Lucene search
+L

10747 matches found

GithubExploit
GithubExploit
•added 2021/04/30 9:38 a.m.•133 views

Exploit for Uncontrolled Search Path Element in Git_Large_File_Storage_Project Git_Large_File_Storage

Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .b...

10CVSS9AI score0.82323EPSS
SaveExploits14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/30 12:00 a.m.•6 views

CVE-2020-28944: Uncontrolled Resource Consumption

OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of data...

7.5CVSS5.8AI score0.0157EPSS
SaveExploits1References2
Vaadin
Vaadin
•added 2021/04/30 12:00 a.m.•57 views

Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8

Unsafe validation RegEx in EmailValidator component in com.vaadin:vaadin-compatibility-server versions 8.0.0 through 8.12.4 Vaadin versions 8.0.0 through 8.12.4 allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses. See CWE-400: Uncontrolled Resource...

7.5CVSS0.6AI score0.01672EPSS
SaveExploits0References2Affected Software2
Github Security Blog
Github Security Blog
•added 2021/04/23 4:54 p.m.•99 views

Uncontrolled Resource Consumption in pillow

Impact Pillow before 8.1.1 allows attackers to cause a denial of service memory consumption because the reported size of a contained image is not properly checked for a BLP container, and thus an attempted memory allocation can be very large. Patches An issue was discovered in Pillow before 6.2.0...

7.5CVSS0.9AI score0.0317EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2021/04/23 4:15 p.m.•35 views

CVE-2020-36320

Unsafe validation RegEx in EmailValidator class in com.vaadin:vaadin-server versions 7.0.0 through 7.7.21 Vaadin 7.0.0 through 7.7.21 allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses...

7.5CVSS6.7AI score
SaveExploits0References3
Prion
Prion
•added 2021/04/23 4:15 p.m.•31 views

Design/Logic Flaw

Unsafe validation RegEx in EmailField component in com.vaadin:vaadin-text-field-flow versions 2.0.4 through 2.3.2 Vaadin 14.0.6 through 14.4.3, and 3.0.0 through 4.0.2 Vaadin 15.0.0 through 17.0.10 allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses...

5CVSS7.3AI score0.01127EPSS
SaveExploits0References2Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/23 12:00 a.m.•5 views

CVE-2020-36320: Uncontrolled Resource Consumption

Unsafe validation RegEx in EmailValidator class in com.vaadin:vaadin-server versions 7.0.0 through 7.7.21 Vaadin 7.0.0 through 7.7.21 allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses...

7.5CVSS5.7AI score0.01956EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/23 12:00 a.m.•6 views

CVE-2021-31405: Uncontrolled Resource Consumption

Unsafe validation RegEx in EmailField component in com.vaadin:vaadin-text-field-flow versions 2.0.4 through 2.3.2 Vaadin 14.0.6 through 14.4.3, and 3.0.0 through 4.0.2 Vaadin 15.0.0 through 17.0.10 allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses...

7.5CVSS5.7AI score0.01127EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/22 12:00 a.m.•3 views

CVE-2021-0229: Uncontrolled Resource Consumption

An uncontrolled resource consumption vulnerability in Message Queue Telemetry Transport MQTT server of Juniper Networks Junos OS allows an attacker to cause MQTT server to crash and restart leading to a Denial of Service DoS by sending a stream of specific packets. A Juniper Extension Toolkit JET...

5.3CVSS5.8AI score0.01156EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/22 12:00 a.m.•4 views

CVE-2021-0238: Uncontrolled Resource Consumption

When a MX Series is configured as a Broadband Network Gateway BNG based on Layer 2 Tunneling Protocol L2TP, executing certain CLI command may cause the system to run out of disk space, excessive disk usage may cause other complications. An administrator can use the following CLI command to monito...

5.5CVSS5.8AI score0.00232EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/20 12:00 a.m.•6 views

CVE-2021-30464: Uncontrolled Resource Consumption

OMICRON StationGuard before 1.10 allows remote attackers to cause a denial of service connectivity outage via crafted tcp/20499 packets to the CTRL Ethernet port...

7.5CVSS5.8AI score0.01198EPSS
SaveExploits0References2
OSV
OSV
•added 2021/04/19 1:15 p.m.•15 views

CVE-2021-21070

Adobe Robohelp version 2020.0.3 and earlier is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with admin permissions to write to the file system could leverage this vulnerability to escalate privileges...

6.5CVSS5.8AI score0.01598EPSS
SaveExploits0References1
NVD
NVD
•added 2021/04/19 1:15 p.m.•32 views

CVE-2021-21070

Adobe Robohelp version 2020.0.3 and earlier is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with admin permissions to write to the file system could leverage this vulnerability to escalate privileges...

9.3CVSS0.01598EPSS
SaveExploits0References1
CVE
CVE
•added 2021/04/19 12:28 p.m.•92 views

CVE-2021-21070

CVE-2021-21070 (Adobe RoboHelp) affects RoboHelp 2020.0.3 and earlier; root cause is an uncontrolled search path element that can enable privilege escalation. An attacker with write access on the host could escalate to higher privileges by exploiting the vulnerable RoboHelp. The issue is reported...

9.3CVSS6.5AI score0.01598EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•45 views

SUSE: Security Advisory (SUSE-SU-2018:1180-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.1AI score0.03918EPSS
SaveExploits3References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/19 12:00 a.m.•3 views

CVE-2021-29453: Uncontrolled Resource Consumption

matrix-media-repo is an open-source multi-domain media repository for Matrix. Versions 1.2.6 and earlier of matrix-media-repo do not properly handle malicious images which are crafted to be small in file size, but large in complexity. A malicious user could upload a relatively small image in term...

6.5CVSS5.7AI score0.01002EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/19 12:00 a.m.•5 views

CVE-2021-21070: Uncontrolled Search Path Element

Adobe Robohelp version 2020.0.3 and earlier is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with admin permissions to write to the file system could leverage this vulnerability to escalate privileges...

9.3CVSS5.9AI score0.01598EPSS
SaveExploits0References3
OSV
OSV
•added 2021/04/16 6:15 p.m.•11 views

CVE-2020-9667

Adobe Genuine Service version 6.6 and earlier is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker with admin privileges could plant custom binaries and execute them with System permissions. Exploitation of this issue requires user interaction...

6.5CVSS5.6AI score0.00488EPSS
SaveExploits0References1
NVD
NVD
•added 2021/04/16 6:15 p.m.•35 views

CVE-2020-9681

Adobe Genuine Service version 6.6 and earlier is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker could exploit this to rewrite the file of the administrator, which may lead to elevated permissions. Exploitation of this issue requires user interaction...

6.5CVSS0.00683EPSS
SaveExploits0References1
NVD
NVD
•added 2021/04/16 6:15 p.m.•28 views

CVE-2020-9667

Adobe Genuine Service version 6.6 and earlier is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker with admin privileges could plant custom binaries and execute them with System permissions. Exploitation of this issue requires user interaction...

6.9CVSS0.00488EPSS
SaveExploits0References1
Rows per page
Query Builder