Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wolfiWolfiWOLFI:CVE-2024-28102
HistorySep 27, 2024 - 9:56 p.m.

CVE-2024-28102 vulnerabilities

2024-09-2721:56:47
packages.wolfi.dev
14
cve-2024-28102
vulnerabilities
py3-jwcrypto
unix
packages

CVSS3

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

AI Score

7.3

Confidence

Low

EPSS

0

Percentile

9.0%

JSON

Vulnerabilities for packages: py3-jwcrypto

Related

openvas 1
redhat 3
almalinux 1
osv 7
prion 1
debiancve 1
veracode 1
oraclelinux 2
nessus 8
cve 1
redos 1
cgr 1
vulnrichment 1
ubuntucve 1
cvelist 1
rocky 2
nvd 1
redhatcve 1
github 1
ibm 3
openvas
openvas
Debian: Security Advisory (DLA-3883-1)
2024-09-10 00:00:00
redhat
redhat
(RHSA-2024:2559) Moderate: python-jwcrypto security update
2024-04-30 11:38:51
(RHSA-2024:3267) Moderate: idm:DL1 and idm:client security update
2024-05-22 10:41:24
(RHSA-2024:4522) Moderate: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
2024-07-12 01:15:48
almalinux
almalinux
Moderate: python-jwcrypto security update
2024-04-30 00:00:00
osv
osv
python-jwcrypto - security update
2024-09-09 00:00:00
Moderate: python-jwcrypto security update
2024-05-10 14:32:42
Moderate: python-jwcrypto security update
2024-04-30 00:00:00
prion
prion
Code injection
2024-03-14 22:53:57
debiancve
debiancve
CVE-2024-28102
2024-03-21 02:52:23
veracode
veracode
Denial Of Service (DoS)
2024-03-26 05:37:36
oraclelinux
oraclelinux
python-jwcrypto security update
2024-05-07 00:00:00
idm:DL1 and idm:client security update
2024-05-29 00:00:00
nessus
nessus
Debian dla-3883 : python3-jwcrypto - security update
2024-09-09 00:00:00
RHEL 9 : python-jwcrypto (RHSA-2024:2559)
2024-04-30 00:00:00
Oracle Linux 9 : python-jwcrypto (ELSA-2024-2559)
2024-05-07 00:00:00
cve
cve
CVE-2024-28102
2024-03-21 02:52:23
redos
redos
ROS-20240918-16
2024-09-18 00:00:00
cgr
cgr
CVE-2024-28102 vulnerabilities
2024-05-19 03:07:16
vulnrichment
vulnrichment
CVE-2024-28102 JWCrypto vulnerable to JWT bomb Attack in `deserialize` function
2024-03-06 21:09:58
ubuntucve
ubuntucve
CVE-2024-28102
2024-03-21 00:00:00
cvelist
cvelist
CVE-2024-28102 JWCrypto vulnerable to JWT bomb Attack in `deserialize` function
2024-03-06 21:09:58
rocky
rocky
python-jwcrypto security update
2024-05-10 14:32:42
idm:DL1 and idm:client security update
2024-06-14 13:59:30
nvd
nvd
CVE-2024-28102
2024-03-21 02:52:23
redhatcve
redhatcve
CVE-2024-28102
2024-03-10 09:09:41
github
github
JWCrypto vulnerable to JWT bomb Attack in `deserialize` function
2024-03-06 20:00:56
ibm
ibm
Security Bulletin: IBM Security QRadar EDR Software contains multiple vulnerabilities
2024-07-09 17:06:00
Security Bulletin: IBM SOAR QRadar Plugin App is vulnerable to using components with known vulnerabilities
2024-05-03 19:55:52
Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities
2024-05-03 10:32:27

CVSS3

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

AI Score

7.3

Confidence

Low

EPSS

0

Percentile

9.0%

JSON
Related for WOLFI:CVE-2024-28102
openvas1redhat3almalinux1osv7prion1debiancve1veracode1oraclelinux2nessus8cve1redos1cgr1vulnrichment1ubuntucve1cvelist1rocky2nvd1redhatcve1github1ibm3