Lucene search
+L

1023 matches found

Github Security Blog
Github Security Blog
added 2019/03/06 5:35 p.m.27 views

uap-core Regular Expression Denial of Service issue

An issue was discovered in regex.yaml aka regexes.yaml in UA-Parser UAP-Core before 0.6.0. A Regular Expression Denial of Service ReDoS issue allows remote attackers to overload a server by setting the User-Agent header in an HTTPS request to a value containing a long digit string. The UAP-Core...

5.3CVSS4AI score0.03298EPSS
SaveExploits2References6Affected Software1
OpenVAS
OpenVAS
added 2019/03/04 12:00 a.m.89 views

WAGO PLC Detection (OPC UA)

OPC UA based detection of WAGO PLC Controllers. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2019/02/16 12:00 a.m.23 views

Integration Objects' OPC UA Server for Databases Detection (Windows SMB Login)

Detects the installed version of Integration Objects SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2019/02/15 12:00 a.m.13 views

Integration Objects' OPC UA Wrapper Detection (Windows SMB Login)

Detects the installed version of Integration Objects SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2019/02/15 12:00 a.m.25 views

CAS CommServer UA Detection (Windows SMB Login)

Detects the installed version of CAS CommServer UA for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4AI score
SaveExploits0References1
NVD
NVD
added 2019/02/13 2:29 p.m.33 views

CVE-2018-20164

An issue was discovered in regex.yaml aka regexes.yaml in UA-Parser UAP-Core before 0.6.0. A Regular Expression Denial of Service ReDoS issue allows remote attackers to overload a server by setting the User-Agent header in an HTTPS request to a value containing a long digit string. The UAP-Core...

5.3CVSS5.2AI score0.03298EPSS
SaveExploits2References4
OSV
OSV
added 2019/02/13 2:29 p.m.18 views

CVE-2018-20164

An issue was discovered in regex.yaml aka regexes.yaml in UA-Parser UAP-Core before 0.6.0. A Regular Expression Denial of Service ReDoS issue allows remote attackers to overload a server by setting the User-Agent header in an HTTPS request to a value containing a long digit string. The UAP-Core...

5.3CVSS7.2AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2019/02/13 2:29 p.m.21 views

CVE-2018-20164

An issue was discovered in regex.yaml aka regexes.yaml in UA-Parser UAP-Core before 0.6.0. A Regular Expression Denial of Service ReDoS issue allows remote attackers to overload a server by setting the User-Agent header in an HTTPS request to a value containing a long digit string. The UAP-Core...

5.3CVSS6.1AI score0.03298EPSS
SaveExploits2References4
Debian CVE
Debian CVE
added 2019/02/13 2:00 p.m.46 views

CVE-2018-20164

An issue was discovered in regex.yaml aka regexes.yaml in UA-Parser UAP-Core before 0.6.0. A Regular Expression Denial of Service ReDoS issue allows remote attackers to overload a server by setting the User-Agent header in an HTTPS request to a value containing a long digit string. The UAP-Core...

5.3CVSS5.2AI score0.03298EPSS
SaveExploits2
Cvelist
Cvelist
added 2019/02/13 2:00 p.m.32 views

CVE-2018-20164

An issue was discovered in regex.yaml aka regexes.yaml in UA-Parser UAP-Core before 0.6.0. A Regular Expression Denial of Service ReDoS issue allows remote attackers to overload a server by setting the User-Agent header in an HTTPS request to a value containing a long digit string. The UAP-Core...

5.2AI score0.03298EPSS
SaveExploits2References4
CVE
CVE
added 2019/02/13 2:00 p.m.67 views

CVE-2018-20164

The CVE-2018-20164 entry describes a Regular Expression Denial of Service (ReDoS) in UA-Parser UAP-Core prior to 0.6.0. Affected component is the regex.yaml/regexes.yaml logic used to parse User-Agent strings; the vulnerability allows an attacker to overload a server by sending HTTP(S) requests w...

5.3CVSS5.1AI score0.03298EPSS
SaveExploits2References4Affected Software1
OpenVAS
OpenVAS
added 2019/02/12 12:00 a.m.40 views

Unified Automation OPC UA Server CPP Detection (Windows SMB Login)

Detects the installed version of Unified Automation OPC UA Server CPP for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

7.4AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2019/02/12 12:00 a.m.31 views

Unified Automation OPC UA Server AnsiC Detection (Windows SMB Login)

Detects the installed version of Unified Automation OPC UA Server AnsiC for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.4AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2019/02/09 12:00 a.m.39 views

IBH softec IBH OPC UA Editor Detection (Windows SMB Login)

Detects the installed version of IBH softec IBH OPC UA Editor for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2019/02/07 12:00 a.m.42 views

IBHsoftec IBH OPC UA Server/Client Detection (Windows SMB Login)

Detects the installed version of IBHsoftec IBH OPC UA Server/Client for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2019/02/06 12:00 a.m.274 views

OPC UA Local Discovery Server Detection (Windows SMB Login)

Detects the installed version of OPC UA Local Discovery Server for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4AI score
SaveExploits0References1
Packet Storm
Packet Storm
added 2019/01/11 12:00 a.m.77 views

UA-Parser Denial Of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 X41 D-SEC GmbH Security Advisory: X41-2018-009 ReDoS Vulnerability in UA-Parser ================================ Severity Rating: Medium Confirmed Affected Versions: 2015-05-14 and newer, commit 6fd6c261274254bcbbacd77ef4b12534c7f9923d Confirmed...

5.3AI score0.03298EPSS
SaveExploits2
NVD
NVD
added 2018/12/13 4:29 p.m.32 views

CVE-2018-13804

A vulnerability has been identified in SIMATIC IT LMS All versions, SIMATIC IT Production Suite Versions V7.1 V7.1 Upd3, SIMATIC IT UA Discrete Manufacturing Versions V1.2, SIMATIC IT UA Discrete Manufacturing Versions V1.2, SIMATIC IT UA Discrete Manufacturing Versions V1.3, SIMATIC IT UA Discre...

9.3CVSS7.8AI score0.02656EPSS
SaveExploits0References2
Prion
Prion
added 2018/12/13 4:29 p.m.23 views

Design/Logic Flaw

A vulnerability has been identified in SIMATIC IT LMS All versions, SIMATIC IT Production Suite Versions V7.1 V7.1 Upd3, SIMATIC IT UA Discrete Manufacturing Versions V1.2, SIMATIC IT UA Discrete Manufacturing Versions V1.2, SIMATIC IT UA Discrete Manufacturing Versions V1.3, SIMATIC IT UA Discre...

9.3CVSS7.7AI score0.02656EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2018/12/13 4:00 p.m.41 views

CVE-2018-13804

A vulnerability has been identified in SIMATIC IT LMS All versions, SIMATIC IT Production Suite Versions V7.1 V7.1 Upd3, SIMATIC IT UA Discrete Manufacturing Versions V1.2, SIMATIC IT UA Discrete Manufacturing Versions V1.2, SIMATIC IT UA Discrete Manufacturing Versions V1.3, SIMATIC IT UA Discre...

7.8AI score0.02656EPSS
SaveExploits0References2
Rows per page
Query Builder