnerability is to system availability...

7.5CVSS7.3AI score0.02036EPSS
SaveExploits0References3
Veracode
Veracode
•added 2021/05/31 2:49 a.m.•37 views

Denial Of Service (DoS)

css-what is vulnerable to denial of service. The vulnerability exists due to the system not ensuring that the attribute handler has Linear Time Complexity LTC relative to the size of the input causing the system to overload on the resource and crashing the system...

7.5CVSS2.2AI score0.02036EPSS
SaveExploits0References5Affected Software2
osv_cve
osv_cve
•added 2021/05/28 8:15 p.m.•34 views

CVE-2021-33587

The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input...

7.5CVSS7.1AI score0.02036EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2021/05/28 8:15 p.m.•8 views

DEBIAN-CVE-2021-33587

The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input...

7.5CVSS7.6AI score0.02036EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/05/28 8:15 p.m.•14 views

CVE-2021-33587

The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input...

7.5CVSS7.1AI score0.02036EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2021/05/28 8:15 p.m.•19 views

UBUNTU-CVE-2021-33587

The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input...

7.5CVSS7.2AI score0.02036EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2021/05/28 8:15 p.m.•46 views

CVE-2021-33587

The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input...

7.5CVSS7.1AI score0.02036EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2021/05/28 12:00 a.m.•66 views

CVE-2021-33587

The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input...

7.8AI score0.02036EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2021/05/28 12:00 a.m.•68 views

CVE-2021-33587

The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input...

7.5CVSS7.7AI score0.02036EPSS
SaveExploits0
CNNVD
CNNVD
•added 2021/05/28 12:00 a.m.•19 views

CSS-What security vulnerability

css-what is a CSS selector parser. A security vulnerability exists in css-what versions prior to 5.0.1, which stems from the fact that the css-what package does not ensure that property parsing has linear time complexity with respect to input size. No details of the vulnerability are available at...

7.5CVSS7.2AI score0.02036EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/28 12:00 a.m.•5 views

CVE-2021-33587: Undefined Security Weakness

The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input...

7.5CVSS5.8AI score0.02036EPSS
SaveExploits0References1
Mend
Mend
•added 2021/05/28 12:00 a.m.•18 views

CVE-2021-33587

The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input...

8.7CVSS0.02036EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2021/04/28 2:15 p.m.•17 views

CVE-2021-3508

A flaw was found in PDFResurrect in version 0.22b. There is an infinite loop in getxreflinearskipped in pdf.c via a crafted PDF file...

5.5CVSS6AI score0.00693EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/04/28 12:00 a.m.•2 views

PT-2021-20824

Name of the Vulnerable Software and Affected Versions: PDFResurrect version 0.22b Description: A flaw was found in PDFResurrect, where an infinite loop can occur in the get xref linear skipped function in pdf.c when processing a crafted PDF file. Recommendations: For PDFResurrect version 0.22b, a...

5.5CVSS0.00693EPSS
SaveExploits1References17
IBM Security Bulletins
IBM Security Bulletins
•added 2021/04/20 12:08 p.m.•32 views

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2020-5258)

Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities, Maximo Adapter for Primavera,...

7.7CVSS0.7AI score0.04023EPSS
SaveExploits1Affected Software14
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•43 views

SUSE: Security Advisory (SUSE-SU-2017:2873-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.3AI score0.0156EPSS
SaveExploits2References12
OpenVAS
OpenVAS
•added 2021/04/06 12:00 a.m.•56 views

Fedora: Security Advisory for mediaconch (FEDORA-2021-3b67623d93)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.02868EPSS
SaveExploits1References2
Rows per page
Query Builder