Lucene search
+L

1144 matches found

Github Security Blog
Github Security Blog
added 2022/05/05 12:29 a.m.55 views

Features file injection vulnerability

File injection vulnerability in Ruby gem Features 0.3.0 allows remote attackers to inject malicious html in the /tmp directory...

5.4CVSS3.9AI score0.0081EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2022/05/01 2:0 a.m.27 views

GHSA-VXF2-7RC3-PXMX Cheetah Path Search Order Hijacking

Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/...

7.2CVSS7AI score0.00433EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/05/01 2:0 a.m.26 views

Cheetah Path Search Order Hijacking

Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/...

7.2CVSS7.5AI score0.00433EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/04/23 12:40 a.m.44 views

GHSA-V5C9-98F7-2H54 Hadoop symlink vulnerability

Hadoop 1.0.3 contains a symlink vulnerability as a result of storing pid files in the shared /tmp directory by default...

7.5CVSS7.4AI score0.02671EPSS
SaveExploits2References5
OSV
OSV
added 2022/04/12 8:15 p.m.6 views

AZL-9357 CVE-2022-27378 affecting package mariadb for versions less than 10.6.8-1

An issue in the component Createtmptable::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...

7.5CVSS7.2AI score0.02406EPSS
SaveExploits1References1
OSV
OSV
added 2022/04/12 8:15 p.m.5 views

UBUNTU-CVE-2022-27378

An issue in the component Createtmptable::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...

7.5CVSS7.2AI score0.02406EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2022/04/07 1:35 a.m.37 views

CVE-2022-27818

SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname. There can be an information leak or denial of service...

9.3AI score0.01737EPSS
SaveExploits0References3
OSV
OSV
added 2022/04/07 1:35 a.m.16 views

CVE-2022-27818

SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname. There can be an information leak or denial of service...

9.1CVSS9AI score0.01737EPSS
SaveExploits0References5
CNVD
CNVD
added 2022/04/07 12:0 a.m.21 views

SWHKD has unspecified vulnerabilities (CNVD-2022-43218)

SWHKD is a display protocol-independent hotkey daemon made with Rust. A security vulnerability exists in SWHKD, which stems from the insecure use of the /tmp/swhkd.sock pathname. An attacker could exploit the vulnerability to obtain sensitive information or launch a denial-of-service attack...

9.1CVSS2.1AI score0.01737EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/04/01 12:0 a.m.47 views

SWHKD Denial of Service Vulnerability

SWHKD is a display protocol independent hotkey daemon made in Rust. A denial of service vulnerability exists in SWHKD version 1.1.5, which stems from the insecure use of the /tmp/swhks.pid pathname and can be exploited by an attacker to potentially cause a denial of service...

7.1CVSS6.7AI score0.00493EPSS
SaveExploits1References1
OSV
OSV
added 2022/03/31 12:0 a.m.15 views

GHSA-8M49-2XJ8-67V9 Data Loss/Denial of Service in SWHKD

SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service. A patch is available on the 1.1.0 branch of the repository...

7.1CVSS6.8AI score0.00493EPSS
SaveExploits1References5
GitLab Advisory Database
GitLab Advisory Database
added 2022/03/31 12:0 a.m.7 views

Data Loss/Denial of Service in SWHKD

SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service. A patch is available on the 1.1.0 branch of the repository...

7.1CVSS7.1AI score0.00493EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2022/03/30 2:15 a.m.23 views

CVE-2022-27816

SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service...

7.1CVSS0.00493EPSS
SaveExploits1References3
Prion
Prion
added 2022/03/30 2:15 a.m.11 views

Denial of service

SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service...

3.3CVSS6.8AI score0.00493EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/03/30 2:15 a.m.3 views

CVE-2022-27816

SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service...

7.1CVSS7AI score0.00493EPSS
SaveExploits1References4
NVD
NVD
added 2022/03/30 12:15 a.m.26 views

CVE-2022-27815

SWHKD 1.1.5 unsafely uses the /tmp/swhkd.pid pathname. There can be an information leak or denial of service...

7.8CVSS0.00506EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/03/30 12:0 a.m.7 views

SWHKD 后置链接漏洞

SWHKD is a display protocol independent hotkey daemon made in Rust. A denial of service vulnerability exists in SWHKD version 1.1.5, which stems from the insecure use of the /tmp/swhks.pid pathname and can be exploited by an attacker to potentially cause a denial of service...

7.1CVSS5.7AI score0.00493EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2022/03/29 11:21 p.m.38 views

CVE-2022-27815

SWHKD 1.1.5 unsafely uses the /tmp/swhkd.pid pathname. There can be an information leak or denial of service...

7.7AI score0.00506EPSS
SaveExploits1References3
CVE
CVE
added 2022/03/29 11:21 p.m.92 views

CVE-2022-27815

Affected software: SWHKD 1.1.5 and older. Vulnerability: Unsafe use of the /tmp/swhkd.pid pathname can lead to information leakage or denial of service. The issue stems from placing the pid file in /tmp, which is world-accessible. Impact (as described): Information disclosure and denial of servic...

7.8CVSS7.4AI score0.00506EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/03/29 11:21 p.m.20 views

CVE-2022-27815

SWHKD 1.1.5 unsafely uses the /tmp/swhkd.pid pathname. There can be an information leak or denial of service...

7.8CVSS7.5AI score0.00506EPSS
SaveExploits1References5
Rows per page
Query Builder