Lucene search
+L

191 matches found

OSV
OSV
added 2024/06/25 1:32 p.m.10 views

MAL-2024-4804 Malicious code in bip-uils (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:32 p.m.7 views

Malicious code in bip-u8ls (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:32 p.m.7 views

Malicious code in bip-uils (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:32 p.m.8 views

Malicious code in bip-uitls (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0References2
OSV
OSV
added 2024/06/25 1:32 p.m.12 views

MAL-2024-4805 Malicious code in bip-uitls (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/12 12:00 a.m.12 views

MegaBIP Security Vulnerabilities

MegaBIP is a software for creating BIP websites. A security vulnerability exists in MegaBIP 5.10 and earlier versions, which stems from an arbitrary file upload vulnerability that allows an attacker to upload any file to the server without authentication...

9.8CVSS7AI score0.00689EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/06/12 12:00 a.m.10 views

MegaBIP Security Vulnerabilities

MegaBIP is a software used to create BIP websites. A security vulnerability exists in MegaBIP that stems from the presence of a remote code execution vulnerability that allows an attacker to execute arbitrary code on the server without authentication by placing the attacker on the server...

9.8CVSS8.7AI score0.01126EPSS
SaveExploits0References5
NVD
NVD
added 2024/06/06 6:15 p.m.26 views

CVE-2024-5509

Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target mus...

7.8CVSS0.00528EPSS
SaveExploits0References2
CVE
CVE
added 2024/06/06 5:51 p.m.75 views

CVE-2024-5509

CVE-2024-5509 concerns Luxion KeyShot: a flaw in BIP file parsing enables an attacker to load a library from an unsecured location, leading to remote code execution . The vulnerability arises from an uncontrolled search path element, allowing code execution in the context of the current process. ...

7.8CVSS8AI score0.00528EPSS
SaveExploits0References2Affected Software3
Vulnrichment
Vulnrichment
added 2024/06/06 5:51 p.m.23 views

CVE-2024-5509 Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability

Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target mus...

7.8CVSS7.6AI score0.00528EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/06/06 5:51 p.m.41 views

CVE-2024-5509 Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability

Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target mus...

7.8CVSS0.00528EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2024/05/31 12:00 a.m.27 views

Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BIP...

7.8CVSS7.2AI score0.00528EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/08 5:51 p.m.25 views

GO-2024-2818 Consensus failures in github.com/btcsuite/btcd

Incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112 making btcd susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of funds...

7.5CVSS7.4AI score0.00558EPSS
SaveExploits0References5
Veracode
Veracode
added 2024/05/07 7:58 a.m.24 views

Race Condition

btcd is vulnerable to a Race Condition. The vulnerability is due to the incorrect implementation of consensus rules as outlined in BIP 68 and BIP 112, specifically by treating the transaction version as a signed integer instead of unsigned. This misinterpretation can lead to a chain split and...

7.5CVSS6.7AI score0.00558EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2024/05/05 3:30 a.m.23 views

GHSA-3JGF-R68H-XFQM btcd susceptible to consensus failures

btcd before 0.24.0 does not correctly implement the consensus rules outlined in BIP 68 and BIP 112, making it susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of...

7.5CVSS7.4AI score0.00558EPSS
SaveExploits0References8
NVD
NVD
added 2024/05/05 1:15 a.m.22 views

CVE-2024-34478

btcd before 0.24.0 does not correctly implement the consensus rules outlined in BIP 68 and BIP 112, making it susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of...

7.5CVSS6.4AI score0.00558EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/05/05 12:00 a.m.16 views

CVE-2024-34478

btcd before 0.24.0 does not correctly implement the consensus rules outlined in BIP 68 and BIP 112, making it susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of...

6.7AI score0.00558EPSS
SaveExploits0References3
CVE
CVE
added 2024/05/05 12:00 a.m.52 views

CVE-2024-34478

CVE-2024-34478 affects btcd before 0.24.0, where the software does not correctly implement BIP 68/BIP 112 consensus rules. The core issue is treating the transaction version as a signed integer instead of unsigned, which can cause consensus failures, potentially leading to a chain split and loss ...

7.5CVSS6.6AI score0.00558EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/05/05 12:00 a.m.12 views

CVE-2024-34478

btcd before 0.24.0 does not correctly implement the consensus rules outlined in BIP 68 and BIP 112, making it susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of...

7.5CVSS7.4AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/05/04 12:00 a.m.15 views

PT-2024-25929 · Btcd · Btcd

Name of the Vulnerable Software and Affected Versions: btcd versions prior to 0.24.0 Description: The issue arises from an incorrect implementation of the consensus rules outlined in BIP 68 and BIP 112, making btcd susceptible to consensus failures. Specifically, it uses the transaction version a...

7.5CVSS7.2AI score0.00558EPSS
SaveExploits0References16
Rows per page
Query Builder