Lucene search
+L

4578 matches found

OSV
OSV
added 2018/05/31 8:29 p.m.4 views

UBUNTU-CVE-2014-10064

The qs module before 1.0.0 does not have an option or default for specifying object depth and when parsing a string representing a deeply nested object will block the event loop for long periods of time. An attacker could leverage this to cause a temporary denial-of-service condition, for example...

7.5CVSS7.1AI score0.01286EPSS
SaveExploits0References3
NVD
NVD
added 2018/05/31 8:29 p.m.23 views

CVE-2014-10064

The qs module before 1.0.0 does not have an option or default for specifying object depth and when parsing a string representing a deeply nested object will block the event loop for long periods of time. An attacker could leverage this to cause a temporary denial-of-service condition, for example...

7.5CVSS7.9AI score0.01286EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/05/31 8:0 p.m.26 views

CVE-2014-10064

The qs module before 1.0.0 does not have an option or default for specifying object depth and when parsing a string representing a deeply nested object will block the event loop for long periods of time. An attacker could leverage this to cause a temporary denial-of-service condition, for example...

7.5AI score0.01286EPSS
SaveExploits0References1
The Coalfire Blog
The Coalfire Blog
added 2018/05/21 6:21 p.m.34 views

Pro Tip: The Right Way to Test JSON Parameters with Burp

Heres a Burp trick you might not know, which helped find this instance of command execution and lots of SQL injection in other applications. Despite PortSwigger claiming otherwise, Burp does not parse JSON very well, especially nested JSON parameters and values like you see below...

3.6AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2018/05/17 3:25 p.m.7 views

sensu: Password exposure in warn level log when configured for multiple rabbitMQ connections

Sensu's redaction function fails to handle the redaction of sensitive data in deeply nested data structures, resulting in sensitive data, such as passwords, being logged in clear-text...

9.8CVSS5.8AI score0.02359EPSS
SaveExploits0References5
CNVD
CNVD
added 2018/05/11 12:0 a.m.6 views

Pulse Secure Pulse Connect Secure Denial of Service Vulnerability

Pulse Connect Secure aka PCS, formerly known as Juniper Junos Pulse is a suite of SSL VPN solutions from Pulse Secure, a US-based company. A security vulnerability exists in Pulse Connect Secure versions 8.1.x prior to 8.1R14, 8.2.x prior to 8.2R11, and 8.3.x prior to 8.3R5, which stems from the...

5.5CVSS6.9AI score0.0099EPSS
SaveExploits0References1
OSV
OSV
added 2018/05/10 2:29 p.m.4 views

CVE-2018-9849

Pulse Secure Pulse Connect Secure 8.1.x before 8.1R14, 8.2.x before 8.2R11, and 8.3.x before 8.3R5 do not properly process nested XML entities, which allows remote attackers to cause a denial of service memory consumption and memory errors via a crafted XML document...

5.5CVSS7.3AI score0.0099EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2018/05/03 5:6 a.m.8 views

php: Out-of-bounds heap read on unserialize in finish_nested_data()

The objectcommon1 function in ext/standard/varunserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service buffer over-read and application crash via crafted serialized data that is mishandled in a finishnesteddata call...

7.5CVSS7.3AI score0.13314EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2018/05/03 5:6 a.m.18 views

php: buffer over-read in finish_nested_data function

The finishnesteddata function in ext/standard/varunserializer.re in PHP before 5.6.31, 7.0.x before 7.0.21, and 7.1.x before 7.1.7 is prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue can have an unspecified impact on the integrity of PHP...

9.8CVSS7.4AI score0.0694EPSS
SaveExploits0References4
CNVD
CNVD
added 2018/04/19 12:0 a.m.7 views

OpenMPT and libopenmpt Denial of Service Vulnerabilities

OpenMPT is an open source audio processing program . libopenmpt is a cross-platform C and C++ based audio playback library . A security vulnerability exists in the soundlib/Sndfx.cpp file in OpenMPT versions prior to 1.27.07.00 and libopenmpt versions prior to 0.3.8. A remote attacker can exploit...

