Lucene search
K

20 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2020-36568

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

7.5CVSS7.2AI score0.01092EPSS
Exploits1References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.0 views

Malicious code in glisten-revel-ldd699-project (npm)

The package glisten-revel-ldd699-project was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-21574 Malicious code in glisten-revel-ldd699-project (npm)

The package glisten-revel-ldd699-project was found to contain malicious code...

7.2AI score
Exploits0
Veracode
Veracode
added 2023/01/11 6:43 a.m.12 views

Denial Of Service (DoS)

github.com/revel/revel is vulnerable to denial of service attacks. Unsanitized input in the query parser in bindSlice function allows remote attackers to cause resource exhaustion via unbounded memory allocation resulting in denial of service...

7.5CVSS7AI score0.01092EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2022/12/28 12:30 a.m.17 views

GHSA-HGGR-P7V6-73P5 revel is vulnerable to resource exhaustion

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

6.4CVSS7.3AI score0.01092EPSS
Exploits1References6
Github Security Blog
Github Security Blog
added 2022/12/28 12:30 a.m.18 views

revel is vulnerable to resource exhaustion

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

7.5CVSS7.2AI score0.01092EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2022/12/27 10:15 p.m.1 views

DEBIAN-CVE-2020-36568

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

7.5CVSS7.4AI score0.01092EPSS
Exploits1References1
NVD
NVD
added 2022/12/27 10:15 p.m.11 views

CVE-2020-36568

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

7.5CVSS0.01092EPSS
Exploits1References4
Prion
Prion
added 2022/12/27 10:15 p.m.10 views

Memory corruption

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

5CVSS7.4AI score0.01092EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/12/27 10:15 p.m.0 views

UBUNTU-CVE-2020-36568

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

7.5CVSS7.1AI score0.01092EPSS
Exploits1References6
CVE
CVE
added 2022/12/27 9:12 p.m.75 views

CVE-2020-36568

CVE-2020-36568 affects github.com/revel/revel, where the query parser accepts unsanitized input. The issue can trigger resource exhaustion via memory allocation, potentially impacting availability. Public details indicate exploitation would require network access and no user interaction. The vuln...

7.5CVSS7.4AI score0.01092EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2022/12/27 9:12 p.m.11 views

CVE-2020-36568 Resource exhaustion in github.com/revel/revel

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

7.4AI score0.01092EPSS
Exploits1References4
Debian CVE
Debian CVE
added 2022/12/27 9:12 p.m.12 views

CVE-2020-36568

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...

7.5CVSS7.4AI score0.01092EPSS
Exploits1
CNNVD
CNNVD
added 2022/12/27 12:0 a.m.1 views

Revel Framework 安全漏洞

Revel Framework is Revel Framework open source a high-productivity, full-stack web framework for the Go language. A security vulnerability exists in versions prior to Revel Framework v1.0.0. An attacker exploited the vulnerability to cause resource exhaustion via memory allocation...

7.5CVSS7.3AI score0.01092EPSS
Exploits1References5
OSV
OSV
added 2021/04/14 8:4 p.m.21 views

GO-2020-0003 Resource exhaustion in github.com/revel/revel

An attacker can cause an application that accepts slice parameters https://revel.github.io/manual/parameters.htmlslices to allocate large amounts of memory and crash through manipulating the request query sent to the application...

7.5CVSS7.4AI score0.01092EPSS
Exploits1References3
Veracode
Veracode
added 2019/03/11 3:49 a.m.8 views

Denial Of Service (DoS)

github.com/revel/revel is vulnerable to denial of service DoS. The vulnerability exists because it does not validate the size of maxIndex, allowing an attacker to use an illegal index to crash the application...

6.4AI score
Exploits0
CVE
CVE
added 2018/08/13 10:0 p.m.50 views

CVE-2018-14781

CVE-2018-14781 affects Medtronic MiniMed MMT-500/MMT-503 Remote Controllers and related pumps (e.g., MMT-508, MMT-511/512/712, MMT-515/723, MMT-522/723 REAL-TIME, MMT-551/751, etc.). Root cause: Authentication Bypass by Capture-replay when paired with a remote controller with non-default easy bol...

5.3CVSS5.2AI score0.00132EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2018/08/13 9:48 p.m.13 views

Default configuration

Medtronic MMT 508 MiniMed insulin pump, 522 / MMT - 722 Paradigm REAL-TIME, 523 / MMT - 723 Paradigm Revel, 523K / MMT - 723K Paradigm Revel, and 551 / MMT - 751 MiniMed 530G The models identified above, when paired with a remote controller and having the "easy bolus" and "remote bolus" options...

2.9CVSS5.2AI score0.00132EPSS
Exploits0References2
Veracode
Veracode
added 2017/04/28 7:9 a.m.6 views

Session Injection

github.com/revel/revel is vulnerable to session injection. A malicious user can pass a session key or value containing a null byte, causing it to be parsed as a separate key/value pair. This can cause the library to overwrite existing key/value pairs...

7.1AI score
Exploits0
NVD
NVD
added 2014/10/19 10:55 a.m.11 views

CVE-2014-7421

The Revel in the Rideau Lakes aka com.mytoursapp.android.app326 application 1.0.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00099EPSS
Exploits0References3
Rows per page
Query Builder