Lucene search
+L

1299 matches found

Positive Technologies
Positive Technologies
•added 2023/10/10 12:00 a.m.•24 views

PT-2023-36348 · Unknown · Graphql Mesh

Name of the Vulnerable Software and Affected Versions: GraphQL Mesh affected versions not specified Description: GraphQL Mesh is a framework and gateway for GraphQL Federation and non-GraphQL Federation subgraphs, non-GraphQL services, and databases. When a user transforms on the root level or...

7.5CVSS6.9AI score0.00432EPSS
SaveExploits0References11
Openbugbounty
Openbugbounty
•added 2023/10/09 1:41 a.m.•13 views

used-laptops.co.uk Cross Site Scripting vulnerability OBB-3735780

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Code423n4
Code423n4
•added 2023/10/06 12:00 a.m.•21 views

DoS in System Component lead to System Failure

Lines of code Vulnerability details Impact Proof Of Concept Tools Used Recommended Mitigation Steps Assessed type DoS --- The text was updated successfully, but these errors were encountered: All reactions...

7.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2023/09/15 12:00 a.m.•21 views

The vulnerability of the Item_field::used_tables/update_depend_map_for_order component of the MariaDB database management system, which allows a hacker to trigger a service failure.

The vulnerability of the Itemfield::usedtables/updatedependmapfororder component of the MariaDB database management system is related to the use of the assert function or similar operators. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS7.4AI score0.01546EPSS
SaveExploits1References10Affected Software5
NVD
NVD
•added 2023/09/14 7:16 p.m.•18 views

CVE-2018-4788

Rejected reason: This candidate is unused by its CNA...

6.6AI score
SaveExploits0
NVD
NVD
•added 2023/09/14 7:16 p.m.•18 views

CVE-2018-4623

Rejected reason: This candidate is unused by its CNA...

6.6AI score
SaveExploits0
NVD
NVD
•added 2023/09/14 7:16 p.m.•16 views

CVE-2018-4555

Rejected reason: This candidate is unused by its CNA...

6.6AI score
SaveExploits0
Prion
Prion
•added 2023/09/14 7:16 p.m.•16 views

Open redirect

Rejected reason: This candidate is unused by its CNA...

7.2AI score
SaveExploits0
Prion
Prion
•added 2023/09/14 7:16 p.m.•14 views

Open redirect

Rejected reason: This candidate is unused by its CNA...

7.2AI score
SaveExploits0
Prion
Prion
•added 2023/09/14 7:16 p.m.•14 views

Open redirect

Rejected reason: This candidate is unused by its CNA...

7.2AI score
SaveExploits0
Prion
Prion
•added 2023/09/14 7:16 p.m.•19 views

Open redirect

Rejected reason: This candidate is unused by its CNA...

7.2AI score
SaveExploits0
NVD
NVD
•added 2023/09/14 7:15 p.m.•12 views

CVE-2017-13941

Rejected reason: This candidate is unused by its CNA...

6.6AI score
SaveExploits0
NVD
NVD
•added 2023/09/14 7:15 p.m.•13 views

CVE-2009-3775

Rejected reason: This candidate is unused by its CNA...

6.6AI score
SaveExploits0
Prion
Prion
•added 2023/09/14 7:15 p.m.•15 views

Open redirect

Rejected reason: This candidate is unused by its CNA...

7.1AI score
SaveExploits0
Prion
Prion
•added 2023/09/14 7:15 p.m.•11 views

Open redirect

Rejected reason: This candidate is unused by its CNA...

7.1AI score
SaveExploits0
Prion
Prion
•added 2023/09/14 7:15 p.m.•15 views

Open redirect

Rejected reason: This candidate is unused by its CNA...

7.4AI score
SaveExploits0
Elastic
Elastic
•added 2023/09/14 4:53 a.m.•16 views

Elasticsearch Security Statement regarding CVE-2022-1471

Elasticsearch is not affected by this issue. Elasticsearch is not affected by the issue described in CVE-2022-1471 as, in general, it does not use Snakeyaml to parse YAML. Summary Elasticsearch supports YAML as a format for search queries, and it also uses YAML for its configuration files i.e...

9.8CVSS8.8AI score0.99569EPSS
SaveExploits10
Code423n4
Code423n4
•added 2023/09/06 12:00 a.m.•30 views

Calling withdraw on a delegated amount of WETH doesn't subtract from totalWethDelegated

Lines of code Vulnerability details Impact The contract's WETH amount gets permanently bricked. Proof of Concept A user can call addToDelegate and give WETH, that other people can use for bonding with their rDPX in exchange for a certain percentage appointed by the delegatee. Delegate memory...

7AI score
SaveExploits0
Talos Blog
Talos Blog
•added 2023/08/31 12:00 p.m.•48 views

SapphireStealer: Open-source information stealer enables credential and data theft

SapphireStealer, an open-source information stealer, has been observed across public malware repositories with increasing frequency since its initial public release in December 2022. Information-stealing malware like SapphireStealer can be used to obtain sensitive information, including corporate...

7.5AI score
SaveExploits0
attackerkb
attackerkb
•added 2023/08/23 3:15 p.m.•11 views

CVE-2023-41125

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...

5.7AI score
SaveExploits0References1
Rows per page
Query Builder