Lucene search
K

20 matches found

OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-35474 Malicious code in test-mlw2-gyron-terts-mayed-truth (npm)

The package test-mlw2-gyron-terts-mayed-truth was found to contain malicious code...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 7:54 p.m.3 views

CVE-2021-35474

Stack-based Buffer Overflow vulnerability in cachekey plugin of Apache Traffic Server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1...

9.8CVSS6.7AI score0.09211EPSS
Exploits0References1
NVD
NVD
added 2024/06/10 4:15 p.m.14 views

CVE-2024-35474

A Directory Traversal vulnerability in iceice666 ResourcePack Server before v1.0.8 allows a remote attacker to disclose files on the server, via setPath in ResourcePackFileServer.kt...

6.5CVSS0.00361EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/06/10 12:0 a.m.11 views

CVE-2024-35474

A Directory Traversal vulnerability in iceice666 ResourcePack Server before v1.0.8 allows a remote attacker to disclose files on the server, via setPath in ResourcePackFileServer.kt...

6.5CVSS0.00361EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/16 9:15 p.m.1 views

CVE-2022-35474

OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b544e...

6.5CVSS6.8AI score0.00395EPSS
Exploits1References2
CVE
CVE
added 2022/08/16 8:2 p.m.60 views

CVE-2022-35474

In CVE-2022-35474, OTFCC v0.10.4 contains a heap-buffer overflow triggered through /release-x64/otfccdump+0x6b544e. The NVD entry lists a MEDIUM severity (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). No exploitation details or patches are provided in the connected documents; the exposed impact...

6.5CVSS6.8AI score0.00395EPSS
Exploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/08/14 12:0 a.m.59 views

Debian DSA-4957-1 : trafficserver - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-4957 advisory. - Incorrect handling of url fragment vulnerability of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic Server 7.0.0...

9.8CVSS7.5AI score0.09211EPSS
Exploits0References13
Circl
Circl
added 2021/06/30 12:29 p.m.0 views

CVE-2021-35474

creationtimestamp| type| source ---|---|--- 2021-06-30 12:29:47+00:00| seen| https://t.me/cibsecurity/25810...

9.8CVSS8.6AI score0.09211EPSS
Exploits0References1
OSV
OSV
added 2021/06/30 8:15 a.m.16 views

CVE-2021-35474

Stack-based Buffer Overflow vulnerability in cachekey plugin of Apache Traffic Server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1...

9.8CVSS6.7AI score
Exploits0References2
UbuntuCve
UbuntuCve
added 2021/06/30 8:15 a.m.29 views

CVE-2021-35474

Stack-based Buffer Overflow vulnerability in cachekey plugin of Apache Traffic Server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1...

9.8CVSS7.2AI score0.09211EPSS
Exploits0References5
OSV
OSV
added 2021/06/30 8:15 a.m.0 views

UBUNTU-CVE-2021-35474

Stack-based Buffer Overflow vulnerability in cachekey plugin of Apache Traffic Server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1...

9.8CVSS7.3AI score0.09211EPSS
Exploits0References6
CVE
CVE
added 2021/06/30 7:15 a.m.90 views

CVE-2021-35474

CVE-2021-35474 is a stack-based buffer overflow in the cachekey plugin of Apache Traffic Server, affecting ATS versions 7.0.0–7.1.12, 8.0.0–8.1.1, and 9.0.0–9.0.1. The Connected documents confirm the vulnerability and list affected versions; Debian's advisory DSA-4957-1 notes a fix in Debian for ...

9.8CVSS9.4AI score0.09211EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2021/06/30 7:15 a.m.23 views

CVE-2021-35474

Stack-based Buffer Overflow vulnerability in cachekey plugin of Apache Traffic Server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1...

9.8CVSS9.5AI score0.09211EPSS
Exploits0
OpenVAS
OpenVAS
added 2021/06/30 12:0 a.m.17 views

Apache Traffic Server (ATS) 7.0.0 < 8.1.2, 9.0.0 < 9.0.2 Multiple Vulnerabilities

Apache Traffic Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:trafficserver"...

9.8CVSS7.7AI score0.09211EPSS
Exploits0References1
ALT Linux
ALT Linux
added 2020/12/30 12:0 a.m.27 views

Security fix for the ALT Linux 9 package mediawiki version 1.35.1-alt1

1.35.1-alt1 built Dec. 30, 2020 Vitaly Lipatov in task 263837 Dec. 23, 2020 Vitaly Lipatov - new version 1.35.1 with rpmrb script - T268894, CVE-2020-35474, T268917, CVE-2020-35475 - T268938, CVE-2020-35478, CVE-2020-35479 - T205908, CVE-2020-35477, T120883, CVE-2020-35480...

5CVSS6AI score0.0086EPSS
Exploits4
Tenable Nessus
Tenable Nessus
added 2020/12/28 12:0 a.m.51 views

Fedora 33 : mediawiki (2020-0be2d40e13)

https://lists.wikimedia.org/pipermail/mediawiki-announce/2020-December /000268.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible witho...

7.5CVSS6.2AI score0.0086EPSS
Exploits4References8
OpenVAS
OpenVAS
added 2020/12/22 12:0 a.m.17 views

MediaWiki < 1.31.11, 1.32 < 1.35.1 Multiple Vulnerabilities - Linux

MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...

7.5CVSS6.1AI score0.0086EPSS
Exploits4References1
OpenVAS
OpenVAS
added 2020/12/22 12:0 a.m.18 views

MediaWiki < 1.31.11, 1.32 < 1.35.1 Multiple Vulnerabilities - Windows

MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...

7.5CVSS6.1AI score0.0086EPSS
Exploits4References1
Circl
Circl
added 2020/12/18 12:46 p.m.0 views

CVE-2020-35474

creationtimestamp| type| source ---|---|--- 2020-12-18 12:46:41+00:00| seen| https://t.me/cibsecurity/21048...

6.1CVSS6.4AI score0.00468EPSS
Exploits1References1
CVE
CVE
added 2020/12/18 7:30 a.m.66 views

CVE-2020-35474

CVE-2020-35474 affects MediaWiki before 1.35.1. The issue arises from the combination of Html::rawElement and Message::text, where MediaWiki:recentchanges-legend-watchlistexpiry can be changed on‑wiki to output raw HTML, enabling cross‑site scripting (XSS). The Arch Linux advisory confirms the vu...

6.1CVSS6AI score0.00468EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder