Lucene search
+L

111 matches found

Github Security Blog
Github Security Blog
•added 2022/03/01 10:01 p.m.•35 views

Server-Side Request Forgery (SSRF) in rudloff/alltube

Impact Releases prior to 3.0.2 are vulnerable to a Server-Side Request Forgery vulnerability that allows an attacker to send a request to an internal hostname. Patches 3.0.2 contains a fix for this vulnerability. The 1.x and 2.x releases are not maintained anymore. Part of the fix requires applyi...

9.1CVSS1.1AI score0.01642EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
•added 2022/02/28 9:20 a.m.•56 views

CVE-2022-0768 Server-Side Request Forgery (SSRF) in rudloff/alltube

Server-Side Request Forgery SSRF in GitHub repository rudloff/alltube prior to 3.0.2...

8.6CVSS9.6AI score0.01642EPSS
SaveExploits1References2
OSV
OSV
•added 2022/02/28 9:20 a.m.•26 views

CVE-2022-0768 Server-Side Request Forgery (SSRF) in rudloff/alltube

Server-Side Request Forgery SSRF in GitHub repository rudloff/alltube prior to 3.0.2...

8.6CVSS8.7AI score
SaveExploits0References4
CVE
CVE
•added 2022/02/28 9:20 a.m.•152 views

CVE-2022-0768

CVE-2022-0768 describes a Server-Side Request Forgery in the GitHub repository rudloff/alltube, affecting releases prior to 3.0.2. The impact is the ability to send requests to an internal hostname due to the SSRF flaw. The Red Hat, OSV, GitHub advisory entries corroborate this SSRF issue and ind...

9.1CVSS7.8AI score0.01642EPSS
SaveExploits1References2Affected Software1
Friends Of PHP
Friends Of PHP
•added 2022/02/27 12:30 p.m.•52 views

Server-Side Request Forgery (SSRF)

Impact Releases prior to 3.0.2 are vulnerable to a Server-Side Request Forgery vulnerability that allows an attacker to send a request to an internal hostname. Patches 3.0.2 contains a fix for this vulnerability. The 1.x and 2.x releases are not maintained anymore. Part of the fix requires applyi...

9.1CVSS9.2AI score0.01642EPSS
SaveExploits1Affected Software1
OSV
OSV
•added 2021/07/28 6:58 p.m.•56 views

GHSA-C8QC-62QV-5P2X Out-of-bounds Write in ChakraCore

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0829,...

7.5CVSS7.9AI score0.08854EPSS
SaveExploits0References2
OSV
OSV
•added 2021/07/28 6:58 p.m.•39 views

GHSA-H2XM-2P6W-MJ2V Out-of-bounds Write in ChakraCore

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828,...

7.5CVSS7.9AI score0.08854EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2021/07/28 6:57 p.m.•84 views

Out-of-bounds write in ChakraCore

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827,...

7.6CVSS2.5AI score0.09592EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2021/07/28 6:57 p.m.•38 views

GHSA-86GW-G9JV-8VFG Out-of-bounds write in ChakraCore

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827,...

7.5CVSS7.9AI score0.08677EPSS
SaveExploits0References2
OSV
OSV
•added 2021/07/28 6:57 p.m.•27 views

GHSA-JV2C-MHCQ-6WP4 Out-of-bounds write in ChakraCore

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828,...

7.5CVSS7.9AI score0.08854EPSS
SaveExploits0References2
OSV
OSV
•added 2021/07/28 6:57 p.m.•92 views

GHSA-WVHV-RR3V-VHPJ Out-of-bounds write in ChakraCore

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829,...

7.5CVSS7.9AI score0.08854EPSS
SaveExploits0References2
OSV
OSV
•added 2021/07/28 6:57 p.m.•45 views

GHSA-J89M-GCJF-6GHP Out-of-bounds write in ChakraCore

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829,...

7.5CVSS7.9AI score0.13303EPSS
SaveExploits0References2
OSV
OSV
•added 2021/07/28 6:56 p.m.•86 views

GHSA-7J34-XQ9V-9MQG Out-of-bounds write in ChakraCore

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0828, CVE-2020-0829,...

7.5CVSS7.9AI score0.13303EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2021/07/28 6:56 p.m.•86 views

Out-of-bounds write in ChakraCore

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0828, CVE-2020-0829,...

7.6CVSS2.8AI score0.13303EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•17 views

SUSE: Security Advisory (SUSE-SU-2021:0768-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS7.4AI score0.40736EPSS
SaveExploits1References4
Prion
Prion
•added 2020/03/12 4:15 p.m.•24 views

Remote code execution

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829,...

7.6CVSS7.6AI score0.13303EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2020/03/12 4:15 p.m.•29 views

Remote code execution

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0829,...

7.6CVSS7.6AI score0.13303EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2020/03/12 4:15 p.m.•27 views

Remote code execution

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828,...

7.6CVSS7.6AI score0.13303EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2020/03/12 4:15 p.m.•33 views

Remote code execution

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829,...

7.6CVSS7.6AI score0.13303EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/03/12 3:48 p.m.•206 views

CVE-2020-0768

Technical details for CVE-2020-0768 are not provided in the connected documents. Public details appear limited to initial description. Monitor for updates from official sources.

7.6CVSS7.7AI score0.08733EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder