20 matches found
Linux Distros Unpatched Vulnerability : CVE-2020-36568
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...
Malicious code in glisten-revel-ldd699-project (npm)
The package glisten-revel-ldd699-project was found to contain malicious code...
MAL-2025-21574 Malicious code in glisten-revel-ldd699-project (npm)
The package glisten-revel-ldd699-project was found to contain malicious code...
Denial Of Service (DoS)
github.com/revel/revel is vulnerable to denial of service attacks. Unsanitized input in the query parser in bindSlice function allows remote attackers to cause resource exhaustion via unbounded memory allocation resulting in denial of service...
GHSA-HGGR-P7V6-73P5 revel is vulnerable to resource exhaustion
Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...
revel is vulnerable to resource exhaustion
Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...
DEBIAN-CVE-2020-36568
Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...
CVE-2020-36568
Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...
Memory corruption
Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...
UBUNTU-CVE-2020-36568
Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...
CVE-2020-36568
CVE-2020-36568 affects github.com/revel/revel, where the query parser accepts unsanitized input. The issue can trigger resource exhaustion via memory allocation, potentially impacting availability. Public details indicate exploitation would require network access and no user interaction. The vuln...
CVE-2020-36568 Resource exhaustion in github.com/revel/revel
Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...
CVE-2020-36568
Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...
Revel Framework 安全漏洞
Revel Framework is Revel Framework open source a high-productivity, full-stack web framework for the Go language. A security vulnerability exists in versions prior to Revel Framework v1.0.0. An attacker exploited the vulnerability to cause resource exhaustion via memory allocation...
GO-2020-0003 Resource exhaustion in github.com/revel/revel
An attacker can cause an application that accepts slice parameters https://revel.github.io/manual/parameters.htmlslices to allocate large amounts of memory and crash through manipulating the request query sent to the application...
Denial Of Service (DoS)
github.com/revel/revel is vulnerable to denial of service DoS. The vulnerability exists because it does not validate the size of maxIndex, allowing an attacker to use an illegal index to crash the application...
CVE-2018-14781
CVE-2018-14781 affects Medtronic MiniMed MMT-500/MMT-503 Remote Controllers and related pumps (e.g., MMT-508, MMT-511/512/712, MMT-515/723, MMT-522/723 REAL-TIME, MMT-551/751, etc.). Root cause: Authentication Bypass by Capture-replay when paired with a remote controller with non-default easy bol...
Default configuration
Medtronic MMT 508 MiniMed insulin pump, 522 / MMT - 722 Paradigm REAL-TIME, 523 / MMT - 723 Paradigm Revel, 523K / MMT - 723K Paradigm Revel, and 551 / MMT - 751 MiniMed 530G The models identified above, when paired with a remote controller and having the "easy bolus" and "remote bolus" options...
Session Injection
github.com/revel/revel is vulnerable to session injection. A malicious user can pass a session key or value containing a null byte, causing it to be parsed as a separate key/value pair. This can cause the library to overwrite existing key/value pairs...
CVE-2014-7421
The Revel in the Rideau Lakes aka com.mytoursapp.android.app326 application 1.0.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...