6.5CVSS6.8AI score0.02155EPSS
SaveExploits0References1
NVD
NVD
added 2018/04/17 1:29 p.m.18 views

CVE-2017-18102

The wiki markup component of atlassian-renderer from version 8.0.0 before version 8.0.22 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in nested wiki markup...

5.4CVSS5.2AI score0.00921EPSS
SaveExploits0References2
OSV
OSV
added 2018/04/17 1:29 p.m.4 views

CVE-2017-18102

The wiki markup component of atlassian-renderer from version 8.0.0 before version 8.0.22 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in nested wiki markup...

5.4CVSS5.4AI score0.00921EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2018/04/11 5:45 p.m.7 views

sensu: Password exposure in warn level log when configured for multiple rabbitMQ connections

Sensu's redaction function fails to handle the redaction of sensitive data in deeply nested data structures, resulting in sensitive data, such as passwords, being logged in clear-text...

9.8CVSS5.8AI score0.02359EPSS
SaveExploits0References5
NVD
NVD
added 2018/04/11 5:29 a.m.16 views

CVE-2018-10017

soundlib/Sndfx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service out-of-bounds read via an IT or MO3 file with many nested pattern loops...

6.5CVSS6.4AI score0.02155EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2018/04/11 5:0 a.m.43 views

CVE-2018-10017

soundlib/Sndfx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service out-of-bounds read via an IT or MO3 file with many nested pattern loops...

6.5CVSS7.3AI score0.02155EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2018/04/10 3:23 p.m.7 views

Kernel: kvm: nVMX: L2 guest could access hardware(L0) CR8 register

Linux kernel built with the KVM visualization support CONFIGKVM, with nested visualization nVMX feature enabled nested=1, is vulnerable to a crash due to disabled external interrupts. As L2 guest could access r/w hardware CR8 register of the hostL0. In a nested visualization setup, L2 guest user...

7.1CVSS7.2AI score0.00512EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2018/04/10 9:1 a.m.6 views

Kernel: kvm: nVMX: L2 guest could access hardware(L0) CR8 register

Linux kernel built with the KVM visualization support CONFIGKVM, with nested visualization nVMX feature enabled nested=1, is vulnerable to a crash due to disabled external interrupts. As L2 guest could access r/w hardware CR8 register of the hostL0. In a nested visualization setup, L2 guest user...

7.1CVSS7.2AI score0.00512EPSS
SaveExploits0References4
Atlassian
Atlassian
added 2018/04/10 4:25 a.m.591 views

XSS in various types of nested wiki markup - CVE-2017-18102

The wiki markup component of atlassian-renderer from version 8.0.0 before version 8.0.22 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in nested wiki markup...

5.4CVSS4.1AI score0.00921EPSS
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2018/04/10 3:55 a.m.645 views

XSS in various types of nested wiki markup - CVE-2017-18102

The bundled version of atlassian-renderer in Atlassian JIRA before version 7.7.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in nested wiki markup. For more information see https://jira.atlassian.com/browse/RNDR-153 currently...

5.4CVSS3.7AI score0.00921EPSS
SaveExploits0Affected Software1
Oracle linux
Oracle linux
added 2018/04/05 12:0 a.m.48 views

kubernetes security update

1.9.1-2.1.5 - Production built 1.9.1-2.1.5 - Fix the upgrade version check - Remove w/a from Orabug 27125915 1.9.1-2.1.4.dev - Make sure worker node upgrade properly - Orabug 27649898 1.9.1-2.1.3.dev - Ensure that the runtime mounts RO volumes read-only CVE-2017-1002102 - Update Dashboard version...

9.6CVSS7.6AI score0.11505EPSS
SaveExploits2
Rows per page
Query Builder