Lucene search
+L

4332 matches found

Tenable Nessus
Tenable Nessus
•added 2022/03/28 12:00 a.m.•14 views

SonicWall NSv Next-Gen Virtual Firewall SSL VPN

Binary data sonicwallnsvsslvpnwebdetect.nbin...

7.3AI score
SaveExploits0References2
OSV
OSV
•added 2022/03/26 1:15 p.m.•3 views

DEBIAN-CVE-2022-27940

tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in getipv6next in common/get.c...

7.8CVSS7.9AI score0.01117EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/03/15 12:00 a.m.•1 views

PT-2022-36874

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash occurs in the grk::PacketIter::next pcrl function, which is called ...

5.7AI score
SaveExploits0References2
OSV
OSV
•added 2022/03/10 5:44 p.m.•12 views

CVE-2022-0433

A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the mapgetnextkey function of the BPF bloom filter. This flaw allows a local user to crash the system. This flaw affects Linux kernel versions prior to 5.17-rc1...

5.5CVSS7.9AI score0.00292EPSS
SaveExploits0References3
OSV
OSV
•added 2022/03/10 5:44 p.m.•23 views

UBUNTU-CVE-2022-0433

A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the mapgetnextkey function of the BPF bloom filter. This flaw allows a local user to crash the system. This flaw affects Linux kernel versions prior to 5.17-rc1...

5.5CVSS6.7AI score0.00292EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/03/10 12:00 a.m.•24 views

Linux kernel 代码问题漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. BPF in versions prior to Linux kernel 5.17-rc1 has a denial-of-service vulnerability that stems from the mapgetnextkey function forcing dereference of NULL pointer on the Linux kernel, which can be...

5.5CVSS8AI score0.00292EPSS
SaveExploits0References5
OSV
OSV
•added 2022/03/05 2:15 a.m.•12 views

CVE-2022-25465

Espruino 2v11 release was discovered to contain a stack buffer overflow via src/jsvar.c in jsvGetNextSibling...

7.8CVSS6.1AI score0.0073EPSS
SaveExploits1References1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•15 views

WordPress WooCommerce Next Order Coupon plugin <= 0.4.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WooCommerce Next Order Coupon plugin versions = 0.4.0. Solution No patched version available...

2.3AI score
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2022/02/22 8:15 p.m.•48 views

CVE-2022-23608

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions up to and including 2.11.1 when in a dialog set or forking scenario, a hash key shared by multiple UAC dialogs can...

9.8CVSS7.1AI score0.04022EPSS
SaveExploits0References4
vulnersOsv
vulnersOsv
•added 2022/02/17 5:19 p.m.•12 views

123-x-ed-eied (>=1.0.5, <=1.0.6), @0soft/use-nextjs-page-loader (>=0.0.23-alpha.5, <=0.0.25) +854 more potentially affected by CVE-2022-23646 via next (>=10.0.0, <=12.0.10)

next NPM version =10.0.0, =1.0.5, =0.0.23-alpha.5, =0.0.1, =1.1.7, =0.1.0, =1.1.1, =0.0.25, =1.0.39, =0.0.0, =1.0.0, =1.6.1 and more Source cves: CVE-2022-23646 Source advisory: OSV:GHSA-FMVM-X8MV-47MJ...

7.5CVSS7.4AI score0.01795EPSS
SaveExploits0
Snyk
Snyk
•added 2022/02/17 7:58 a.m.•4 views

Open Redirect

Overview github.com/gophish/gophish/controllers is a package middleware is responsible for the definition/​implementation of middleware functionality. Affected versions of this package are vulnerable to Open Redirect. The Open Redirect vulnerability exists in the next query parameter. The...

5.4CVSS6.8AI score0.00687EPSS
SaveExploits1References2
Snyk
Snyk
•added 2022/02/17 7:58 a.m.•4 views

Open Redirect

Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to Open Redirect. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parser.FormValue"next" to extract path and eventually redirect user to a relative...

5.4CVSS6.7AI score0.00687EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/02/17 12:00 a.m.•20 views

ZEIT Next.js 安全漏洞

ZEIT Next.js is an open source web application framework from ZEIT based on Vue.js, Node.js, Webpack and Babel.js. A security vulnerability exists in ZEIT Next.js that stems from the product's UI not restricting the display of critical information. An attacker could cause information leakage by...

7.5CVSS7.3AI score0.01795EPSS
SaveExploits0References4
Openbugbounty
Openbugbounty
•added 2022/02/03 8:51 p.m.•25 views

nextlevelmarketing.com.au Cross Site Scripting vulnerability OBB-2357357

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/01/28 11:09 p.m.•7 views

123-x-ed-eied (>=1.0.5, <=1.0.6), @andrydharmawan/component-react (>=1.1.1, <=1.1.4) +111 more potentially affected by CVE-2022-21721 via next (>=12.0.0, <=12.0.8)

next NPM version =12.0.0, =1.0.5, =1.1.1, =0.0.41, =2.0.2, =2.0.1, =0.0.5, =1.9.6, =1.0.2, =0.0.0-34, =0.0.15, =1.1.0 and more Source cves: CVE-2022-21721 Source advisory: OSV:GHSA-WR66-VRWM-5G5X...

7.5CVSS7.7AI score0.02153EPSS
SaveExploits0
Github Security Blog
Github Security Blog
•added 2022/01/28 11:09 p.m.•47 views

Denial of Service Vulnerability in next.js

Impact Vulnerable code could allow a bad actor to trigger a denial of service attack for anyone running a Next.js app at version = 12.0.0, and using i18n functionality. - Affected: All of the following must be true to be affected by this CVE - Next.js versions above v12.0.0 - Using next start or ...

7.5CVSS3.4AI score0.02153EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2022/01/28 11:09 p.m.•78 views

GHSA-WR66-VRWM-5G5X Denial of Service Vulnerability in next.js

Impact Vulnerable code could allow a bad actor to trigger a denial of service attack for anyone running a Next.js app at version = 12.0.0, and using i18n functionality. - Affected: All of the following must be true to be affected by this CVE - Next.js versions above v12.0.0 - Using next start or ...

5.9CVSS7AI score0.02153EPSS
SaveExploits0References5
Prion
Prion
•added 2022/01/28 10:15 p.m.•42 views

Code injection

Next.js is a React framework. Starting with version 12.0.0 and prior to version 12.0.9, vulnerable code could allow a bad actor to trigger a denial of service attack for anyone using i18n functionality. In order to be affected by this CVE, one must use next start or a custom server and the built-...

4.3CVSS7.6AI score0.02153EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2022/01/28 10:00 p.m.•1 views

CVE-2022-21721

Next.js is a React framework. Starting with version 12.0.0 and prior to version 12.0.9, vulnerable code could allow a bad actor to trigger a denial of service attack for anyone using i18n functionality. In order to be affected by this CVE, one must use next start or a custom server and the built-...

8.2CVSS0.02153EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2022/01/28 10:00 p.m.•92 views

CVE-2022-21721 DOS Vulnerability in next.js

Next.js is a React framework. Starting with version 12.0.0 and prior to version 12.0.9, vulnerable code could allow a bad actor to trigger a denial of service attack for anyone using i18n functionality. In order to be affected by this CVE, one must use next start or a custom server and the built-...

5.9CVSS7.7AI score0.02153EPSS
SaveExploits0References3
Rows per page
Query Builder