Lucene search
+L

41 matches found

Spring Security Advisories
Spring Security Advisories
added 2023/01/17 11:0 a.m.21 views

The new Spring Boot version validation and upgrade support in Spring Tools

New releases of Spring Boot are being released on a quite frequent schedule and updating your projects to newer versions of Spring Boot is something that many teams and organizations around the globe do as part of their daily work. Sometimes those upgrades are simple and easy, for example for new...

7.2AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2023/01/17 12:0 a.m.25 views

The new Spring Boot version validation and upgrade support in Spring Tools

New releases of Spring Boot are being released on a quite frequent schedule and updating your projects to newer versions of Spring Boot is something that many teams and organizations around the globe do as part of their daily work. Sometimes those upgrades are simple and easy, for example for new...

7.2AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2023/01/17 12:0 a.m.26 views

The new Spring Boot version validation and upgrade support in Spring Tools

New releases of Spring Boot are being released on a quite frequent schedule and updating your projects to newer versions of Spring Boot is something that many teams and organizations around the globe do as part of their daily work. Sometimes those upgrades are simple and easy, for example for new...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2021/10/13 12:0 a.m.49 views

Siemens SINEC NMS SQL Injection Vulnerability (CNVD-2021-77589)

SINEC NMS is a network management system from Siemens for monitoring and managing industrial networks.A SQL injection vulnerability exists in versions prior to SINEC NMS 1.0 SP2 Update 1, which stems from the lack of validation and escaping of SQL parameter statements in the software. An attacker...

7.2CVSS2.6AI score0.27685EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/04/26 12:0 a.m.12 views

MediaWiki 加密问题漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. A vulnerability exists in MediaWiki due to an encryption issue that stems from affected software...

9.8CVSS8.1AI score0.01615EPSS
SaveExploits0References8
OSV
OSV
added 2020/09/14 7:15 p.m.26 views

CVE-2020-13316

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not validating a Deploy-Token and allowed a disabled repository be accessible via a git command line...

4.3CVSS6.4AI score
SaveExploits0References3
NVD
NVD
added 2019/04/03 6:29 p.m.18 views

CVE-2018-4406

A denial of service issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14...

6.5CVSS6.2AI score0.01096EPSS
SaveExploits0References2
Citrix
Citrix
added 2016/08/03 12:0 a.m.12 views

Troubleshoot Issues that Arise When Joining StoreFront Server to a Group

Complete the following steps to troubleshoot issues that arise when joining a StoreFront server to a group. 1. Validate that all machines are on the same version of Storefront. Open the StoreFront MMC Help About Citrix StoreFront Version. 2. Confirm that all StoreFront servers have the same date...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2015/09/16 12:0 a.m.20 views

Splunk Enterprise 6.2.x < 6.2.6 / Splunk Light 6.2.x < 6.2.6 Splunk Web XSS

According to its version number, the instance of Splunk hosted on the remote web server is Splunk Enterprise 6.2.x prior to 6.2.6 or Splunk Light 6.2.x prior to 6.2.6. It is, therefore, affected by a cross-site scripting vulnerability in the Splunk Web component due to improper validation of...

6.2AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2014/06/10 1:7 p.m.9 views

lcms: insufficient ICC profile version validation (OpenJDK 2D, 8031335)

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D...

4.3CVSS7.4AI score0.04097EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2014/04/16 11:24 a.m.4 views

lcms: insufficient ICC profile version validation (OpenJDK 2D, 8031335)

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D...

4.3CVSS7.6AI score0.04097EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2014/02/24 5:56 p.m.5 views

rubygems: version regex algorithmic complexity vulnerability

A denial of service vulnerability exists in the RubyGems versions 2.0.7 or older, such that when RubyGems validates versioning it performs a wrong regular expression causing resource consumption due to algorithmic complexity...

4.3CVSS7.4AI score0.03343EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2013/12/17 6:29 p.m.11 views

rubygems: version regex algorithmic complexity vulnerability

A denial of service vulnerability exists in the RubyGems versions 2.0.7 or older, such that when RubyGems validates versioning it performs a wrong regular expression causing resource consumption due to algorithmic complexity...

4.3CVSS7.4AI score0.03343EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2013/10/17 5:15 p.m.6 views

rubygems: version regex algorithmic complexity vulnerability

A denial of service vulnerability exists in the RubyGems versions 2.0.7 or older, such that when RubyGems validates versioning it performs a wrong regular expression causing resource consumption due to algorithmic complexity...

4.3CVSS7.4AI score0.03343EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2013/10/15 6:19 p.m.6 views

rubygems: version regex algorithmic complexity vulnerability

A denial of service vulnerability exists in the RubyGems versions 2.0.7 or older, such that when RubyGems validates versioning it performs a wrong regular expression causing resource consumption due to algorithmic complexity...

4.3CVSS7.4AI score0.03343EPSS
SaveExploits0References5
FreeBSD
FreeBSD
added 2013/09/09 12:0 a.m.26 views

ruby-gems -- Algorithmic Complexity Vulnerability

Ruby Gem developers report: RubyGems validates versions with a regular expression that is vulnerable to denial of service due to backtracking. For specially crafted RubyGems versions attackers can cause denial of service through CPU consumption...

4.3CVSS6.1AI score0.03343EPSS
SaveExploits0
OSV
OSV
added 2013/07/29 2:6 p.m.13 views

MGASA-2013-0238 Updated phpmyadmin packages fix security vulnerabilities

Using a crafted SQL query, it was possible to produce an XSS on the SQL query form PMASA-2013-8CVE-2013-4995. In the setup/index.php, using a crafted hash with a Javascript event, untrusted JS code could be executed. In the Display chart view, a chart title containing HTML code was rendered...

6.5CVSS6.2AI score0.01832EPSS
SaveExploits0References8
securityvulns
securityvulns
added 2010/04/19 12:0 a.m.40 views

irssi multiple security vulnerabilities

Insufficient SSL certificate and version validation, DoS...

6.8CVSS3.4AI score0.02876EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2009/03/02 12:0 a.m.19 views

Ubuntu: Security Advisory (USN-724-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.6AI score0.71986EPSS
SaveExploits8References2
Prion
Prion
added 2007/07/10 10:30 p.m.28 views

Design/Logic Flaw

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and Office Excel 2007 does not properly validate version information, which allows user-assisted remote attackers to execute arbitrary code via a crafted Excel file, aka "Calculation Error Vulnerability"...

9.3CVSS7.7AI score0.32046EPSS
SaveExploits1References10Affected Software3
Rows per page
Query Builder