Lucene search
+L

1139 matches found

CNNVD
CNNVD
•added 2024/10/01 12:00 a.m.•16 views

WordPress plugin Hello World 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

6.5CVSS6.7AI score0.0146EPSS
SaveExploits1References4
OSV
OSV
•added 2024/09/18 2:15 p.m.•16 views

CVE-2024-31183

Out-of-bounds Read vulnerability in Open Networking Foundation ONF libfluid libfluidmsg module. This vulnerability is associated with program routine fluidmsg::of13::Hello::unpack. This issue affects libfluid: 0.1.0...

7.5CVSS5.8AI score0.00394EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/18 2:15 p.m.•10 views

CVE-2024-31166

Out-of-bounds Read vulnerability in Open Networking Foundation ONF libfluid libfluidmsg module. This vulnerability is associated with program routine fluidmsg::of13::HelloElemVersionBitmap::unpack. This issue affects libfluid: 0.1.0...

7.5CVSS5.8AI score0.00486EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/09/18 1:57 p.m.•37 views

CVE-2024-31183 Out-of-bounds Read in libfluid_msg library

Out-of-bounds Read vulnerability in Open Networking Foundation ONF libfluid libfluidmsg module. This vulnerability is associated with program routine fluidmsg::of13::Hello::unpack. This issue affects libfluid: 0.1.0...

6.5CVSS0.00394EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/09/18 1:57 p.m.•15 views

CVE-2024-31183 Out-of-bounds Read in libfluid_msg library

Out-of-bounds Read vulnerability in Open Networking Foundation ONF libfluid libfluidmsg module. This vulnerability is associated with program routine fluidmsg::of13::Hello::unpack. This issue affects libfluid: 0.1.0...

6.5CVSS6.9AI score0.00394EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/18 12:00 a.m.•2 views

CVE-2024-31183: Out-of-bounds Read

Out-of-bounds Read vulnerability in Open Networking Foundation ONF libfluid libfluidmsg module. This vulnerability is associated with program routine fluidmsg::of13::Hello::unpack. This issue affects libfluid: 0.1.0...

7.5CVSS5.8AI score0.00394EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/09/18 12:00 a.m.•17 views

PT-2024-23825 · Open Networking Foundation · Libfluid

Name of the Vulnerable Software and Affected Versions: libfluid version 0.1.0 Description: The issue is an Out-of-bounds Read vulnerability in the Open Networking Foundation ONF libfluid, specifically in the libfluid msg module. It is associated with the program routine fluid...

7.5CVSS6.9AI score0.00394EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/09/18 12:00 a.m.•11 views

libfluid 安全漏洞

libfluid is an Open Networking open source application. A security vulnerability exists in libfluid that stems from the fact that the fluidmsg::of13::Hello::unpack routine contains an out-of-bounds read vulnerability...

7.5CVSS6.8AI score0.00394EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/09/06 11:29 a.m.•6 views

Malicious code in hello-world-package-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8ee148c559a9993ef0660c9183434ff59d2f6430a126a5913ef9a8341b9014ff Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

7.5AI score
SaveExploits0References1
OSV
OSV
•added 2024/09/06 11:29 a.m.•9 views

MAL-2024-10034 Malicious code in hello-world-package-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8ee148c559a9993ef0660c9183434ff59d2f6430a126a5913ef9a8341b9014ff Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

7.4AI score
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2024/08/29 3:20 a.m.•11 views

SUSE CVE-2024-5814

A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello...

5.3CVSS6.8AI score0.00466EPSS
SaveExploits0References3
OSV
OSV
•added 2024/08/27 7:15 p.m.•15 views

UBUNTU-CVE-2024-5814

A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello...

5.3CVSS5.8AI score0.00466EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2024/08/27 7:15 p.m.•21 views

CVE-2024-5814

A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello...

5.3CVSS5.9AI score0.00466EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/08/27 6:38 p.m.•19 views

CVE-2024-5814 Unverifed Ciphersuite used on a client-side TLS1.3 Downgrade

A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello...

5.1CVSS6.4AI score0.00466EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2024/08/27 6:38 p.m.•32 views

CVE-2024-5814

A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello...

5.3CVSS5.3AI score0.00466EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2024/08/27 6:38 p.m.•58 views

CVE-2024-5814

A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello...

5.3CVSS6.9AI score0.00466EPSS
SaveExploits0References1
OSV
OSV
•added 2024/08/27 6:38 p.m.•24 views

CVE-2024-5814 Unverifed Ciphersuite used on a client-side TLS1.3 Downgrade

A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello...

5.1CVSS6.2AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/27 12:00 a.m.•1 views

CVE-2024-5814: Improper Access Control

A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello...

5.3CVSS6AI score0.00466EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/08/23 10:55 p.m.•6 views

Malicious code in hello-bozzo2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 96e02710356e7f0a4dee853d165a2d18a0a4addad3a07c397e495f61f6bc92fa Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

7.5AI score
SaveExploits0References1
OSV
OSV
•added 2024/08/23 10:55 p.m.•12 views

MAL-2024-12283 Malicious code in hello-bozzo2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 96e02710356e7f0a4dee853d165a2d18a0a4addad3a07c397e495f61f6bc92fa Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

7.4AI score
SaveExploits0References1
Rows per page
Query Builder