Lucene search
+L

8942 matches found

Github Security Blog
Github Security Blog
added 2023/10/20 3:18 p.m.183 views

Tauri's Updater Private Keys Possibly Leaked via Vite Environment Variables

Impact This advisory is not describing a vulnerability in the Tauri code base itself but a commonly used misconfiguration which could lead to leaking of the private key and updater key password into bundled Tauri applications using the Vite frontend in a specific configuration. The Tauri...

8.4CVSS5.5AI score0.00192EPSS
SaveExploits0References6Affected Software2
ATTACKERKB
ATTACKERKB
added 2023/10/20 8:15 a.m.5 views

CVE-2022-2441

The ImageMagick Engine plugin for WordPress is vulnerable to remote code execution via the 'clipath' parameter in versions up to, and including 1.7.5. This makes it possible for unauthenticated users to run arbitrary commands leading to remote command execution, granted they can trick a site...

8.8CVSS6.6AI score0.01065EPSS
SaveExploits2References7
Positive Technologies
Positive Technologies
added 2023/10/20 12:00 a.m.17 views

PT-2023-12753 · WordPress · Imagemagick Engine

Name of the Vulnerable Software and Affected Versions: ImageMagick Engine plugin for WordPress versions up to, and including 1.7.5 Description: The issue allows for remote code execution via the cli path parameter. This enables unauthenticated users to run arbitrary commands, potentially leading ...

8.8CVSS9AI score0.01065EPSS
SaveExploits2References12
Cvelist
Cvelist
added 2023/10/19 11:35 p.m.77 views

CVE-2023-46115 Updater Private Keys Possibly Leaked via Vite Environment Variables in tauri-cli

Tauri is a framework for building binaries for all major desktop platforms. This advisory is not describing a vulnerability in the Tauri code base itself but a commonly used misconfiguration which could lead to leaking of the private key and updater key password into bundled Tauri applications...

8.4CVSS8.7AI score0.00192EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2023/10/18 2:47 p.m.81 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.11.52 bug fix and security update

Red Hat OpenShift Container Platform release 4.11.52 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.11. Red Hat Product Security has rated this update as having a...

7.5CVSS7.1AI score0.99999EPSS
SaveExploits21References13
RedHat Linux
RedHat Linux
added 2023/10/18 3:01 a.m.58 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.39 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.39 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

7.5CVSS7.1AI score0.99999EPSS
SaveExploits21References21
Tenable Nessus
Tenable Nessus
added 2023/10/18 12:00 a.m.23 views

Cisco IOS XE Software Web UI Command Injection (cisco-sa-webui-cmdij-FzZAeXAy)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient...

8.8CVSS7.5AI score0.0074EPSS
SaveExploits0References4
Citrix
Citrix
added 2023/10/18 12:00 a.m.12 views

How to check the current TCP connection number of Gateway virtual server

It's not possible to check the current TCP connection number for gateway virtual server on NetScaler GUI, but it can be checked on the NetScaler CLI...

7AI score
SaveExploits0
Metasploit
Metasploit
added 2023/10/16 12:00 a.m.655 views

Cisco IOX XE unauthenticated Command Line Interface (CLI) execution

This module leverages CVE-2023-20198 against vulnerable instances of Cisco IOS XE devices which have the Web UI exposed. An attacker can execute arbitrary CLI commands with privilege level 15. You must specify the IOS command mode to execute a CLI command in. Valid modes are user, privileged, and...

10CVSS8.4AI score0.99571EPSS
SaveExploits27
NVD
NVD
added 2023/10/13 12:15 a.m.26 views

CVE-2023-44176

A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute a specific CLI commands leading to Denial of Service. Repeated actions by the attacker will create a sustained Denial of Service DoS condition. This issue affect...

5.5CVSS5.8AI score0.00163EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/13 12:15 a.m.13 views

CVE-2023-44177

A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos and Junos EVO allows a low privileged attacker to execute a specific CLI commands leading to Denial of Service. Repeated actions by the attacker will create a sustained Denial of Service DoS condition. This...

5.5CVSS5.9AI score0.00163EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/13 12:15 a.m.25 views

CVE-2023-44178

A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute a specific CLI commands leading to Denial of Service. Repeated actions by the attacker will create a sustained Denial of Service DoS condition. This issue affect...

5.5CVSS5.8AI score0.00163EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/13 12:15 a.m.27 views

Stack overflow

A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute a specific CLI commands leading to Denial of Service. Repeated actions by the attacker will create a sustained Denial of Service DoS condition. This issue affect...

1.7CVSS5.8AI score0.00163EPSS
SaveExploits0References1Affected Software2
Prion
Prion
added 2023/10/13 12:15 a.m.22 views

Stack overflow

A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos and Junos EVO allows a low privileged attacker to execute a specific CLI commands leading to Denial of Service. Repeated actions by the attacker will create a sustained Denial of Service DoS condition. This...

1.7CVSS5.8AI score0.00163EPSS
SaveExploits0References1Affected Software2
Prion
Prion
added 2023/10/13 12:15 a.m.26 views

Stack overflow

A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute a specific CLI commands leading to Denial of Service. Repeated actions by the attacker will create a sustained Denial of Service DoS condition. This issue affect...

1.7CVSS5.8AI score0.00163EPSS
SaveExploits0References1Affected Software2
CVE
CVE
added 2023/10/12 11:01 p.m.66 views

CVE-2023-44178

CVE-2023-44178 describes a stack-based buffer overflow in the CLI command processing of Juniper Networks Junos OS. A low-privilege attacker can trigger the overflow by executing specific CLI commands, resulting in a Denial of Service (DoS); repeated actions cause a sustained DoS. Affected Junos O...

5.5CVSS5.8AI score0.00163EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/12 11:01 p.m.23 views

CVE-2023-44178 Junos OS : Stack overflow vulnerability in CLI command processing

A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute a specific CLI commands leading to Denial of Service. Repeated actions by the attacker will create a sustained Denial of Service DoS condition. This issue affect...

5.5CVSS7.3AI score0.00163EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/12 11:00 p.m.109 views

CVE-2023-44176

CVE-2023-44176 is a stack-based buffer overflow in the CLI command processing of Juniper Networks Junos OS. The vulnerability allows a low-privileged attacker to execute specific CLI commands, triggering a Denial of Service with repeated actions potentially sustaining it. Affected Junos OS versio...

5.5CVSS5.8AI score0.00163EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/12 11:00 p.m.20 views

CVE-2023-44176 Junos OS : Stack overflow vulnerability in CLI command processing

A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute a specific CLI commands leading to Denial of Service. Repeated actions by the attacker will create a sustained Denial of Service DoS condition. This issue affect...

5.5CVSS7.3AI score0.00163EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/12 11:00 p.m.54 views

CVE-2023-44177 Junos OS and Junos OS Evolved: Stack overflow vulnerability in CLI command processing

A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos and Junos EVO allows a low privileged attacker to execute a specific CLI commands leading to Denial of Service. Repeated actions by the attacker will create a sustained Denial of Service DoS condition. This...

5.5CVSS6AI score0.00163EPSS
SaveExploits0References1
Rows per page
Query Builder