Lucene search
+L

18616 matches found

Snyk
Snyk
added 2023/01/10 10:43 p.m.7 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS by sending an invalid request to an exposed endpoint. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users. Unlike other...

7.5CVSS7AI score0.0274EPSS
SaveExploits0References2
Snyk
Snyk
added 2023/01/10 10:43 p.m.8 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS by sending an invalid request to an exposed endpoint. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users. Unlike other...

7.5CVSS7AI score0.0274EPSS
SaveExploits0References2
Snyk
Snyk
added 2023/01/10 10:43 p.m.10 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS by sending an invalid request to an exposed endpoint. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users. Unlike other...

7.5CVSS7AI score0.0274EPSS
SaveExploits0References2
Snyk
Snyk
added 2023/01/10 10:43 p.m.6 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS by sending an invalid request to an exposed endpoint. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users. Unlike other...

7.5CVSS7AI score0.0274EPSS
SaveExploits0References2
Snyk
Snyk
added 2023/01/10 10:43 p.m.9 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS by sending an invalid request to an exposed endpoint. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users. Unlike other...

7.5CVSS7AI score0.0274EPSS
SaveExploits0References2
Snyk
Snyk
added 2023/01/10 10:43 p.m.7 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS by sending an invalid request to an exposed endpoint. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users. Unlike other...

7.5CVSS7AI score0.0274EPSS
SaveExploits0References2
Snyk
Snyk
added 2023/01/10 10:43 p.m.3 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS by sending an invalid request to an exposed endpoint. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users. Unlike other...

7.5CVSS7AI score0.0274EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/01/10 10:15 p.m.8 views

CVE-2023-21525

Remote Procedure Call Runtime Denial of Service Vulnerability...

5.3CVSS6.8AI score0.01508EPSS
SaveExploits0References3Affected Software25
Veracode
Veracode
added 2023/01/10 5:50 a.m.20 views

Regular Expression Denial Of Service (ReDoS)

mootools-core is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability exists via the Slick.parse function in Slick.Parser.js, which does not properly handle user-injected string into a CSS selector at runtime, which allows remote attackers to cause denial of service...

7.5CVSS7AI score0.00644EPSS
SaveExploits1References2Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/10 4:42 a.m.6 views

Malicious code in evolve-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f91172e8ea3922e0774dbdd5e55592c05035e0ea441f8064c3e163dd81dcd85e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2023/01/10 4:42 a.m.13 views

MAL-2023-318 Malicious code in evolve-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f91172e8ea3922e0774dbdd5e55592c05035e0ea441f8064c3e163dd81dcd85e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
CVE
CVE
added 2023/01/10 12:00 a.m.148 views

CVE-2023-21525

Technical details for CVE-2023-21525 are not publicly provided in the supplied documents; no affected product/version/exploit information is available here. Monitor for updates from official advisories to obtain specifics and remediation guidance.

5.3CVSS5.6AI score0.01508EPSS
SaveExploits0References1Affected Software15
Kaspersky
Kaspersky
added 2023/01/10 12:00 a.m.142 views

KLA20158 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of...

9.1CVSS9.7AI score0.41806EPSS
SaveExploits3References63
IBM Security Bulletins
IBM Security Bulletins
added 2023/01/06 9:50 p.m.29 views

Security Bulletin: An issue was identified with IBM® Runtime Environment Java™ Technology Edition, Version 8 supplied by IBM MQ (CVE-2021-2163)

Summary An issue was identified with IBM® Runtime Environment Java™ Technology Edition, Versions 7 and 8 supplied by IBM MQ versions. The IBM® Runtime Environment Java™ Technology Edition, Version 8 is used for Java Client, JMS Client, AMQP, MQTT, Blockchain Bridge, Salesforce Bridge, Java AMS, M...

5.3CVSS5.4AI score0.03566EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/01/05 3:18 p.m.36 views

Security Bulletin: A vulnerability exists in the IBM® SDK Java™ Technology Edition affecting IBM Tivoli Network Manager (CVE-2021-35561).

Summary A vulnerability exists in IBM® SDK Java™ Technology Edition, Version 8, which is used by IBM Tivoli Network Manager IP Edition v4.2, which was disclosed in the Oracle October 2021 Critical Patch Update, but deferred until the release associated with the August 2022 Update. Vulnerability...

5.3CVSS5.6AI score0.06946EPSS
SaveExploits0Affected Software1
vulnersOsv
vulnersOsv
added 2023/01/04 12:00 p.m.3 views

askai (0.1.0), doh-client (3.1.2) +25 more potentially affected by CVE-2023-22466 via tokio (>=1.19.2, <=1.20.1)

tokio CARGO version =1.19.2, =2.3.0, =4.1.2, =1.4.0, =1.18.1, =0.2.0, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =0.16.1 and more Source cves: CVE-2023-22466 Source advisory: OSV:RUSTSEC-2023-0001...

5.4CVSS5.7AI score0.00569EPSS
SaveExploits0
OSV
OSV
added 2023/01/03 6:30 p.m.4 views

GHSA-V63Q-HGQC-QVPG MooTools Regular Expression Denial of Service

MooTools is a collection of JavaScript utilities for JavaScript developers. All known versions include a CSS selector parser that is vulnerable to Regular Expression Denial of Service ReDoS. An attack requires that an attacker can inject a string into a CSS selector at runtime, which is quite...

7.5CVSS7.1AI score0.00644EPSS
SaveExploits1References3
OSV
OSV
added 2023/01/03 5:15 p.m.76 views

UBUNTU-CVE-2021-32821

MooTools is a collection of JavaScript utilities for JavaScript developers. All known versions include a CSS selector parser that is vulnerable to Regular Expression Denial of Service ReDoS. An attack requires that an attacker can inject a string into a CSS selector at runtime, which is quite...

7.5CVSS7.1AI score0.00644EPSS
SaveExploits1References3
IBM Security Bulletins
IBM Security Bulletins
added 2023/01/03 8:05 a.m.39 views

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Rational Directory Server (Tivoli) & Rational Directory Administrator

Summary There are multiple vulnerabilities CVE-2021-2163, CVE-2021-35550, CVE-2021-41041, CVE-2021-35603, CVE-2022-21299, CVE-2022-21541, CVE-2022-21540, CVE-2021-35561, CVE-2022-21496, CVE-2022-21434, CVE-2022-21443, CVE-2022-21365, CVE-2022-21360, CVE-2022-21341, CVE-2022-21340, CVE-2022-21294,...

5.9CVSS7.2AI score0.08346EPSS
SaveExploits0Affected Software2
CNNVD
CNNVD
added 2023/01/03 12:00 a.m.14 views

mootools 资源管理错误漏洞

mootools is a library for web development with OOP support. A resource management error vulnerability exists in mootools, which stems from a CSS selector parser that includes a vulnerability to Regular Expression Denial of Service ReDoS attacks, which can be exploited to inject strings into CSS...

7.5CVSS7.3AI score0.00644EPSS
SaveExploits1References2
Rows per page
Query Builder