Lucene search
+L

2974 matches found

CNNVD
CNNVD
•added 2024/10/18 12:00 a.m.•17 views

ACON 输入验证错误漏洞

ACON is an Adaptive Correlation Optimization Network package from the Torin Etheridge Personal Developer. An input validation error vulnerability exists in versions of ACON prior to 1.0.0, which stems from a vulnerability that allows an attacker to submit malicious input data to bypass input...

9.3CVSS7.7AI score0.00734EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2024/10/14 7:55 p.m.•37 views

CVE-2024-47831

A flaw was found in Next.js. In certain versions, a vulnerability in the image optimization feature allows for a potential Denial of Service DoS condition, which could lead to excessive CPU consumption. Neither the next.config.js file that is configured with images.unoptimized set to true or...

5.9CVSS6.5AI score0.00732EPSS
SaveExploits1References5
OSV
OSV
•added 2024/10/14 7:45 p.m.•6 views

GHSA-G77X-44XX-532M Denial of Service condition in Next.js image optimization

Impact The image optimization feature of Next.js contained a vulnerability which allowed for a potential Denial of Service DoS condition which could lead to excessive CPU consumption. Not affected: - The next.config.js file is configured with images.unoptimized set to true or images.loader set to...

8.2CVSS7.2AI score0.00732EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2024/10/14 7:45 p.m.•52 views

Denial of Service condition in Next.js image optimization

Impact The image optimization feature of Next.js contained a vulnerability which allowed for a potential Denial of Service DoS condition which could lead to excessive CPU consumption. Not affected: - The next.config.js file is configured with images.unoptimized set to true or images.loader set to...

7.5CVSS6.7AI score0.00732EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2024/10/14 6:15 p.m.•29 views

CVE-2024-47831

Next.js is a React Framework for the Web. Cersions on the 10.x, 11.x, 12.x, 13.x, and 14.x branches before version 14.2.7 contain a vulnerability in the image optimization feature which allows for a potential Denial of Service DoS condition which could lead to excessive CPU consumption. Neither t...

7.5CVSS0.00732EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/10/14 6:04 p.m.•26 views

CVE-2024-47831 Next.js image optimization has Denial of Service condition

Next.js is a React Framework for the Web. Cersions on the 10.x, 11.x, 12.x, 13.x, and 14.x branches before version 14.2.7 contain a vulnerability in the image optimization feature which allows for a potential Denial of Service DoS condition which could lead to excessive CPU consumption. Neither t...

5.9CVSS6.8AI score0.00732EPSS
SaveExploits1References2
Mend
Mend
•added 2024/10/14 6:04 p.m.•3 views

CVE-2024-47831

Next.js is a React Framework for the Web. Cersions on the 10.x, 11.x, 12.x, 13.x, and 14.x branches before version 14.2.7 contain a vulnerability in the image optimization feature which allows for a potential Denial of Service DoS condition which could lead to excessive CPU consumption. Neither t...

8.2CVSS0.00732EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/10/14 6:04 p.m.•52 views

CVE-2024-47831 Next.js image optimization has Denial of Service condition

Next.js is a React Framework for the Web. Cersions on the 10.x, 11.x, 12.x, 13.x, and 14.x branches before version 14.2.7 contain a vulnerability in the image optimization feature which allows for a potential Denial of Service DoS condition which could lead to excessive CPU consumption. Neither t...

5.9CVSS0.00732EPSS
SaveExploits1References2
OSV
OSV
•added 2024/10/14 6:04 p.m.•32 views

CVE-2024-47831 Next.js image optimization has Denial of Service condition

Next.js is a React Framework for the Web. Cersions on the 10.x, 11.x, 12.x, 13.x, and 14.x branches before version 14.2.7 contain a vulnerability in the image optimization feature which allows for a potential Denial of Service DoS condition which could lead to excessive CPU consumption. Neither t...

5.9CVSS6.6AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/10/14 12:00 a.m.•16 views

PT-2024-7169

Name of the Vulnerable Software and Affected Versions Next.js versions 10.x through 14.x before version 14.2.7 Description The issue is related to the image optimization feature in Next.js, which contains a vulnerability allowing for a potential Denial of Service DoS condition that could lead to...

