Lucene search
+L

6897 matches found

OSV
OSV
•added 2022/02/08 9:15 p.m.•13 views

UBUNTU-CVE-2022-0522

Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2...

7.1CVSS7.3AI score0.00966EPSS
SaveExploits1References4
Mend
Mend
•added 2022/02/08 8:55 p.m.•1 views

CVE-2022-0522

Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2...

7.1CVSS0.00966EPSS
SaveExploits1References9
OSV
OSV
•added 2022/02/08 8:55 p.m.•27 views

CVE-2022-0522 Access of Memory Location Before Start of Buffer in radareorg/radare2

Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2...

6.3CVSS7.7AI score
SaveExploits0References6
CVE
CVE
•added 2022/02/08 8:55 p.m.•132 views

CVE-2022-0522

CVE-2022-0522 concerns radare2/radare2.js: prior to 5.6.2, the NPM package allows access of memory location before the start of a buffer. Connected sources confirm this vulnerability is tied to radare2.js code paths and have led to vendor advisories and patch releases (e.g., radare2 5.6.4 and rel...

7.1CVSS7.5AI score0.00966EPSS
SaveExploits1References4Affected Software1
AlpineLinux
AlpineLinux
•added 2022/02/08 8:55 p.m.•91 views

CVE-2022-0522

Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2...

7.1CVSS6.6AI score0.00966EPSS
SaveExploits1
OSV
OSV
•added 2022/02/08 8:40 p.m.•24 views

CVE-2022-0520 Use After Free in radareorg/radare2

Use After Free in NPM radare2.js prior to 5.6.2...

8.8CVSS8.5AI score
SaveExploits0References6
Mend
Mend
•added 2022/02/08 8:40 p.m.•2 views

CVE-2022-0520

Use After Free in NPM radare2.js prior to 5.6.2...

8.8CVSS0.01106EPSS
SaveExploits1References9
Cvelist
Cvelist
•added 2022/02/08 8:40 p.m.•51 views

CVE-2022-0520 Use After Free in radareorg/radare2

Use After Free in NPM radare2.js prior to 5.6.2...

8.8CVSS8.9AI score0.01106EPSS
SaveExploits1References4
CVE
CVE
•added 2022/02/08 8:40 p.m.•131 views

CVE-2022-0520

CVE-2022-0520 is a Use After Free vulnerability in the radare2.js module for NPM, prior to version 5.6.2. The issue affects radare2.js code paths handling memory and can lead to instability or potential exploitation. Affected product/component: radare2.js (NPM) with Radare2 framework. Root cause:...

8.8CVSS7.8AI score0.01106EPSS
SaveExploits1References4Affected Software1
AlpineLinux
AlpineLinux
•added 2022/02/08 8:40 p.m.•59 views

CVE-2022-0520

Use After Free in NPM radare2.js prior to 5.6.2...

8.8CVSS7.7AI score0.01106EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2022/02/08 12:00 a.m.•3 views

PT-2022-13237

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 5.6.2 radare2.js versions prior to 5.6.2 Description The issue is related to a Use After Free and an Expired Pointer Dereference in the radare2 and radare2.js repositories. Recommendations For radare2 versions prior t...

8.8CVSS0.01092EPSS
SaveExploits2References60
Positive Technologies
Positive Technologies
•added 2022/02/08 12:00 a.m.•1 views

PT-2022-13236

Name of the Vulnerable Software and Affected Versions radare2.js versions prior to 5.6.2 Description The issue is related to an access of memory location before the start of a buffer in NPM radare2.js. Recommendations For versions prior to 5.6.2, update to version 5.6.2 or later to resolve the...

7.1CVSS0.00966EPSS
SaveExploits1References59
Positive Technologies
Positive Technologies
•added 2022/02/08 12:00 a.m.•2 views

PT-2022-13234

Name of the Vulnerable Software and Affected Versions radare2.js versions prior to 5.6.2 Description The issue is related to a Use After Free condition in the NPM radare2.js package. Recommendations For versions prior to 5.6.2, update to version 5.6.2 or later to resolve the issue...

8.8CVSS0.01106EPSS
SaveExploits3References59
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/08 12:00 a.m.•5 views

CVE-2022-0520: Use After Free

Use After Free in NPM radare2.js prior to 5.6.2...

8.8CVSS7.8AI score0.01106EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/08 12:00 a.m.•4 views

CVE-2022-0522: Access of Memory Location Before Start of Buffer

Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2...

7.1CVSS7.5AI score0.00966EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/02/08 12:00 a.m.•3 views

PT-2022-13232

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 5.6.2 radare2.js versions prior to 5.6.2 Description A Heap-based Buffer Overflow issue has been identified. The estimated number of potentially affected devices and details about real-world incidents are not specifie...

7.1CVSS0.01005EPSS
SaveExploits1References60
Positive Technologies
Positive Technologies
•added 2022/02/06 12:00 a.m.•1 views

PT-2022-15701

Name of the Vulnerable Software and Affected Versions Servisnet Tessa version 0.0.2 Description An issue was discovered that allows an attacker to obtain sensitive information. This can be achieved via a "/js/app.js" request. Recommendations For Servisnet Tessa version 0.0.2, consider restricting...

7.5CVSS0.11576EPSS
SaveExploits5References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/06 12:00 a.m.•1 views

CVE-2022-22833: Undefined Security Weakness

An issue was discovered in Servisnet Tessa 0.0.2. An attacker can obtain sensitive information via a /js/app.js request...

7.5CVSS7.2AI score0.11576EPSS
SaveExploits5References1
RedHat Linux
RedHat Linux
•added 2022/02/01 9:18 p.m.•15 views

llhttp: HTTP Request Smuggling due to spaces in headers

An HTTP Request Smuggling HRS vulnerability was found in the llhttp library, used by Node.JS. Spaces as part of the header names were accepted as valid. In situations where HTTP conversations are being proxied such as proxy, reverse-proxy, load-balancer, an attacker can use this flaw to inject...

6.5CVSS7.4AI score0.03156EPSS
SaveExploits1References5
NVD
NVD
•added 2022/01/28 8:15 p.m.•29 views

CVE-2022-22791

SYNEL - eharmony Authenticated Blind & Stored XSS. Inject JS code into the "comments" field could lead to potential stealing of cookies, loading of HTML tags and JS code onto the system...

6.6CVSS0.00382EPSS
SaveExploits0References1
Rows per page
Query Builder