Lucene search
+L

10219 matches found

CVE
CVE
•added 2022/08/29 2:03 p.m.•225 views

CVE-2022-0718

The CVE-2022-0718 issue affects python-oslo.utils/oslo.utils where improper parsing causes passwords containing a double quote to be masked incorrectly in debug logs, exposing the portion after the quote. Impact is credential disclosure of sensitive data in logs (confidentiality impact stated by ...

4.9CVSS4.8AI score0.01743EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/29 12:00 a.m.•4 views

CVE-2022-0718: Insufficiently Protected Credentials

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...

4.9CVSS5.7AI score0.01743EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/08/25 2:15 p.m.•14 views

CVE-2022-37074

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function switchdebuginfoset...

7.8CVSS7.1AI score0.00552EPSS
SaveExploits1References2
OSV
OSV
•added 2022/08/25 2:15 p.m.•17 views

CVE-2022-37074

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function switchdebuginfoset...

7.8CVSS5.8AI score0.00552EPSS
SaveExploits1References1
OSV
OSV
•added 2022/08/25 2:15 p.m.•16 views

CVE-2022-36517

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function debugwlanadvance...

9.8CVSS5.8AI score0.01173EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/08/25 2:15 p.m.•7 views

CVE-2022-36517

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function debugwlanadvance...

9.8CVSS8.7AI score0.01173EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/08/25 12:00 a.m.•16 views

H3C GR-1200W 缓冲区错误漏洞

The H3C GR-1200W is a Gigabit enterprise wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C GR-1200W MiniGRW1A0V100R006 version that stems from a stack overflow in the switchdebuginfoset method...

7.8CVSS5.6AI score0.00552EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/08/25 12:00 a.m.•19 views

PT-2022-23438 · H3C · H3C Gr-1200W

Name of the Vulnerable Software and Affected Versions: H3C GR-1200W MiniGRW1A0V100R006 Description: A stack overflow issue was discovered in the H3C GR-1200W MiniGRW1A0V100R006 via the function debug wlan advance. Recommendations: For H3C GR-1200W MiniGRW1A0V100R006, consider disabling the debug...

9.8CVSS9.6AI score0.01173EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/08/25 12:00 a.m.•19 views

H3C GR-1200W 缓冲区错误漏洞

The H3C GR-1200W is a Gigabit enterprise wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C GR-1200W MiniGRW1A0V100R006 version that stems from a stack overflow in the debugwlanadvance method...

9.8CVSS5.6AI score0.01173EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/08/25 12:00 a.m.•23 views

PT-2022-23788 · H3C · H3C Gr-1200W

Name of the Vulnerable Software and Affected Versions: H3C GR-1200W MiniGRW1A0V100R006 Description: A stack overflow issue was discovered via the function switch debug info set. Recommendations: For H3C GR-1200W MiniGRW1A0V100R006, consider disabling the switch debug info set function as a...

7.8CVSS7.8AI score0.00552EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
•added 2022/08/23 10:32 p.m.•158 views

Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities

Summary RamdaCVE-2021-42581 is vulnerable to remote attackers to execute arbitrary code on the system, caused by a prototype pollution in functions. An attacker could exploit this vulnerability to execute arbitrary code on the system. Node-forgeCVE-2022-24773, 217313, CVE-2022-24771, CVE-2020-772...

9.8CVSS7.5AI score0.04581EPSS
SaveExploits12Affected Software1
NVD
NVD
•added 2022/08/22 3:15 p.m.•37 views

CVE-2022-25812

The Transposh WordPress Translation WordPress plugin before 1.0.8 does not validate its debug settings, which could allow allowing high privilege users such as admin to perform RCE...

7.2CVSS0.01708EPSS
SaveExploits4References1
attackerkb
attackerkb
•added 2022/08/22 3:15 p.m.•9 views

CVE-2022-25812

The Transposh WordPress Translation WordPress plugin before 1.0.8 does not validate its debug settings, which could allow allowing high privilege users such as admin to perform RCE...

7.2CVSS7.1AI score0.01708EPSS
SaveExploits4References2
OSV
OSV
•added 2022/08/22 3:15 p.m.•18 views

CVE-2022-25812

The Transposh WordPress Translation WordPress plugin before 1.0.8 does not validate its debug settings, which could allow allowing high privilege users such as admin to perform RCE...

7.2CVSS7.3AI score0.01708EPSS
SaveExploits4References1
Prion
Prion
•added 2022/08/22 3:15 p.m.•33 views

Code injection

The Transposh WordPress Translation WordPress plugin before 1.0.8 does not validate its debug settings, which could allow allowing high privilege users such as admin to perform RCE...

5.8CVSS6.8AI score0.01708EPSS
SaveExploits4References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/22 12:00 a.m.•4 views

CVE-2022-25812: Improper Control of Generation of Code

The Transposh WordPress Translation WordPress plugin before 1.0.8 does not validate its debug settings, which could allow allowing high privilege users such as admin to perform RCE...

7.2CVSS7.5AI score0.01708EPSS
SaveExploits4References2
NVD
NVD
•added 2022/08/19 9:15 p.m.•61 views

CVE-2022-36008

Frontier is Substrate's Ethereum compatibility layer. A security issue was discovered affecting parsing of the RPC result of the exit reason in case of EVM reversion. In release build, this would cause the exit reason being incorrectly parsed and returned by RPC. In debug build, this would cause ...

7.1CVSS0.01188EPSS
SaveExploits0References3
Prion
Prion
•added 2022/08/19 9:15 p.m.•36 views

Code injection

Frontier is Substrate's Ethereum compatibility layer. A security issue was discovered affecting parsing of the RPC result of the exit reason in case of EVM reversion. In release build, this would cause the exit reason being incorrectly parsed and returned by RPC. In debug build, this would cause ...

4CVSS6.5AI score0.01188EPSS
SaveExploits0References3
OSV
OSV
•added 2022/08/19 8:25 p.m.•41 views

CVE-2022-36008 Message length overflow in frontier

Frontier is Substrate's Ethereum compatibility layer. A security issue was discovered affecting parsing of the RPC result of the exit reason in case of EVM reversion. In release build, this would cause the exit reason being incorrectly parsed and returned by RPC. In debug build, this would cause ...

7.1CVSS6.5AI score
SaveExploits0References5
CNNVD
CNNVD
•added 2022/08/19 12:00 a.m.•21 views

Frontier 输入验证错误漏洞

Frontier is an EtherCompatible layer for Substrate. It is used to run unmodified Ethernet Dapps. Frontier suffers from an input validation error vulnerability that stems from the fact that it can affect the parsing of RPC results in the event of EVM recovery. In the release version, this causes t...

7.1CVSS6.4AI score0.01188EPSS
SaveExploits0References4
Rows per page
Query Builder