Lucene search
+L

10701 matches found

NVD
NVD
added 2017/03/12 1:59 a.m.39 views

CVE-2017-6819

In WordPress before 4.7.3, there is cross-site request forgery CSRF in Press This wp-admin/includes/class-wp-press-this.php, leading to excessive use of server resources. The CSRF can trigger an outbound HTTP request for a large file that is then parsed by Press This...

6.5CVSS6.4AI score0.02197EPSS
SaveExploits1References8
OSV
OSV
added 2017/03/12 1:59 a.m.27 views

CVE-2017-6819

In WordPress before 4.7.3, there is cross-site request forgery CSRF in Press This wp-admin/includes/class-wp-press-this.php, leading to excessive use of server resources. The CSRF can trigger an outbound HTTP request for a large file that is then parsed by Press This...

6.5CVSS6.8AI score
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2017/03/12 1:59 a.m.38 views

CVE-2017-6819

In WordPress before 4.7.3, there is cross-site request forgery CSRF in Press This wp-admin/includes/class-wp-press-this.php, leading to excessive use of server resources. The CSRF can trigger an outbound HTTP request for a large file that is then parsed by Press This...

6.5CVSS6.5AI score0.02197EPSS
SaveExploits1References6
Prion
Prion
added 2017/03/12 1:59 a.m.28 views

Cross site request forgery (csrf)

In WordPress before 4.7.3, there is cross-site request forgery CSRF in Press This wp-admin/includes/class-wp-press-this.php, leading to excessive use of server resources. The CSRF can trigger an outbound HTTP request for a large file that is then parsed by Press This...

4.3CVSS6.4AI score0.02197EPSS
SaveExploits1References8Affected Software1
Cvelist
Cvelist
added 2017/03/12 1:00 a.m.44 views

CVE-2017-6819

In WordPress before 4.7.3, there is cross-site request forgery CSRF in Press This wp-admin/includes/class-wp-press-this.php, leading to excessive use of server resources. The CSRF can trigger an outbound HTTP request for a large file that is then parsed by Press This...

6.4AI score0.02197EPSS
SaveExploits1References8
CVE
CVE
added 2017/03/12 1:00 a.m.149 views

CVE-2017-6819

CVE-2017-6819 affects WordPress prior to 4.7.3. A cross-site request forgery (CSRF) in the Press This feature (wp-admin/includes/class-wp-press-this.php) can trigger an outbound HTTP request to a large file, which is then parsed by Press This, causing excessive consumption of server resources. Pu...

6.5CVSS6.3AI score0.02197EPSS
SaveExploits1References8Affected Software1
Debian CVE
Debian CVE
added 2017/03/12 1:00 a.m.46 views

CVE-2017-6819

In WordPress before 4.7.3, there is cross-site request forgery CSRF in Press This wp-admin/includes/class-wp-press-this.php, leading to excessive use of server resources. The CSRF can trigger an outbound HTTP request for a large file that is then parsed by Press This...

6.5CVSS1AI score0.02197EPSS
SaveExploits1
OSV
OSV
added 2017/03/10 2:59 a.m.8 views

DEBIAN-CVE-2017-6313

Integer underflow in the loadresources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service out-of-bounds read and program crash via a crafted image entry size in an ICO file...

7.1CVSS7.6AI score0.01935EPSS
SaveExploits1References1
OSV
OSV
added 2017/03/09 12:00 a.m.13 views

UBUNTU-CVE-2017-6313

Integer underflow in the loadresources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service out-of-bounds read and program crash via a crafted image entry size in an ICO file...

7.1CVSS6.7AI score0.01935EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2017/03/07 7:06 p.m.28 views

tomcat: unrestricted access to global resources

It was discovered that it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not...

7.5CVSS7.3AI score0.0807EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2017/03/07 7:06 p.m.11 views

tomcat: unrestricted access to global resources

It was discovered that it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not...

7.5CVSS7.3AI score0.0807EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2017/03/07 7:05 p.m.8 views

tomcat: unrestricted access to global resources

It was discovered that it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not...

7.5CVSS7.3AI score0.0807EPSS
SaveExploits0References7
OSV
OSV
added 2017/03/07 5:59 p.m.9 views

CVE-2016-9740

IBM QRadar 7.2 could allow a remote attacker to consume all resources on the server due to not properly restricting the size or amount of resources requested by an actor. IBM Reference : 1999556...

7.5CVSS7.4AI score0.01389EPSS
SaveExploits0References2
NVD
NVD
added 2017/03/07 5:59 p.m.26 views

CVE-2016-9724

IBM QRadar 7.2 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference : 1999537...

8.1CVSS8.2AI score0.01223EPSS
SaveExploits0References1
Prion
Prion
added 2017/03/07 5:59 p.m.26 views

Code injection

IBM QRadar 7.2 could allow a remote attacker to consume all resources on the server due to not properly restricting the size or amount of resources requested by an actor. IBM Reference : 1999556...

7.8CVSS6.9AI score0.01389EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2017/03/07 5:59 p.m.26 views

Xxe

IBM QRadar 7.2 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference : 1999537...

7.5CVSS7.3AI score0.01223EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2017/03/07 5:00 p.m.51 views

CVE-2016-9724

IBM QRadar 7.2 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference : 1999537...

8.2AI score0.01223EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2017/03/07 12:00 a.m.41 views

Wireshark Multiple DoS Vulnerabilities (Mar 2017) - Windows

Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.8CVSS8.4AI score0.02949EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2017/03/07 12:00 a.m.27 views

WordPress Multiple Vulnerabilities (Mar 2017) - Windows

WordPress is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescripti...

6.5CVSS5.8AI score0.03134EPSS
SaveExploits2References1
FreeBSD
FreeBSD
added 2017/03/07 12:00 a.m.20 views

wordpress -- multiple vulnerabilities

WordPress versions 4.7.2 and earlier are affected by six security issues. Cross-site scripting XSS via media file metadata. Control characters can trick redirect URL validation. Unintended files can be deleted by administrators using the plugin deletion functionality. Cross-site scripting XSS via...

2.4AI score
SaveExploits0References2
Rows per page
Query Builder