Lucene search
+L

4909 matches found

Positive Technologies
Positive Technologies
•added 2022/02/27 12:00 a.m.•4 views

PT-2022-28672

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 5.10.101 Description A data-race issue exists in the dropmon net event and trace napi poll hit functions. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/02/27 12:00 a.m.•7 views

PT-2022-28740

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.25 Description A data-race issue exists in the dropmon net event and trace napi poll hit functions. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/02/27 12:00 a.m.•4 views

PT-2022-28826

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.11 Description The issue is related to a data-race in dropmon net event and trace napi poll hit. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/02/27 12:00 a.m.•4 views

PT-2022-28603

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.231 Description The issue is related to a data-race in dropmon net event and trace napi poll hit. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/02/24 12:00 a.m.•17 views

PT-2022-7630 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.17.0-rc1-00233-g9a20c48d1ed2 Description: The issue is related to the riscv component of the Linux kernel, where the trace hardirqs on,off functions require the caller to set up the frame pointer properly. If...

5.5CVSS6.5AI score0.00207EPSS
SaveExploits0References21
UbuntuCve
UbuntuCve
•added 2022/02/21 8:15 p.m.•63 views

CVE-2022-0696

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428...

6.2CVSS6.5AI score0.01513EPSS
SaveExploits1References6
Veracode
Veracode
•added 2022/02/21 6:54 a.m.•34 views

CRLF Injection

microweber/microweber is vulnerable to CRLF Injection. Lack of filtering CRLF characters in redirectUrl allows an attacker to cause stack trace exposure...

7.5CVSS4.8AI score0.44259EPSS
SaveExploits2References3Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2022/02/21 4:57 a.m.•8 views

suricata:fuzz_sigpcap_aware: Null-dereference READ in ubsan_GetStackTrace

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=4854539382030336 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsigpcapaware Job Type: libfuzzerubsansuricata Platform Id: linux Crash Type: Null-dereference READ Crash Address:...

5.9AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2022/02/19 12:01 a.m.•57 views

CRLF Injection in microweber

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...

7.6CVSS1.7AI score0.44259EPSS
SaveExploits2References4Affected Software1
OSV
OSV
•added 2022/02/19 12:01 a.m.•148 views

GHSA-3WWJ-WH2W-G4XP CRLF Injection in microweber

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...

7.6CVSS7.5AI score0.44259EPSS
SaveExploits2References4
attackerkb
attackerkb
•added 2022/02/18 3:15 p.m.•17 views

CVE-2022-0666

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...

7.6CVSS7.1AI score0.44259EPSS
SaveExploits2References4
NVD
NVD
•added 2022/02/18 3:15 p.m.•62 views

CVE-2022-0666

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...

7.6CVSS0.44259EPSS
SaveExploits2References2
Prion
Prion
•added 2022/02/18 3:15 p.m.•38 views

Crlf injection

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...

5CVSS7.7AI score0.44259EPSS
SaveExploits2References2Affected Software1
CVE
CVE
•added 2022/02/18 2:55 p.m.•146 views

CVE-2022-0666

CVE-2022-0666 affects microweber/microweber prior to 1.2.11. The vulnerability is a CRLF Injection caused by lack of filtering in redirects (notably the redirect_to/redirectUrl path), leading to stack trace exposure. Nuclei and Veracode listings corroborate the issue and note potential impact suc...

7.6CVSS7.3AI score0.44259EPSS
SaveExploits2References2Affected Software1
Mend
Mend
•added 2022/02/18 2:55 p.m.•5 views

CVE-2022-0666

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...

7.6CVSS0.44259EPSS
SaveExploits2References5
Cvelist
Cvelist
•added 2022/02/18 2:55 p.m.•63 views

CVE-2022-0666 CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in microweber/microweber

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...

7.6CVSS7.8AI score0.44259EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/18 12:00 a.m.•5 views

CVE-2022-0666: Improper Neutralization of CRLF Sequences

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11...

7.6CVSS7.3AI score0.44259EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2022/02/18 12:00 a.m.•3 views

PT-2022-13344

Name of the Vulnerable Software and Affected Versions microweber/microweber versions prior to 1.2.11 Description The issue is related to CRLF Injection, which leads to Stack Trace Exposure due to a lack of filtering. This occurs at the endpoint https://demo.microweber.org/. Recommendations For...

7.6CVSS0.44259EPSS
SaveExploits2References9
Huntr
Huntr
•added 2022/02/17 12:48 p.m.•35 views

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/

Description The Introduction of a New Line Character lets the attacker the stack trace at demo.microweber.org/ This Attack becomes more significant because of its Less complication. The Stack trace discloses following information : 1. Backend Response code. 2. The Versions of Backend Laravel...

5CVSS0.7AI score0.44259EPSS
SaveExploits2
Veracode
Veracode
•added 2022/02/16 6:53 a.m.•28 views

Information Disclosure

IBM MQ is vulnerable to information disclosure. The vulnerability exists due to a lack of sanitization of output data within trace files...

4.4CVSS1.8AI score0.00291EPSS
SaveExploits0References4Affected Software3
Rows per page
Query Builder