Lucene search
+L

6985 matches found

Cvelist
Cvelist
added 2024/04/15 2:09 p.m.31 views

CVE-2024-3789 Uncontrolled Resource Consumption vulnerability in WBSAirback

Uncontrolled resource consumption vulnerability in White Bear Solutions WBSAirback, version 21.02.04. This vulnerability could allow an attacker to send multiple command injection payloads to influence the amount of resources consumed...

6.5CVSS7AI score0.00996EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/15 2:09 p.m.15 views

CVE-2024-3789 Uncontrolled Resource Consumption vulnerability in WBSAirback

Uncontrolled resource consumption vulnerability in White Bear Solutions WBSAirback, version 21.02.04. This vulnerability could allow an attacker to send multiple command injection payloads to influence the amount of resources consumed...

6.5CVSS7.6AI score0.00996EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/12 12:53 a.m.45 views

CVE-2023-6678 Inefficient Regular Expression Complexity in GitLab

An issue has been discovered in GitLab EE affecting all versions before 16.8.6, all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. It was possible for an attacker to cause a denial of service using malicious crafted content in a junit test report file...

4.3CVSS4.9AI score0.00586EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/04/12 12:00 a.m.12 views

The vulnerability of the implementation of RAID arrays based on Intel VROC chips lies in the uncontrolled search element, which allows a hacker to increase their privileges.

The vulnerability of the implementation of RAID arrays based on Intel VROC chips is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS6.6AI score0.00214EPSS
SaveExploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/04/12 12:00 a.m.40 views

Oracle Linux 7 : squid (ELSA-2024-1787)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-1787 advisory. - Resolves: CVE-2021-28651 squid: Bug 5104: Memory leak in RFC 2169 response parsing 778 - Resolves: CVE-2021-28652 squid: Bug 5106: Broken cache manag...

8.6CVSS6.9AI score0.95785EPSS
SaveExploits4References7
Cvelist
Cvelist
added 2024/04/10 5:07 p.m.31 views

CVE-2024-3569 Denial of Service (DoS) Vulnerability in mintplex-labs/anything-llm

A Denial of Service DoS vulnerability exists in the mintplex-labs/anything-llm repository when the application is running in 'just me' mode with a password. An attacker can exploit this vulnerability by making a request to the endpoint using the validatedRequest middleware with a specially crafte...

7.5CVSS7.6AI score0.00776EPSS
SaveExploits1References2
CVE
CVE
added 2024/04/10 5:07 p.m.104 views

CVE-2024-3569

The CVE-2024-3569 entry concerns the mintplex-labs/anything-llm repository, where running in 'just me' mode with a password enables a DoS via the validatedRequest middleware when an attacker sends a crafted Authorization header. Public documents describe uncontrolled resource consumption leading ...

7.5CVSS7.4AI score0.00776EPSS
SaveExploits1References2Affected Software1
RedHat Linux
RedHat Linux
added 2024/04/10 12:21 p.m.83 views

Important: Red Hat Security Advisory: GitOps 1.12.1- Argo CD CLI and MicroShift GitOps security update

An update is now available for Red Hat OpenShift GitOps v1.12.1 for Argo CD CLI and MicroShift GitOps. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

9.8CVSS6.6AI score0.01176EPSS
SaveExploits2References7
OSV
OSV
added 2024/04/10 7:15 a.m.11 views

CVE-2024-22450

Dell Alienware Command Center, versions prior to 6.2.7.0, contain an uncontrolled search path element vulnerability. A local malicious user could potentially inject malicious files in the file search path, leading to system compromise...

7.8CVSS5.8AI score0.002EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/10 7:15 a.m.15 views

CVE-2024-22450

Dell Alienware Command Center, versions prior to 6.2.7.0, contain an uncontrolled search path element vulnerability. A local malicious user could potentially inject malicious files in the file search path, leading to system compromise...

7.8CVSS7.3AI score0.002EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/10 7:08 a.m.22 views

CVE-2024-22450

Dell Alienware Command Center, versions prior to 6.2.7.0, contain an uncontrolled search path element vulnerability. A local malicious user could potentially inject malicious files in the file search path, leading to system compromise...

7.4CVSS7.5AI score0.002EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/10 7:08 a.m.76 views

CVE-2024-22450

Dell Alienware Command Center (Windows) versions prior to 6.2.7.0 are affected by an Uncontrolled Search Path Elements vulnerability in the search path handling. A local attacker could potentially inject malicious files into the file search path, leading to system compromise. The PT-2024-2775 ent...

7.8CVSS6.6AI score0.002EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/04/10 12:00 a.m.11 views

PT-2024-2775 · Dell · Dell Alienware Command Center

Name of the Vulnerable Software and Affected Versions: Dell Alienware Command Center versions prior to 6.2.7.0 Description: The issue is related to an uncontrolled search path element, which could allow a local malicious user to inject malicious files into the file search path. This could lead to...

7.8CVSS7.9AI score0.002EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/04/10 12:00 a.m.10 views

Dell Alienware Command Center 代码问题漏洞

Dell Alienware Command Center is a package manager from Dell USA. A code issue vulnerability exists in Dell Alienware Command Center versions prior to 6.2.7.0 that stems from a Contains Uncontrolled Search Path Elements vulnerability, which can be exploited by a local attacker to inject a malicio...

7.8CVSS6.7AI score0.002EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/04/10 12:00 a.m.11 views

The vulnerability of the authentication and authorization module for the Apache 2.x HTTP server Mod_auth_openidc, related to uncontrolled resource consumption, allows attackers to cause service interruptions.

The vulnerability of the authentication and authorization module for the Apache 2.x HTTP server, Modauthopenidc, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS6.7AI score0.01261EPSS
SaveExploits1References11Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/04/10 12:00 a.m.15 views

The vulnerability of the Intel Binary Configuration Tool’s configuration modification utility lies in its uncontrolled search path, which allows an attacker to exploit their privileges.

The vulnerability of the Intel Binary Configuration Tool’s configuration modification utility is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a attacker to enhance their privileges...

6.7CVSS6.6AI score0.00191EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/10 12:00 a.m.10 views

The vulnerability of the Intel QSFP+ Configuration Utility, related to an uncontrolled search path, allows a hacker to gain increased privileges.

The vulnerability of the Intel QSFP+ Configuration Utility for configuring and managing network devices is related to an uncontrolled search path element. Exploiting this vulnerability could allow attackers to enhance their privileges...

6.7CVSS6.6AI score0.00186EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/04/10 12:00 a.m.13 views

The vulnerability of the expand_smacro() function in the YASM assembler allows a attacker to cause a service failure.

The vulnerability of the expandsmacro function in the YASM assembler is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.5AI score0.00378EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/04/10 12:00 a.m.16 views

The vulnerability of the expr_delete_term() function in the YASM assembler allows a hacker to trigger a service failure.

The vulnerability of the exprdeleteterm function in the YASM assembler is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

5.5CVSS5.5AI score0.00416EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/04/10 12:00 a.m.15 views

The vulnerability of the yasm_section_bcs_first() function in the YASM assembler allows a hacker to cause a service failure.

The vulnerability of the yasmsectionbcsfirst function in the YASM assembler is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

5.5CVSS5.5AI score0.00432EPSS
SaveExploits1References3Affected Software2
Rows per page
Query Builder