Lucene search
+L

10 matches found

Mend
Mend
•added 2025/08/19 9:16 a.m.•8 views

CVE-2014-4179

Versions of "yar" prior to 2.2.0 are affected by a denial of service vulnerability related to an invalid encrypted session cookie value. When an invalid encryped session cookie value is provided, the process will crash...

8.7CVSS5.9AI score0.02591EPSS
SaveExploits0References4
vulnersOsv
vulnersOsv
•added 2025/08/19 9:16 a.m.•5 views

hapipass-local (0.0.1), nails-framework (>=1.0.3, <=1.0.7) +3 more potentially affected by CVE-2014-4179 via yar (>=0.0.5, <=1.1.0)

yar NPM version =0.0.5, =1.0.3, =1.0.0, =0.1.0, =0.4.1 Source cves: CVE-2014-4179 Source advisory: MEND:CVE-2014-4179...

5.8AI score0.02591EPSS
SaveExploits0
osv_ghsa
osv_ghsa
•added 2020/09/01 3:15 p.m.•27 views

GHSA-GG6M-FHQV-HG56 Denial of Service in yar

Versions of yar prior to 2.2.0 are affected by a denial of service vulnerability related to an invalid encrypted session cookie value. When an invalid encryped session cookie value is provided, the process will crash. Recommendation Update to version 2.2.0 or later...

7.5CVSS6.4AI score0.02591EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2020/09/01 3:15 p.m.•35 views

Denial of Service in yar

Versions of yar prior to 2.2.0 are affected by a denial of service vulnerability related to an invalid encrypted session cookie value. When an invalid encryped session cookie value is provided, the process will crash. Recommendation Update to version 2.2.0 or later...

4.8AI score0.02591EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2020/09/01 12:00 a.m.•6 views

PT-2020-7672

Name of the Vulnerable Software and Affected Versions yar versions prior to 2.2.0 Description The issue is related to an invalid encrypted session cookie value, which can cause a denial of service. When such a value is provided, the process will crash. Recommendations Update to version 2.2.0 or...

7.5CVSS0.02591EPSS
SaveExploits0References5
Openbugbounty
Openbugbounty
•added 2020/08/03 1:15 p.m.•15 views

yar-filarmoniya.ru Cross Site Scripting vulnerability OBB-1249735

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/07/14 8:59 p.m.•35 views

yar-net.ru Cross Site Scripting vulnerability OBB-1225975

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2019/11/16 4:35 p.m.•13 views

yar-filarmoniya.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1018955 Security Researcher g0bl1nsec Helped patch 3766 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting yar-filarmoniya.ru websit...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2016/11/10 4:16 p.m.•18 views

yar-net.ru XSS vulnerability

Vulnerable URL: http://yar-net.ru/video/playlist.php?server=cam8.yar-net.ru=?prompt/OPENBUGBOUNTY/...

6.9AI score
SaveExploits0
nodejs
nodejs
•added 2015/10/17 7:41 p.m.•44 views

Denial of Service

Overview Versions of yar prior to 2.2.0 are affected by a denial of service vulnerability related to an invalid encrypted session cookie value. When an invalid encryped session cookie value is provided, the process will crash. Recommendation Update to version 2.2.0 or later. References - Issue 34...

4.6AI score0.02591EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder