Hoch 7.8Linux-Server
Mittel 5.3Linux-Server
perl-cgi: perl-cgi: Denial of Service via truncated request body
Hoch 7.5Linux-Server
Red Hat Enterprise Linux: Mehrere Schwachstellen
perl-cgi: perl-cgi: Denial of Service via unenforced request and upload limits
Mittel 6.1Linux-Server
perl-CGI: perl-CGI: HTML injection via unescaped comment delimiter
Mittel 4.3Linux-Server
perl-cgi: perl-cgi: Content-Disposition parameter injection via unescaped double quotes in attachment filenames
Mittel 5.3Linux-Server
perl-cgi: perl-cgi: Denial of Service via improper argument handling in uploadInfo
Mittel 5.3Linux-Server
perl-cgi: perl-cgi: Denial of Service via unescaped regular expression injection in scrolling_list
Mittel 4.3Linux-Server
perl-cgi: perl-cgi: Cookie attribute injection via unvalidated parameters
Mittel 6.1Linux-Server
perl-CGI: perl-CGI: Cross-site scripting via unescaped apostrophes in generated URLs
Hoch 8.1Linux-Server
Red Hat Enterprise Linux: Mehrere Schwachstellen
perl-cgi: perl-cgi: Security feature bypass via untainted request parameters
Hoch 7.5Linux-Server
Red Hat Enterprise Linux: Mehrere Schwachstellen
perl-cgi: perl-cgi: arbitrary file write via unsanitized upload filenames
Mittel 6.5Linux-Server
perl-cgi: perl-cgi: Request forgery via request body parameter spoofing
Mittel 6.5Linux-Server
perl-cgi: perl-cgi: HTTP header injection via improper newline validation
Mittel 6.1Linux-Server
perl-cgi: perl-cgi: Open redirect via HTML entity decoding in redirect function
Mittel 6.5Linux-Server
perl-cgi: perl-cgi: Parameter injection via unrecognized HTTP request method
Mittel 6.1Linux-Server
perl-cgi: perl-cgi: script injection via unvalidated request URI
Mittel 5.3Linux-Server
perl-CGI: perl-CGI: Security control bypass via improper multipart parsing
Mittel 5.3Linux-Server
perl-cgi: perl-cgi: Information disclosure via uncleared warning buffer in persistent environments
Mittel 6.1Linux-Server
perl-CGI: perl-CGI: Web cache poisoning and URL manipulation via untrusted host headers
Mittel 5.3Linux-Server
perl-CGI: perl-CGI: Denial of Service via crafted multipart/related Content-Type header
Hoch 7.5Linux-Server
perl-cgi: perl-cgi: Denial of Service via unescaped cookie expiration attribute
Hoch 7.1Software
emailflare before commit cf31f33 contains a missing authorization vulnerability in POST /api/inbox/compose that allows authenticated members to send mail as…
emailflare before commit cf31f33 contains a missing authorization vulnerability in POST /api/inbox/compose that allows authenticated members to send mail as any sender address. Attackers can supply an arbitrary from field, which is passed unchecked to the Cloudflare send call, to impersonate other users or the organization to external recipients.
Hoch 8.3Software
emailflare before commit cf31f33 contains a missing authorization vulnerability in the inbox service /api/keys routes that allows any authenticated member to…
emailflare before commit cf31f33 contains a missing authorization vulnerability in the inbox service /api/keys routes that allows any authenticated member to list, create and revoke API keys. Attackers can mint a global live API key accepted by /v1/send to send mail from any domain, or revoke existing keys to disable integrations.
Hoch 8.8Software
Tanium addressed an unauthorized code execution vulnerability in Threat Response.
Hoch 8.8Software
Tanium addressed an unauthorized code execution vulnerability in Threat Response.
Hoch 7.7Software
A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service (babeld).
A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). babeld held references into internal collections while calling into the SSH library, where a re-entrant callback could modify a collection and invalidate those references. An attacker with an account and SSH access to the instance could leverage this use-after-free into a controlled write and run arbitrary commands as babeld, including disclosure of its environment…
Kritisch 9.8Software
Emerson Ovation has several protocols that have no authentication, which could allow an attacker to change controller configuration or cause a…
Hoch 8.7Linux-Server
Ovation: Ovation: Arbitrary code execution via unverified firmware updates
Emerson Ovation was found to have no authentication of firmware signing and relies on an insecure checksum for integrity. This could allow an attacker to push malicious firmware images, cause a denial-of-service condition, or achieve remote code execution.
Hoch 8.7Linux-Server
kore: kore: Denial of Service via integer underflow in HTTP request body handling
Kore before 4.3.0 contains an integer underflow vulnerability in HTTP request body handling that allows unauthenticated attackers to bypass http_body_max by sending more body bytes than declared. Attackers can send oversized first segments over many concurrent POST, PUT or DELETE connections, wrapping content_length to grow buffers unbounded and exhaust worker memory.
Kritisch 9.1Software