468 matches found
kernel security and bug fix update
An update is available for kernel. This update affects Rocky Linux SIG Cloud 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux...
PT-2023-35951 · Git +1 · Php
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 4 crash type. The crash state involves several functions: zend ast evaluate inner, zend ast evaluate e...
SUSE CVE-2018-19838
In LibSass prior to 3.5.5, functions inside ast.cpp for IMPLEMENTASTOPERATORS expansion allow attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, as demonstrated by recursive calls involving clone, cloneChildren, and copy...
Malicious Package
Overview ast-viewer is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
MAL-2022-1146 Malicious code in ast-viewer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3aab1e48587c9cef92ff9a160fe6e7502511f4c89a090194954839fabc50efb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ast-viewer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3aab1e48587c9cef92ff9a160fe6e7502511f4c89a090194954839fabc50efb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2022-37300 · Unknown · Javaparser
Name of the Vulnerable Software and Affected Versions: JavaParser affected versions not specified Description: The issue is related to a security exception in the JavaParser library. The crash occurs in the com.github.javaparser.ast.expr.FieldAccessExpr.accept and...
Tarfile: Exploiting the World With a 15-Year-Old Vulnerability
Tarfile: Exploiting the World With a 15-Year-Old Vulnerability By Trellix · September 21, 2022 This story was also written by Kasimir Schulz While investigating an unrelated vulnerability, Trellix Advanced Research Center stumbled across a vulnerability in Python’s tarfile module. Initially we...
GO-2022-0316 Incorrect calculation in github.com/open-policy-agent/opa
Pretty-printing an AST that contains synthetic nodes can change the logic of some statements by reordering array literals...
CVE-2022-34879
Reflected Cross Site Scripting XSS vulnerabilities in AST Agent Time Sheet interface /vicidial/ASTagenttimesheet.php of VICIdial via agent, and searcharchiveddata parameters. This issue affects: VICIdial 2.14b0.5 versions prior to 3555...
CVE-2022-34877
SQL Injection vulnerability in AST Agent Time Sheet interface /vicidial/ASTagenttimesheet.php of VICIdial via the agent parameter allows attacker to spoof identity, tamper with existing data, allow the complete disclosure of all data on the system, destroy the data or make it otherwise unavailabl...
Sql injection
SQL Injection vulnerability in AST Agent Time Sheet interface /vicidial/ASTagenttimesheet.php of VICIdial via the agent parameter allows attacker to spoof identity, tamper with existing data, allow the complete disclosure of all data on the system, destroy the data or make it otherwise unavailabl...
Cross site scripting
Reflected Cross Site Scripting XSS vulnerabilities in AST Agent Time Sheet interface /vicidial/ASTagenttimesheet.php of VICIdial via agent, and searcharchiveddata parameters. This issue affects: VICIdial 2.14b0.5 versions prior to 3555...
CVE-2022-34879 VICIDial 2.14b0.5 SVN 3550 was discovered to contain multiple Cross Site Scripting (XSS) vulnerabilities at /vicidial/admin.php.
Reflected Cross Site Scripting XSS vulnerabilities in AST Agent Time Sheet interface /vicidial/ASTagenttimesheet.php of VICIdial via agent, and searcharchiveddata parameters. This issue affects: VICIdial 2.14b0.5 versions prior to 3555...
CVE-2022-34879
CVE-2022-34879 is a VICIdial XSS in the AST_agent_time_sheet.php interface, triggered via agent and search_archived_data parameters. The vulnerability affects VICIdial 2.14b0.5 versions prior to 3555. The connected records consistently describe a reflected XSS with client-side script execution ri...
CVE-2022-34877 VICIDial 2.14b0.5 SVN 3550 was discovered to contains a SQL injection vulnerability at /vicidial/AST_agent_time_sheet.php.
SQL Injection vulnerability in AST Agent Time Sheet interface /vicidial/ASTagenttimesheet.php of VICIdial via the agent parameter allows attacker to spoof identity, tamper with existing data, allow the complete disclosure of all data on the system, destroy the data or make it otherwise unavailabl...
CVE-2022-34877
CVE-2022-34877 is an authenticated SQL injection in VICIdial 2.14b0.5 prior to SVN revision 3555. The vulnerability occurs in the AST Agent Time Sheet interface via the /vicidial/AST_agent_time_sheet.php endpoint, specifically through the agent parameter, enabling an attacker to spoof identity, t...
GHSA-2M4X-4Q9J-W97G Denial of service in Open Policy Agent
An issue in the AST parser ast/compile.go of Open Policy Agent v0.10.2 allows attackers to cause a Denial of Service DoS via a crafted input...
Denial of service in Open Policy Agent
An issue in the AST parser ast/compile.go of Open Policy Agent v0.10.2 allows attackers to cause a Denial of Service DoS via a crafted input...