Lucene search
K

7 matches found

CNNVD
CNNVD
added 2025/12/03 12:0 a.m.2 views

Envoy 代码问题漏洞

Envoy is an Enphase open source gateway program for connecting smart home devices. A code issue vulnerability exists in Envoy versions 1.33.12, 1.34.10, 1.35.6, 1.36.2, and prior versions, which stems from a reentry error in the JWT authentication configuration that could lead to a crash...

6.5CVSS6.8AI score0.00004EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/10/16 12:0 a.m.3 views

Envoy 资源管理错误漏洞

Envoy is an Enphase open source gateway program for connecting smart home devices. A resource management error vulnerability exists in Envoy versions prior to 1.36.2, prior to 1.35.6, prior to 1.34.10, and prior to 1.33.12, which stems from the presence of post-release reuse of Lua filters, which...

7.5CVSS6.4AI score0.00019EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:40 p.m.4 views

CVE-2022-28203

A denial-of-service issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. When many files exist, requesting Special:NewFiles with actor as a condition can result in a very long running query...

7.5CVSS6.7AI score0.00418EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/09/19 9:15 p.m.0 views

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message...

4.4CVSS5.9AI score0.00067EPSS
Exploits1References5
OSV
OSV
added 2022/09/19 9:15 p.m.1 views

UBUNTU-CVE-2022-28203

A denial-of-service issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. When many files exist, requesting Special:NewFiles with actor as a condition can result in a very long running query...

7.5CVSS7.1AI score0.00418EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/04/18 12:0 a.m.2 views

PT-2022-18870 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.35.6 MediaWiki versions 1.36.x prior to 1.36.4 MediaWiki versions 1.37.x prior to 1.37.2 Description: An issue was discovered in MediaWiki where users with the editinterface permission can trigger infinite...

9.8CVSS5.8AI score0.01842EPSS
Exploits6References56
CNNVD
CNNVD
added 2022/03/30 12:0 a.m.0 views

MediaWiki 跨站脚本漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki that stems from the fact that the widthheight,...

6.1CVSS6.1AI score0.01084EPSS
Exploits0References10
Rows per page
Query Builder