Lucene search
K

1026 matches found

Openbugbounty
Openbugbounty
added 2018/07/17 5:8 p.m.7 views

jfv-weimar.de XSS vulnerability

Open Bug Bounty ID: OBB-648983 Description| Value ---|--- Affected Website:| jfv-weimar.de Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

0.1AI score
Exploits0
CNVD
CNVD
added 2018/06/29 12:0 a.m.1 views

tiny-http directory traversal vulnerability

tiny-http is an http server. A directory traversal vulnerability exists in tiny-http. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

7.5CVSS7.6AI score0.00533EPSS
Exploits1References1
Veracode
Veracode
added 2018/06/07 3:26 p.m.12 views

Directory Traversal

tiny-http is vulnerable to directory traversal attacks. This is possible by requesting a url such as /..%2f..%2fetc/passwd to get sensitive information...

7.5CVSS7.3AI score0.00533EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2018/06/07 2:29 a.m.1 views

CVE-2017-16097

tiny-http is a simple http server. tiny-http is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

7.5CVSS5.8AI score0.00533EPSS
Exploits1References2
NVD
NVD
added 2018/06/07 2:29 a.m.9 views

CVE-2017-16097

tiny-http is a simple http server. tiny-http is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

7.5CVSS7.5AI score0.00533EPSS
Exploits1References2
CVE
CVE
added 2018/06/07 2:0 a.m.45 views

CVE-2017-16097

CVE-2017-16097 concerns the tiny-http library, a simple HTTP server. The accompanying advisories describe a directory traversal vulnerability where crafted URLs containing relative paths (e.g., ../) allow access to files outside the intended root. Affected versions resolve relative file paths imp...

7.5CVSS7.4AI score0.00533EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/05/11 12:0 a.m.2 views

The vulnerability of the FTP server Tiny FTP Daemon, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the FTP server Tiny FTP Daemon arises due to buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures or execute arbitrary code...

10CVSS6.3AI score0.0073EPSS
Exploits0References3Affected Software1
Fedora
Fedora
added 2018/05/09 9:27 p.m.18 views

[SECURITY] Fedora 28 Update: knot-resolver-2.3.0-1.fc28

The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as...

7.5CVSS2.6AI score0.00499EPSS
Exploits0
Openbugbounty
Openbugbounty
added 2018/04/01 7:41 p.m.10 views

tiny-stuff.com XSS vulnerability

Open Bug Bounty ID: OBB-595262 Description| Value ---|--- Affected Website:| tiny-stuff.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.2AI score
Exploits0
CNVD
CNVD
added 2018/03/28 12:0 a.m.0 views

Tiny FTP Daemon Buffer Error Vulnerability

Tiny FTP Daemon is an FTP File Transfer Protocol server. A buffer overflow vulnerability exists in Tiny FTP Daemon version 0.52d. An attacker could exploit this vulnerability to cause a denial of service or execute arbitrary code...

10CVSS7.7AI score0.0073EPSS
Exploits0References1
NVD
NVD
added 2018/03/22 1:29 p.m.8 views

CVE-2018-0541

Buffer overflow in Tiny FTP Daemon Ver0.52d allows an attacker to cause a denial-of-service DoS condition or execute arbitrary code via unspecified vectors...

10CVSS9.7AI score0.0073EPSS
Exploits0References1
Prion
Prion
added 2018/03/22 1:29 p.m.6 views

Buffer overflow

Buffer overflow in Tiny FTP Daemon Ver0.52d allows an attacker to cause a denial-of-service DoS condition or execute arbitrary code via unspecified vectors...

10CVSS9.7AI score0.0073EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2018/03/22 1:29 p.m.1 views

CVE-2018-0541

Buffer overflow in Tiny FTP Daemon Ver0.52d allows an attacker to cause a denial-of-service DoS condition or execute arbitrary code via unspecified vectors...

9.8CVSS6.1AI score
Exploits0References1
Cvelist
Cvelist
added 2018/03/22 1:0 p.m.10 views

CVE-2018-0541

Buffer overflow in Tiny FTP Daemon Ver0.52d allows an attacker to cause a denial-of-service DoS condition or execute arbitrary code via unspecified vectors...

9.8AI score0.0073EPSS
Exploits0References1
CVE
CVE
added 2018/03/22 1:0 p.m.41 views

CVE-2018-0541

The CVE-2018-0541 entry concerns TinyFTP Daemon Ver0.52d, which contains a buffer overflow (CWE-121). The vulnerability may allow a remote attacker to cause a denial-of-service or execute arbitrary code. Documented impact across sources confirms DoS and code execution possibilities via unspecifie...

10CVSS9.7AI score0.0073EPSS
Exploits0References1Affected Software1
vulnersOsv
vulnersOsv
added 2018/03/13 8:42 p.m.2 views

@architect/data (=1.0.0), @architect/workflows (>=1.0.11 <=2.8.2) +23 more potentially affected by CVE-2018-1000096 via tiny-json-http (>=1.0.3 <=6.2.0)

tiny-json-http NPM version =1.0.3, =1.0.11, =3.0.0, =0.0.1, =1.1.5, =0.0.1, =3.0.0-beta.1, =0.17.717, =0.4.1-alpha.1, =0.4.1, =1.0.0-alpha.2 and more Source cves: CVE-2018-1000096 Source advisory: OSV:GHSA-7H42-5VJ2-CQ39...

8.1CVSS7.2AI score0.0017EPSS
Exploits0
Github Security Blog
Github Security Blog
added 2018/03/13 8:42 p.m.24 views

tiny-json-http missing SSL certificate validation

brianleroux tiny-json-http version all versions since commit 9b8e74a232bba4701844e07bcba794173b0238a8 Oct 29 2016 contains a Missing SSL certificate validation vulnerability in The libraries core functionality is affected. that can result in Exposes the user to man-in-the-middle attacks...

8.1CVSS7.4AI score0.0017EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2018/03/13 8:42 p.m.15 views

GHSA-7H42-5VJ2-CQ39 tiny-json-http missing SSL certificate validation

brianleroux tiny-json-http version all versions since commit 9b8e74a232bba4701844e07bcba794173b0238a8 Oct 29 2016 contains a Missing SSL certificate validation vulnerability in The libraries core functionality is affected. that can result in Exposes the user to man-in-the-middle attacks...

8.1CVSS7.7AI score0.0017EPSS
Exploits0References5
OSV
OSV
added 2018/03/13 1:29 a.m.14 views

CVE-2018-1000096

brianleroux tiny-json-http version all versions since commit 9b8e74a232bba4701844e07bcba794173b0238a8 Oct 29 2016 contains a Missing SSL certificate validation vulnerability in The libraries core functionality is affected. that can result in Exposes the user to man-in-the-middle attacks...

8.1CVSS7.9AI score
Exploits0References1
NVD
NVD
added 2018/03/13 1:29 a.m.10 views

CVE-2018-1000096

brianleroux tiny-json-http version all versions since commit 9b8e74a232bba4701844e07bcba794173b0238a8 Oct 29 2016 contains a Missing SSL certificate validation vulnerability in The libraries core functionality is affected. that can result in Exposes the user to man-in-the-middle attacks...

8.1CVSS7.7AI score0.0017EPSS
Exploits0References1
Rows per page
Query Builder