Lucene search
+L

5941 matches found

Tenable Nessus
Tenable Nessus
•added 2021/09/07 12:00 a.m.•31 views

EulerOS 2.0 SP5 : cifs-utils (EulerOS-SA-2021-2323)

According to the version of the cifs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos...

6.1CVSS6.7AI score0.00666EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/09/04 12:00 a.m.•25 views

Huawei EulerOS: Security Advisory for cifs-utils (EulerOS-SA-2021-2323)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.5AI score0.00666EPSS
SaveExploits0References2
OSV
OSV
•added 2021/09/01 6:36 p.m.•102 views

GHSA-F9CV-665R-275H Prototype Pollution in merge-change

All current versions of package merge-change are vulnerable to Prototype Pollution via the utils.set function...

9.8CVSS7.2AI score0.01084EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2021/08/30 9:15 p.m.•15 views

CVE-2021-32831

Total.js framework npm package total.js is a framework for Node.js platfrom written in pure JavaScript similar to PHP's Laravel or Python's Django or ASP.NET MVC. In total.js framework before version 3.4.9, calling the utils.set function with user-controlled values leads to code-injection. This c...

7.5CVSS7.1AI score0.01466EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2021/08/30 12:00 a.m.•21 views

total.js 代码注入漏洞

total.js is open source a framework developed using JavaScript for the Node.js platform. It can be used to develop web, desktop, service and IoT platforms. Total.js suffers from a code injection vulnerability that stems from a call to the utils.set function with a user-controlled value in the...

7.5CVSS7.5AI score0.01466EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2021/08/25 8:49 p.m.•42 views

Use after free in actix-utils

An issue was discovered in the actix-utils crate before 2.0.0 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data...

9.1CVSS8.7AI score0.01428EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2021/08/25 8:49 p.m.•99 views

GHSA-HHW2-PQHF-VMX2 Use after free in actix-utils

An issue was discovered in the actix-utils crate before 2.0.0 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data...

9.1CVSS9.2AI score0.01428EPSS
SaveExploits1References5
Chainguard
Chainguard
•added 2021/08/25 8:48 p.m.•11 views

GHSA-J79J-CX3H-G27H vulnerabilities

Vulnerabilities for packages: efs-utils...

7.3AI score
SaveExploits0
Wolfi
Wolfi
•added 2021/08/25 8:48 p.m.•3 views

GHSA-J79J-CX3H-G27H vulnerabilities

Vulnerabilities for packages: efs-utils...

7.5AI score
SaveExploits0
GitLab Advisory Database
GitLab Advisory Database
•added 2021/08/25 12:00 a.m.•20 views

Use after free in actix-utils

An issue was discovered in the actix-utils crate before 2.0.0 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data...

9.1CVSS7.2AI score0.01428EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
•added 2021/08/16 6:15 p.m.•20 views

PYSEC-2021-144

XML External Entities XXE in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'...

9.8CVSS8.2AI score0.02771EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2021/08/16 5:55 p.m.•1 views

CVE-2020-18703

XML External Entities XXE in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'...

9.8CVSS0.02771EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2021/08/16 12:00 a.m.•2 views

PT-2021-10217

Name of the Vulnerable Software and Affected Versions: Quokka version 0.4.0 Description: The issue allows remote attackers to execute arbitrary code. It is related to XML External Entities XXE in the component 'quokka/utils/atom.py'. Recommendations: For Quokka version 0.4.0, consider disabling t...

9.8CVSS0.02771EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2021/08/16 12:00 a.m.•13 views

Quokka代码问题漏洞

Quokka is a content management framework written in Python. quokka version 0.4.0 is vulnerable to XML external entity injection. A remote attacker can exploit this vulnerability to execute arbitrary code via the quokka/utils/atom.py component...

9.8CVSS6.3AI score0.02771EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/16 12:00 a.m.•5 views

CVE-2020-18703: Improper Restriction of XML External Entity Reference

XML External Entities XXE in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'...

9.8CVSS6.5AI score0.02771EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/08/11 5:25 p.m.•7 views

CVE-2021-23421

All versions of package merge-change are vulnerable to Prototype Pollution via the utils.set function...

9.8CVSS5.3AI score0.01084EPSS
SaveExploits1References3
Rockylinux
Rockylinux
•added 2021/08/10 11:55 a.m.•22 views

nfs-utils bug fix and enhancement update

An update is available for nfs-utils. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The nfs-utils packages provide a daemon for the kernel Network File System...

1.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/08/10 12:00 a.m.•3 views

PT-2021-1174

Name of the Vulnerable Software and Affected Versions: nfs-utils versions affected versions not specified Description: The issue concerns the nfs-utils packages, which provide a daemon for the kernel Network File System NFS server and related tools. These packages contain programs such as...

5.8AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2021/08/09 12:00 a.m.•19 views

Huawei EulerOS: Security Advisory for cifs-utils (EulerOS-SA-2021-2237)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.5AI score0.00666EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/08/09 12:00 a.m.•24 views

Huawei EulerOS: Security Advisory for cifs-utils (EulerOS-SA-2021-2263)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.5AI score0.00666EPSS
SaveExploits0References2
Rows per page
Query Builder