Lucene search
+L

5668 matches found

OSV
OSV
•added 2022/04/27 4:15 p.m.•17 views

CVE-2021-34587

In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable...

5.3CVSS5.8AI score0.00915EPSS
SaveExploits0References1
Prion
Prion
•added 2022/04/27 4:15 p.m.•28 views

Stack overflow

In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable...

5CVSS5.2AI score0.00915EPSS
SaveExploits0References1Affected Software5
Cvelist
Cvelist
•added 2022/04/27 3:15 p.m.•45 views

CVE-2021-34587 Bender Charge Controller: Long URL could lead to webserver crash

In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable...

5.3CVSS5.5AI score0.00915EPSS
SaveExploits0References1
CVE
CVE
•added 2022/04/27 3:15 p.m.•82 views

CVE-2021-34587

Summary: CVE-2021-34587 affects Bender ebee Charge Controllers (CC612, CC613, ICC15xx/ICC16xx) with versions prior to 5.11.2, 5.12.5, 5.13.2, or 5.20.2. A long URL used as input to sprintf into a stack variable can crash the webserver. CNNVD notes this could allow bypassing credential checks and ...

5.3CVSS5.2AI score0.00915EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/27 12:00 a.m.•5 views

CVE-2021-34587: Stack-based Buffer Overflow

In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable...

5.3CVSS5.9AI score0.00915EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2022/04/22 12:24 a.m.•34 views

Typo3 Arbitrary File Delete

TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to delete arbitrary files on the webserver...

6.5CVSS7.4AI score0.00984EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2022/04/22 12:24 a.m.•48 views

GHSA-9VXQ-MXW5-MCGP Typo3 Arbitrary File Delete

TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to delete arbitrary files on the webserver...

6.5CVSS6.7AI score0.00984EPSS
SaveExploits0References4
CNVD
CNVD
•added 2022/04/22 12:00 a.m.•37 views

Oracle Fusion Middleware Helidon Input Validation Error Vulnerability

Oracle Fusion Middleware is a business innovation platform for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, and other capabilities.A security vulnerability exists in the Helidon product of Oracle Fusion Middleware component:...

8.1CVSS7.1AI score0.01941EPSS
SaveExploits0References1
OSV
OSV
•added 2022/04/21 9:15 p.m.•13 views

CVE-2022-24423

Dell iDRAC8 versions prior to 2.83.83.83 contain a denial of service vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to cause resource exhaustion in the webserver, resulting in a denial of service condition...

7.5CVSS5.8AI score0.01643EPSS
SaveExploits0References1
NVD
NVD
•added 2022/04/21 9:15 p.m.•19 views

CVE-2022-24423

Dell iDRAC8 versions prior to 2.83.83.83 contain a denial of service vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to cause resource exhaustion in the webserver, resulting in a denial of service condition...

7.5CVSS0.01643EPSS
SaveExploits0References1
Prion
Prion
•added 2022/04/21 9:15 p.m.•23 views

Race condition

Dell iDRAC8 versions prior to 2.83.83.83 contain a denial of service vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to cause resource exhaustion in the webserver, resulting in a denial of service condition...

5CVSS7.4AI score0.01643EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/21 12:00 a.m.•3 views

CVE-2022-24423: Improper Input Validation

Dell iDRAC8 versions prior to 2.83.83.83 contain a denial of service vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to cause resource exhaustion in the webserver, resulting in a denial of service condition...

7.5CVSS7.3AI score0.01643EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/04/21 12:00 a.m.•20 views

PT-2022-16686 · Dell · Idrac8

Name of the Vulnerable Software and Affected Versions: Dell iDRAC8 versions prior to 2.83.83.83 Description: The issue allows a remote unauthenticated attacker to potentially cause resource exhaustion in the webserver, resulting in a denial of service condition. Recommendations: For Dell iDRAC8...

7.5CVSS7.5AI score0.01643EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/04/19 9:15 p.m.•9 views

CVE-2022-21404

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Reactive WebServer. Supported versions that are affected are 1.4.10 and 2.0.0-RC1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks ...

8.1CVSS6.8AI score0.01941EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/04/19 8:36 p.m.•113 views

CVE-2022-21404

CVE-2022-21404 affects Oracle Fusion Middleware Helidon (Reactive WebServer). Affected versions are 1.4.10 and 2.0.0-RC1. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Helidon, potentially taking over the Helidon instance. CVSS v3.1 base score 8.1...

8.1CVSS6.8AI score0.01941EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/04/19 8:36 p.m.•64 views

CVE-2022-21404

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Reactive WebServer. Supported versions that are affected are 1.4.10 and 2.0.0-RC1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks ...

8.1CVSS8.5AI score0.01941EPSS
SaveExploits0References1
OSV
OSV
•added 2022/04/19 8:36 p.m.•30 views

CVE-2022-21404

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Reactive WebServer. Supported versions that are affected are 1.4.10 and 2.0.0-RC1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks ...

8.1CVSS6.9AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2022/04/19 8:36 p.m.•14 views

CVE-2022-21404

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Reactive WebServer. Supported versions that are affected are 1.4.10 and 2.0.0-RC1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks ...

8.1CVSS6.8AI score0.01941EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/19 12:00 a.m.•2 views

CVE-2022-21404: Undefined Security Weakness

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Reactive WebServer. Supported versions that are affected are 1.4.10 and 2.0.0-RC1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks ...

8.1CVSS7.2AI score0.01941EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/04/19 12:00 a.m.•19 views

Oracle Fusion Middleware 输入验证错误漏洞

Oracle Fusion Middleware is a business innovation platform for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, and other capabilities.A security vulnerability exists in the Helidon product of Oracle Fusion Middleware component:...

8.1CVSS7AI score0.01941EPSS
SaveExploits0References5
Rows per page
Query Builder