Lucene search
+L

444 matches found

Prion
Prion
added 2021/12/17 9:15 p.m.13 views

Buffer overflow

Buffer overflow in ajaxsoundstudio.com Pyo &lt and 1.03 in the Serverjackinit function. which allows attackers to conduct Denial of Service attacks by arbitrary constructing a overlong server name...

5CVSS7.6AI score0.01066EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2021/12/17 9:15 p.m.6 views

PYSEC-2021-890

Buffer overflow in ajaxsoundstudio.com Pyo &lt and 1.03 in the Serverjackinit function. which allows attackers to conduct Denial of Service attacks by arbitrary constructing a overlong server name...

7.5CVSS7.6AI score0.01066EPSS
SaveExploits1References1
OSV
OSV
added 2021/12/17 9:15 p.m.5 views

UBUNTU-CVE-2021-41498

Buffer overflow in ajaxsoundstudio.com Pyo &lt and 1.03 in the Serverjackinit function. which allows attackers to conduct Denial of Service attacks by arbitrary constructing a overlong server name...

7.5CVSS6AI score0.01066EPSS
SaveExploits1References4
OSV
OSV
added 2021/10/21 4:15 p.m.4 views

CVE-2021-28975

WP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the mstservers page, for a crafted serverhost, servername, or connectionparameter parameter...

6.1CVSS5.8AI score0.00866EPSS
SaveExploits1References2
OSV
OSV
added 2021/08/18 8:15 p.m.3 views

CVE-2021-34749

A vulnerability in Server Name Identification SNI request filtering of Cisco Web Security Appliance WSA, Cisco Firepower Threat Defense FTD, and the Snort detection engine could allow an unauthenticated, remote attacker to bypass filtering technology on an affected device and exfiltrate data from...

8.6CVSS6.3AI score0.01684EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/08/18 4:0 p.m.2 views

CVE-2021-34749

A vulnerability in Server Name Identification SNI request filtering of Cisco Web Security Appliance WSA, Cisco Firepower Threat Defense FTD, and the Snort detection engine could allow an unauthenticated, remote attacker to bypass filtering technology on an affected device and exfiltrate data from...

8.6CVSS6.8AI score0.01684EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2021/08/18 12:0 a.m.3 views

PT-2021-3823 · Cisco · Snort +2

Name of the Vulnerable Software and Affected Versions: Cisco Web Security Appliance affected versions not specified Cisco Firepower Threat Defense affected versions not specified Snort detection engine affected versions not specified Description: A vulnerability in Server Name Identification SNI...

8.6CVSS5.9AI score0.02367EPSS
SaveExploits0References42
CNNVD
CNNVD
added 2021/08/18 12:0 a.m.12 views

Cisco Firepower Threat Defense 信息泄露漏洞

Cisco Firepower Threat Defense FTD is a suite of unified software from Cisco that provides next-generation firewall services. An information disclosure vulnerability exists in several Cisco products that stems from insufficient filtering of the SSL handshake.A Server Name Identification SNI reque...

8.6CVSS6.5AI score0.01684EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2021/08/13 12:0 a.m.26 views

OpenSSL: Multiple Vulnerabilities (20080528) - Linux

OpenSSL is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

4.3CVSS6.4AI score0.05EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2021/08/13 12:0 a.m.24 views

OpenSSL: Multiple Vulnerabilities (20080528) - Windows

OpenSSL is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

4.3CVSS6.4AI score0.05EPSS
SaveExploits1References1
OSV
OSV
added 2021/08/07 6:15 p.m.1 views

ALPINE-CVE-2021-38165

Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in SNI data...

5.3CVSS7AI score0.0407EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/07 6:15 p.m.4 views

DEBIAN-CVE-2021-38165

Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in SNI data...

5.3CVSS6AI score0.0407EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/08/07 6:15 p.m.6 views

CVE-2021-38165

Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in SNI data...

5.3CVSS6.5AI score0.0407EPSS
SaveExploits0References18
OSV
OSV
added 2021/08/07 6:15 p.m.6 views

UBUNTU-CVE-2021-38165

Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in SNI data...

5.3CVSS7.2AI score0.0407EPSS
SaveExploits0References12
CNNVD
CNNVD
added 2021/08/07 12:0 a.m.4 views

Lynx 安全漏洞

Lynx is a text-only web browser that is used on terminals with text highlighting capabilities. A security vulnerability exists in Lynx that allows remote attackers to exploit the vulnerability to discover plaintext credentials as they may appear in SNI data...

5.3CVSS6.2AI score0.0407EPSS
SaveExploits0References16
OSV
OSV
added 2021/06/25 11:15 a.m.10 views

CVE-2021-35475

SAS Environment Manager 2.5 allows XSS through the Name field when creating/editing a server. The XSS will prompt when editing the Configuration Properties...

5.4CVSS5.8AI score0.00945EPSS
SaveExploits4References3
ATTACKERKB
ATTACKERKB
added 2021/06/25 11:15 a.m.2 views

CVE-2021-35475

SAS Environment Manager 2.5 allows XSS through the Name field when creating/editing a server. The XSS will prompt when editing the Configuration Properties...

5.4CVSS6.2AI score0.00945EPSS
SaveExploits4References4
OSV
OSV
added 2021/06/09 2:15 p.m.9 views

CVE-2021-27621

Information Disclosure vulnerability in UserAdmin application in SAP NetWeaver Application Server for Java, versions - 7.11,7.20,7.30,7.31,7.40 and 7.50 allows attackers to access restricted information by entering malicious server name...

4.9CVSS6.3AI score0.00613EPSS
SaveExploits0References2
Prion
Prion
added 2021/06/09 2:15 p.m.26 views

Information disclosure

Information Disclosure vulnerability in UserAdmin application in SAP NetWeaver Application Server for Java, versions - 7.11,7.20,7.30,7.31,7.40 and 7.50 allows attackers to access restricted information by entering malicious server name...

4CVSS4.9AI score0.00613EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2021/06/08 12:0 a.m.10 views

SAP Netweaver 信息泄露漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An information disclosure vulnerability exists in SAP NetWeaver AS JAVA, which can be exploited by an attacker t...

5.5CVSS5.6AI score0.00613EPSS
SaveExploits0References3
Rows per page
Query Builder