5867 matches found
CVE-2023-3936
creationtimestamp| type| source ---|---|--- 2023-08-21 20:41:02+00:00| seen| https://t.me/cibsecurity/68888...
CVE-2023-32002
The use of Module.load can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CV...
CVE-2023-32002
The use of Module.load can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CV...
vision-hebergement.lescigales.org Cross Site Scripting vulnerability OBB-3597718
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
espolubydleni.cz Cross Site Scripting vulnerability OBB-3596914
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-4451
creationtimestamp| type| source ---|---|--- 2023-08-20 18:40:06+00:00| seen| https://t.me/cibsecurity/68864...
CVE-2023-4435
creationtimestamp| type| source ---|---|--- 2023-08-20 16:14:01+00:00| seen| https://t.me/cibsecurity/68863...
CVE-2023-4434
creationtimestamp| type| source ---|---|--- 2023-08-20 07:39:43+00:00| seen| https://t.me/cibsecurity/68862...
CVE-2023-4415
creationtimestamp| type| source ---|---|--- 2023-08-18 20:38:23+00:00| seen| https://t.me/cibsecurity/68835 2023-10-16 05:14:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5437 2023-10-16 11:37:32+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5440 2023-10-17...
Fedora: Security Advisory for java-latest-openjdk (FEDORA-2023-469d0d1a18)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 38 Update: java-latest-openjdk-20.0.2.0.9-1.rolling.fc38
The OpenJDK 20 runtime environment...
[SECURITY] Fedora 37 Update: java-latest-openjdk-20.0.2.0.9-1.rolling.fc37
The OpenJDK 20 runtime environment...
CVE-2023-32004 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2023-32004 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2023-32004
A vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This flaw relates to improper handling of Buffers in file system APIs causing a traversal path to bypass when verifying file permissions. This vulnerability affects all users using th...
CVE-2023-32006 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2023-32003
fs.mkdtemp and fs.mkdtempSync can be used to bypass the permission model check using a path traversal attack. This flaw arises from a missing check in the fs.mkdtemp API and the impact is a malicious actor could create an arbitrary directory. This vulnerability affects all users using the...
CVE-2023-32003 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2023-32003 vulnerabilities
Vulnerabilities for packages: nodejs...
Path traversal
A vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This flaw relates to improper handling of Buffers in file system APIs causing a traversal path to bypass when verifying file permissions. This vulnerability affects all users using th...