Lucene search
+L

7 matches found

Prion
Prion
•added 2018/12/10 12:29 a.m.•27 views

Design/Logic Flaw

VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler for geturiargs or getpostargs to block the API misuse described in CVE-2018-9230...

7.5CVSS9.4AI score0.13237EPSS
SaveExploits2References1Affected Software1
NVD
NVD
•added 2018/12/10 12:29 a.m.•29 views

CVE-2018-19991

VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler for geturiargs or getpostargs to block the API misuse described in CVE-2018-9230...

9.8CVSS9.5AI score0.02326EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2018/12/10 12:29 a.m.•23 views

CVE-2018-19991

VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler for geturiargs or getpostargs to block the API misuse described in CVE-2018-9230...

9.8CVSS7AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2018/12/10 12:00 a.m.•39 views

CVE-2018-19991

VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler for geturiargs or getpostargs to block the API misuse described in CVE-2018-9230...

9.5AI score0.02326EPSS
SaveExploits1References1
CVE
CVE
•added 2018/12/10 12:00 a.m.•69 views

CVE-2018-19991

CVE-2018-19991 / CVE-2018-9230 involve OpenResty and VeryNginx. VeryNginx 0.3.3 is described as allowing a remote attacker to bypass the Web Application Firewall due to no error handler for get_uri_args or get_post_args, enabling API misuse described in CVE-2018-9230. The connected records provid...

9.8CVSS9.4AI score0.02326EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2018/12/10 12:00 a.m.•7 views

PT-2018-15227

Name of the Vulnerable Software and Affected Versions VeryNginx version 0.3.3 Description The issue allows remote attackers to bypass the Web Application Firewall feature due to the lack of an error handler for functions such as get uri args or get post args, which can lead to API misuse...

9.8CVSS0.02326EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/10 12:00 a.m.•9 views

CVE-2018-19991: Improper Handling of Exceptional Conditions

VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler for geturiargs or getpostargs to block the API misuse described in CVE-2018-9230...

9.8CVSS8.3AI score0.02326EPSS
SaveExploits1References2
Rows per page
Query Builder