Lucene search
+L

8879 matches found

Citrix
Citrix
added 2022/03/27 12:00 a.m.10 views

Getting error: Couldn't agree a key exchange algorithm when accessing ADM CLI

Getting error: Couldn't agree a key exchange algorithm when accessing the ADM CLI after upgrading to 13.0.64.35...

7AI score
SaveExploits0
Fedora
Fedora
added 2022/03/26 3:44 p.m.34 views

[SECURITY] Fedora 36 Update: httpie-3.1.0-1.fc36

HTTPie is a CLI HTTP utility built out of frustration with existing tools. The goal is to make CLI interaction with HTTP-based services as human-friendly as possible. HTTPie does so by providing an http command that allows for issuing arbitrary HTTP requests using a simple and natural syntax and...

6.5CVSS6.6AI score0.0165EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2022/03/24 3:21 p.m.54 views

Moderate: Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.21.0

Release of OpenShift Serverless Client kn 1.21.0 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

7.5CVSS6.6AI score0.03958EPSS
SaveExploits0References9
OpenVAS
OpenVAS
added 2022/03/23 12:00 a.m.26 views

Fedora: Security Advisory for httpie (FEDORA-2022-cfcad08594)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS6.5AI score0.0165EPSS
SaveExploits1References2
OSV
OSV
added 2022/03/18 11:15 p.m.9 views

CVE-2022-26265

Contao Managed Edition v1.5.0 was discovered to contain a remote command execution RCE vulnerability via the component phpcli parameter...

9.8CVSS5.9AI score0.30367EPSS
SaveExploits4References1
vulnersOsv
vulnersOsv
added 2022/03/18 6:57 p.m.5 views

@chainsafe/lodestar (>=0.28.2-dev.9, <=0.29.3-dev.5), @chainsafe/lodestar-cli (>=0.28.2-dev.0, <=0.28.2-dev.18) potentially affected by CVE-2022-24759 via @chainsafe/libp2p-noise (4.1.0)

@chainsafe/libp2p-noise NPM version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @chainsafe/libp2p-noise and may be impacted: - @chainsafe/lodestar =0.28.2-dev.9, =0.28.2-dev.0, =0.28.2-dev.18 Source cves: CVE-2022-24759 Source advisory:...

8.1CVSS7.6AI score0.00499EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/03/18 6:15 p.m.7 views

CVE-2022-27245

An issue was discovered in MISP before 2.4.156. app/Model/Server.php does not restrict generateServerSettings to the CLI. This could lead to SSRF...

8.8CVSS5.9AI score0.00895EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/03/18 5:59 p.m.37 views

CVE-2020-15388

A vulnerability in the Brocade Fabric OS before Brocade Fabric OS v9.0.1a, v8.2.3, v8.2.0CBN4, and v7.4.2h could allow an authenticated CLI user to abuse the history command to write arbitrary content to files...

6.6AI score0.00703EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/03/18 5:14 p.m.24 views

CVE-2022-27245

An issue was discovered in MISP before 2.4.156. app/Model/Server.php does not restrict generateServerSettings to the CLI. This could lead to SSRF...

8.8AI score0.00895EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/03/18 12:00 a.m.11 views

Contao 操作系统命令注入漏洞

Contao is an open source content management system CMS developed using PHP. The system supports search engines, rights management, and CSS frameworks. Contao Managed Edition version 1.5.0 suffers from an operating system command injection vulnerability, which stems from a Remote Command Execution...

9.8CVSS8.3AI score0.30367EPSS
SaveExploits4References2
Krebs on Security
Krebs on Security
added 2022/03/17 10:33 p.m.22 views

Pro-Ukraine ‘Protestware’ Pushes Antiwar Ads, Geo-Targeted Malware

Researchers are tracking a number of open-source "protestware" projects on GitHub that have recently altered their code to display "Stand with Ukraine" messages for users, or basic facts about the carnage in Ukraine. The group also is tracking several code packages that were recently modified to...

SaveExploits0
Fedora
Fedora
added 2022/03/17 3:46 p.m.34 views

[SECURITY] Fedora 35 Update: httpie-3.1.0-1.fc35

HTTPie is a CLI HTTP utility built out of frustration with existing tools. The goal is to make CLI interaction with HTTP-based services as human-friendly as possible. HTTPie does so by providing an http command that allows for issuing arbitrary HTTP requests using a simple and natural syntax and...

6.5CVSS6.6AI score0.0165EPSS
SaveExploits1
Fedora
Fedora
added 2022/03/17 2:42 p.m.40 views

[SECURITY] Fedora 34 Update: httpie-3.1.0-1.fc34

HTTPie is a CLI HTTP utility built out of frustration with existing tools. The goal is to make CLI interaction with HTTP-based services as human-friendly as possible. HTTPie does so by providing an http command that allows for issuing arbitrary HTTP requests using a simple and natural syntax and...

6.5CVSS6.6AI score0.0165EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2022/03/16 3:22 p.m.41 views

Moderate: Red Hat Security Advisory: redhat-ds:11.3 security and bug fix update

An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.3 for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

7.5CVSS6.7AI score0.02014EPSS
SaveExploits0References7
CVE
CVE
added 2022/03/16 2:04 p.m.102 views

CVE-2022-0982

The CVE-2022-0982 entry concerns Accel-PPP (Accel-Ppp) server code: telnet_input_char copies user input cmdline_len into a fixed buffer b-&gt;buf without bounds checking, causing memory corruption. This vulnerability can be remotely triggered when a server connects to a malicious client, enabling...

9.8CVSS9.8AI score0.01235EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2022/03/10 6:17 p.m.29 views

GHSA-4CX6-FJ7J-PJX9 Code injection in Stripe CLI on windows

Impact A vulnerability in Stripe CLI exists on Windows when certain commands are run in a directory where an attacker has planted files. The commands are stripe login, stripe config -e, stripe community, and stripe open. MacOS and Linux are unaffected. An attacker who successfully exploits the...

7.7CVSS7.3AI score0.00334EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2022/03/10 6:17 p.m.45 views

Code injection in Stripe CLI on windows

Impact A vulnerability in Stripe CLI exists on Windows when certain commands are run in a directory where an attacker has planted files. The commands are stripe login, stripe config -e, stripe community, and stripe open. MacOS and Linux are unaffected. An attacker who successfully exploits the...

7.7CVSS3AI score0.00334EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
added 2022/03/10 3:05 a.m.32 views

Arbitrary Code Execution

github.com/stripe/stripe-cli is vulnerable to Arbitrary Code Execution. An attacker can inject and execute malicious commands through the stripe login, stripe config -e, stripe community, and stripe open in windows...

7.7CVSS7AI score0.00334EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2022/03/09 11:15 p.m.62 views

CVE-2022-24753

Stripe CLI is a command-line tool for the Stripe eCommerce platform. A vulnerability in Stripe CLI exists on Windows when certain commands are run in a directory where an attacker has planted files. The commands are stripe login, stripe config -e, stripe community, and stripe open. MacOS and Linu...

7.7CVSS0.00334EPSS
SaveExploits0References2
Prion
Prion
added 2022/03/09 11:15 p.m.15 views

Code injection

Stripe CLI is a command-line tool for the Stripe eCommerce platform. A vulnerability in Stripe CLI exists on Windows when certain commands are run in a directory where an attacker has planted files. The commands are stripe login, stripe config -e, stripe community, and stripe open. MacOS and Linu...

4.4CVSS7AI score0.00334EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder