Lucene search
+L

5956 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/28 12:00 a.m.•2 views

CVE-2022-46174: Concurrent Execution using Shared Resource with Improper Synchronization

efs-utils is a set of Utilities for Amazon Elastic File System EFS. A potential race condition issue exists within the Amazon EFS mount helper in efs-utils versions v1.34.3 and below. When using TLS to mount file systems, the mount helper allocates a local port for stunnel to receive NFS...

4.2CVSS5.7AI score0.00617EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/12/27 9:13 p.m.•41 views

CVE-2020-36566 Path traversal in github.com/whyrusleeping/tar-utils

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.2AI score0.0107EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2022/12/27 9:13 p.m.•7 views

CVE-2020-36566 Path traversal in github.com/whyrusleeping/tar-utils

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.2AI score0.0107EPSS
SaveExploits0References3
NVD
NVD
•added 2022/12/25 11:15 a.m.•39 views

CVE-2021-4277

A vulnerability, which was classified as problematic, has been found in fredsmith utils. This issue affects some unknown processing of the file screenshotsync of the component Filename Handler. The manipulation leads to predictable from observable state. The name of the patch is...

5.3CVSS0.00473EPSS
SaveExploits0References2
Prion
Prion
•added 2022/12/25 11:15 a.m.•29 views

Design/Logic Flaw

A vulnerability, which was classified as problematic, has been found in fredsmith utils. This issue affects some unknown processing of the file screenshotsync of the component Filename Handler. The manipulation leads to predictable from observable state. The name of the patch is...

5CVSS5.4AI score0.00473EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/12/25 10:20 a.m.•41 views

CVE-2021-4277 fredsmith utils Filename screenshot_sync predictable state

A vulnerability, which was classified as problematic, has been found in fredsmith utils. This issue affects some unknown processing of the file screenshotsync of the component Filename Handler. The manipulation leads to predictable from observable state. The name of the patch is...

2.6CVSS5.7AI score0.00473EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/12/25 10:20 a.m.•25 views

CVE-2021-4277 fredsmith utils Filename screenshot_sync predictable state

A vulnerability, which was classified as problematic, has been found in fredsmith utils. This issue affects some unknown processing of the file screenshotsync of the component Filename Handler. The manipulation leads to predictable from observable state. The name of the patch is...

2.6CVSS7AI score0.00473EPSS
SaveExploits0References2
CVE
CVE
•added 2022/12/25 10:20 a.m.•109 views

CVE-2021-4277

CVE-2021-4277 affects fredsmith utils, specifically the Filename Handler component’s handling of the file screenshot_sync. The vulnerability arises from how unknown processing leads to predictable data from observable state. A patch named dbab1b66955eeb3d76b34612b358307f5c4e3944 exists and is rec...

5.3CVSS4.3AI score0.00473EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/25 12:00 a.m.•8 views

CVE-2021-4277: Predictable from Observable State

A vulnerability, which was classified as problematic, has been found in fredsmith utils. This issue affects some unknown processing of the file screenshotsync of the component Filename Handler. The manipulation leads to predictable from observable state. The name of the patch is...

5.3CVSS5.1AI score0.00473EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/12/25 12:00 a.m.•26 views

PT-2022-11682 · Unknown · Fredsmith Utils

Name of the Vulnerable Software and Affected Versions: fredsmith utils affected versions not specified Description: A problematic issue has been found in the processing of the file screenshot sync of the component Filename Handler. The manipulation leads to predictable data from observable state...

5.3CVSS7.2AI score0.00473EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/12/25 12:00 a.m.•18 views

utils 安全特征问题漏洞

utils is a utility program by Fred Smith Personal Developer. A security vulnerability exists in utils that stems from a problem with the unknown handling of the screenshotsync file of the Filename Handler component, which can lead to predictions from observable state...

5.3CVSS5AI score0.00473EPSS
SaveExploits0References3
Veracode
Veracode
•added 2022/12/21 1:11 a.m.•33 views

Path Traversal

plexus-utils is vulnerable to Path Traversal. An attacker can access arbitrary files and directories stored on the file system through the extractFile function in Expand.java and manipulate files with dot-dot-slash ../ sequences and variations or by using absolute file paths...

7.5CVSS6.4AI score0.01347EPSS
SaveExploits0References7Affected Software1
OpenVAS
OpenVAS
•added 2022/12/14 12:00 a.m.•19 views

Mageia: Security Advisory (MGASA-2022-0455)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.7CVSS5.2AI score0.00305EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2022/12/10 12:00 a.m.•34 views

Amazon Linux 2022 : maven-shared-utils (ALAS2022-2022-242)

The version of maven-shared-utils installed on the remote host is prior to 3.3.4-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-242 advisory. - In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings...

9.8CVSS8.1AI score0.04423EPSS
SaveExploits0References3
OSV
OSV
•added 2022/12/08 4:15 p.m.•19 views

CVE-2022-39895

Improper access control vulnerability in ContactListUtils in Phone prior to SMR Dec-2022 Release 1 allows to access contact group information via implicit intent...

3.3CVSS5.8AI score0.00118EPSS
SaveExploits0References1
OSV
OSV
•added 2022/12/08 3:32 a.m.•12 views

GSD-2022-1008347 ASoC: soc-utils: Remove __exit for snd_soc_util_exit()

ASoC: soc-utils: Remove exit for sndsocutilexit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.334 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2022/12/08 3:26 a.m.•15 views

GSD-2022-1008296 ASoC: soc-utils: Remove __exit for snd_soc_util_exit()

ASoC: soc-utils: Remove exit for sndsocutilexit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.300 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2022/12/08 3:19 a.m.•10 views

GSD-2022-1008233 ASoC: soc-utils: Remove __exit for snd_soc_util_exit()

ASoC: soc-utils: Remove exit for sndsocutilexit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.267 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2022/12/08 2:46 a.m.•9 views

GSD-2022-1007924 ASoC: soc-utils: Remove __exit for snd_soc_util_exit()

ASoC: soc-utils: Remove exit for sndsocutilexit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.80 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2022/12/08 2:31 a.m.•11 views

GSD-2022-1007763 ASoC: soc-utils: Remove __exit for snd_soc_util_exit()

ASoC: soc-utils: Remove exit for sndsocutilexit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

7.2AI score
SaveExploits0
Rows per page
Query Builder