7.5CVSS7.5AI score0.00732EPSS
SaveExploits1References17
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/14 12:00 a.m.•2 views

CVE-2024-47831: Uncontrolled Recursion

Next.js is a React Framework for the Web. Cersions on the 10.x, 11.x, 12.x, 13.x, and 14.x branches before version 14.2.7 contain a vulnerability in the image optimization feature which allows for a potential Denial of Service DoS condition which could lead to excessive CPU consumption. Neither t...

7.5CVSS6.6AI score0.00732EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/10/02 7:35 a.m.•52 views

CVE-2024-8800 RabbitLoader – Website Speed Optimization for improving Core Web Vital metrics with Cache, Image Optimization, and more <= 2.21.0 - Reflected Cross-Site Scripting

The RabbitLoader – Website Speed Optimization for improving Core Web Vital metrics with Cache, Image Optimization, and more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and...

6.1CVSS0.00386EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/10/02 7:35 a.m.•13 views

CVE-2024-8800 RabbitLoader – Website Speed Optimization for improving Core Web Vital metrics with Cache, Image Optimization, and more <= 2.21.0 - Reflected Cross-Site Scripting

The RabbitLoader – Website Speed Optimization for improving Core Web Vital metrics with Cache, Image Optimization, and more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and...

6.1CVSS6.1AI score0.00386EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/02 12:00 a.m.•3 views

CVE-2024-9344: Improper Neutralization of Input During Web Page Generation

The BerqWP – Automated All-In-One PageSpeed Optimization Plugin for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' parameter in all versions up to, and including, 2.1.1 due to insufficient input...

6.1CVSS6AI score0.00375EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/10/02 12:00 a.m.•19 views

The vulnerability of the Rockwell Automation Pavilion8 platform’s simulation, control, and optimization functions arises from an improper limitation on the path name to the restricted access catalog. This allows a malicious actor to execute arbitrary code.

The vulnerability of the Rockwell Automation Pavilion8 platform for simulation, control, and optimization is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

10CVSS5.9AI score0.00956EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2024/09/28 12:00 a.m.•43 views

openSUSE 15 Security Update : coredns (openSUSE-SU-2024:0319-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0319-1 advisory. Update to version 1.11.3: optimize the performance for high qps 6767 bump deps Fix zone parser error handling 6680 Add alternate option to forwar...

7.5CVSS7.8AI score0.03965EPSS
SaveExploits1References13
OSV
OSV
•added 2024/09/27 2:01 p.m.•45 views

OPENSUSE-SU-2024:0319-1 Security update for coredns

This update for coredns fixes the following issues: Update to version 1.11.3: optimize the performance for high qps 6767 bump deps Fix zone parser error handling 6680 Add alternate option to forward plugin 6681 fix: plugin/file: return error when parsing the file fails 6699 fix:documentation...

7.5CVSS9AI score0.03965EPSS
SaveExploits1References7
Veeam
Veeam
•added 2024/09/26 12:00 a.m.•48 views

Release Information for Veeam Backup for Nutanix AHV 6.1

This update has been superseded by Veeam Backup for Nutanix AHV 7.0, which was released alongside and supports only Veeam Backup & Replication 12.3. Requirements To upgrade to Veeam Backup for Nutanix AHV 6.1, download the installer below and run it on the Veeam Backup & Replication server that...

7AI score
SaveExploits0Affected Software1
Microsoft KB
Microsoft KB
•added 2024/09/26 12:00 a.m.•28 views

September 26, 2024—KB5043145 (OS Builds 22621.4249 and 22631.4249) Preview

None None...

5.3AI score
SaveExploits0
HackRead
HackRead
•added 2024/09/24 4:03 p.m.•28 views

Harnessing the Power of Cloud App Development and DevOps for Modern Businesses

Leverage Cloud App Development and DevOps to boost business agility, scalability, and security. Optimize operations, deploy faster, and…...

7.3AI score
SaveExploits0
Rows per page
Query Builder