Lucene search
K

51 matches found

Tenable Nessus
Tenable Nessus
added 2026/04/09 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2026-5890

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafte...

7.5CVSS7.4AI score0.00031EPSS
Exploits0References2
CVE
CVE
added 2026/04/08 9:20 p.m.11 views

CVE-2026-5890

CVE-2026-5890 describes a race condition in Chrome’s WebCodecs, allowing a remote attacker to potentially read sensitive data from process memory via a crafted HTML page. Affected software: Google Chrome (WebCodecs path). Root cause: race in WebCodecs leading to information disclosure. Impact: po...

7.5CVSS5.9AI score0.00031EPSS
Exploits0References2Affected Software1
vulnersOsv
vulnersOsv
added 2025/06/09 7:41 p.m.3 views

@actions-for-rust/core (>=0.1.6 <=0.1.8), @actions-rs-plus/core (>=0.0.0 <=0.7.5) +125 more potentially affected by CVE-2025-5890 via @actions/glob (>=0.1.2 <=0.7.0)

@actions/glob NPM version =0.1.2, =0.1.6, =0.0.0, =0.1.0, =1.0.1-2a6268e89ea5fbc66dadd1d897cac75b3f0a63e4.0, =0.1.0, =1.0.0, =4.0.0, =3.2.5, =1.1.0, =3.2.2, =2.0.0, =2.0.3 and more Source cves: CVE-2025-5890 Source advisory: SNYK:JS-ACTIONSGLOB-11484208...

5.3CVSS5.8AI score0.00226EPSS
Exploits0
NVD
NVD
added 2025/06/09 7:15 p.m.4 views

CVE-2025-5890

A vulnerability classified as problematic has been found in actions toolkit 0.5.0. This affects the function globEscape of the file toolkit/packages/glob/src/internal-pattern.ts of the component glob. The manipulation leads to inefficient regular expression complexity. It is possible to initiate...

5.3CVSS0.00226EPSS
Exploits0References4
OSV
OSV
added 2025/06/09 7:15 p.m.0 views

CVE-2025-5890

A vulnerability classified as problematic has been found in actions toolkit 0.5.0. This affects the function globEscape of the file toolkit/packages/glob/src/internal-pattern.ts of the component glob. The manipulation leads to inefficient regular expression complexity. It is possible to initiate...

5.3CVSS5AI score0.00226EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/06/09 6:31 p.m.5 views

CVE-2025-5890 actions toolkit glob internal-pattern.ts globEscape redos

A vulnerability classified as problematic has been found in actions toolkit 0.5.0. This affects the function globEscape of the file toolkit/packages/glob/src/internal-pattern.ts of the component glob. The manipulation leads to inefficient regular expression complexity. It is possible to initiate...

5.3CVSS7.1AI score0.00226EPSS
Exploits0References4
CVE
CVE
added 2025/06/09 6:31 p.m.42 views

CVE-2025-5890

The CVE-2025-5890 entry concerns actions toolkit 0.5.0, specifically the glob component’s globEscape function in toolkit/packages/glob/src/internal-pattern.ts. The vulnerability is described as causing inefficient regular expression complexity (a Regular Expression Denial of Service, DoS risk). I...

5.3CVSS7.1AI score0.00226EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/22 3:40 p.m.7 views

CVE-2020-5890

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1 and BIG-IQ 5.2.0-7.1.0, when creating a QKView, credentials for binding to LDAP servers used for remote authentication of the BIG-IP administrative interface will not fully obfuscate if they contain whitespace...

5.5CVSS7.2AI score0.00133EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2025/04/04 12:0 a.m.12 views

Debian: Security Advisory (DSA-5890-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.2AI score0.00156EPSS
Exploits0References2
Circl
Circl
added 2024/12/02 9:16 p.m.0 views

CVE-2024-5890

creationtimestamp| type| source ---|---|--- 2024-12-02 21:16:10+00:00| seen| https://t.me/cvedetector/11812...

5.1CVSS4.8AI score0.00388EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/02 6:24 p.m.15 views

CVE-2024-5890 HTML Injection in the Assessment plugin

ServiceNow has addressed an HTML injection vulnerability that was identified in the Now Platform. This vulnerability could potentially enable an unauthenticated user to modify a web page or redirect users to another website. ServiceNow released updates to customers that addressed this...

5.1CVSS0.00388EPSS
Exploits0References1
Circl
Circl
added 2023/11/01 6:34 a.m.0 views

CVE-2023-5890

creationtimestamp| type| source ---|---|--- 2023-11-01 06:34:42+00:00| seen| https://t.me/cibsecurity/73282...

5.4CVSS4.5AI score0.00081EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2023/11/01 12:0 a.m.6 views

CVE-2023-5890 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

4.6CVSS5.3AI score0.00081EPSS
Exploits1References2
OSV
OSV
added 2023/11/01 12:0 a.m.9 views

CVE-2023-5890 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

4.6CVSS4.8AI score0.00081EPSS
Exploits1References4
Cvelist
Cvelist
added 2023/11/01 12:0 a.m.11 views

CVE-2023-5890 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

4.6CVSS5.5AI score0.00081EPSS
Exploits1References2
CVE
CVE
added 2023/11/01 12:0 a.m.46 views

CVE-2023-5890

CVE-2023-5890 affects pkp/pkp-lib (PKP Web Application Library) prior to version 3.3.0-16. The issue is a Stored Cross-site Scripting (XSS) vulnerability arising from unescaped input in the repository, leading to script injection in impacted sites. The public references consistently describe the ...

5.4CVSS4.8AI score0.00081EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/09/11 12:0 a.m.2 views

PT-2023-5890 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: Open5GS affected versions not specified Description: The issue is related to the lack of authentication in the Open5GS implementation of the GTP protocol for mobile networks. This allows a remote attacker to send an HTTP request to an Open5GS...

7.8CVSS7.4AI score0.00056EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2023/02/28 12:0 a.m.37 views

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Open vSwitch vulnerabilities (USN-5890-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5890-1 advisory. Qian Chen discovered that Open vSwitch incorrectly handled certain Organization Specific TLVs. A remote attacker could use this...

9.8CVSS8.7AI score0.00642EPSS
Exploits0References3
F5 Networks
F5 Networks
added 2023/02/21 6:35 p.m.27 views

K03318649: BIG-IP QKView vulnerability CVE-2020-5890

Security Advisory Description When creating a QKView, credentials for binding to LDAP servers used for remote authentication of the BIG-IP administrative interface will not fully obfuscate if they contain whitespace. CVE-2020-5890 Impact The BIG-IP system may disclose sensitive information used f...

5.5CVSS5.7AI score0.00133EPSS
Exploits0Affected Software12
NVD
NVD
added 2020/04/30 10:15 p.m.13 views

CVE-2020-5890

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1 and BIG-IQ 5.2.0-7.1.0, when creating a QKView, credentials for binding to LDAP servers used for remote authentication of the BIG-IP administrative interface will not fully obfuscate if they contain whitespace...

5.5CVSS5.7AI score0.00133EPSS
Exploits0References1
Rows per page
Query Builder