Lucene search
K

13 matches found

Redos
Redos
added 2025/11/12 12:0 a.m.2 views

ROS-20251112-05

Vulnerability in the t2.c component of the OpenJPEG image encoding and decoding library is related to an uncontrolled resource consumption. Exploitation of the vulnerability allows an attacker acting remotely cause a denial of service...

4.3CVSS4.9AI score0.00027EPSS
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-8158

Malware in sbrugna...

7.5CVSS7.6AI score0.00285EPSS
Exploits3References3
Vulnrichment
Vulnrichment
added 2025/01/11 2:24 a.m.7 views

CVE-2024-42168 HCL MyXalytics is affected by out-of-band resource load (HTTP) vulnerability

HCL MyXalytics is affected by out-of-band resource load HTTP vulnerability. An attacker can deploy a web server that returns malicious content, and then induce the application to retrieve and process that content...

8.9CVSS6.8AI score0.00376EPSS
Exploits0References1
CVE
CVE
added 2025/01/11 2:24 a.m.24 views

CVE-2024-42168

CVE-2024-42168 affects HCL DRYiCE/MyXalytics. The vulnerability is described as out-of-band resource load (HTTP), where an attacker can host a malicious web server and cause the application to fetch and process that content. Affected component/process is not explicitly detailed beyond the HTTP-ba...

9.4CVSS8.7AI score0.00376EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/01/11 2:24 a.m.13 views

CVE-2024-42168 HCL MyXalytics is affected by out-of-band resource load (HTTP) vulnerability

HCL MyXalytics is affected by out-of-band resource load HTTP vulnerability. An attacker can deploy a web server that returns malicious content, and then induce the application to retrieve and process that content...

8.9CVSS0.00376EPSS
Exploits0References1
NVD
NVD
added 2018/09/05 9:29 p.m.7 views

CVE-2018-16307

An "Out-of-band resource load" issue was discovered on Xiaomi MIWiFi Xiaomi55DD Version 2.8.50 devices. It is possible to induce the application to retrieve the contents of an arbitrary external URL and return those contents in its own response. If a domain name containing a random string is used...

7.5CVSS7.5AI score0.00285EPSS
Exploits3References1
Prion
Prion
added 2018/09/05 9:29 p.m.18 views

Design/Logic Flaw

An "Out-of-band resource load" issue was discovered on Xiaomi MIWiFi Xiaomi55DD Version 2.8.50 devices. It is possible to induce the application to retrieve the contents of an arbitrary external URL and return those contents in its own response. If a domain name containing a random string is used...

5CVSS7.5AI score0.00285EPSS
Exploits3References1Affected Software1
CVE
CVE
added 2018/09/05 9:0 p.m.51 views

CVE-2018-16307

The CVE-2018-16307 entry applies to Xiaomi MIWiFi Xiaomi_55DD Version 2.8.50. The vulnerability is an Out-of-band resource load in the router’s web interface: if an attacker sends a request with a Host header containing a domain, the device fetches that external URL and returns the fetched conten...

7.5CVSS7.4AI score0.00285EPSS
Exploits3References1Affected Software1
0day.today
0day.today
added 2018/09/03 12:0 a.m.72 views

Xiaomi MIWiFi Xiaomi_55DD 2.8.50 Out-Of-Band Resource Load Vulnerability

An out-of-band resource load issue was discovered on Xiaomi MIWiFi Xiaomi55DD version 2.8.50 devices. It is possible to induce the application to retrieve the contents of an arbitrary external URL and return those contents in its own response. If a domain name containing a random string is used i...

0.5AI score0.00285EPSS
Exploits3
Packet Storm
Packet Storm
added 2018/09/02 12:0 a.m.94 views

MIWiFi Xiaomi_55DD 2.8.50 Out-Of-Band Resource Load

CVE: CVE-2018-16307 Issue: Out-of-band resource load Product affected: MIWiFi Xiaomi55DD Version 2.8.50 Summary: An "Out-of-band resource load" issue was discovered on Xiaomi MIWiFi Xiaomi55DD Version 2.8.50 devices. It is possible to induce the application to retrieve the contents of an arbitrar...

7.7AI score0.00285EPSS
Exploits3
OSV
OSV
added 2016/03/06 2:59 a.m.1 views

CVE-2016-1636

The PendingScript::notifyFinished function in WebKit/Source/core/dom/PendingScript.cpp in Google Chrome before 49.0.2623.75 relies on memory-cache information about integrity-check occurrences instead of integrity-check successes, which allows remote attackers to bypass the Subresource Integrity...

9.8CVSS7.3AI score0.01448EPSS
Exploits0References12
Kitploit
Kitploit
added 2015/07/30 3:30 p.m.9 views

Burp Suite Professional v1.6.23 - The Leading Toolkit for Web Application Security Testing

Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application's attack surface, through to finding and exploiting security...

7.5AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2009/11/12 12:0 a.m.245 views

Mac OS X : Apple Safari < 4.0.4

The version of Apple Safari installed on the remote Mac OS X host is earlier than 4.0.4. As such, it is potentially affected by several issues : - Multiple use-after-free issues exist in libxml2, the most serious of which could lead to a program crash. CVE-2009-2414, CVE-2009-2416 - An issue in t...

6.8CVSS6.1AI score0.03879EPSS
Exploits4References8
Rows per page
Query Builder