Lucene search
+L

8736 matches found

BDU FSTEC
BDU FSTEC
•added 2022/09/16 12:00 a.m.•14 views

The vulnerability of the shell command line interface in IPython’s interactive computing environment allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the shell command line interface for interactive IPython computations is related to access control errors. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS7.5AI score0.00652EPSS
SaveExploits1References15Affected Software6
OpenVAS
OpenVAS
•added 2022/09/15 12:00 a.m.•34 views

Fedora: Security Advisory for ImageMagick (FEDORA-2022-776925f086)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

3.3CVSS4.3AI score0.00475EPSS
SaveExploits1References2
Fedora
Fedora
•added 2022/09/13 1:30 a.m.•54 views

[SECURITY] Fedora 36 Update: ImageMagick-6.9.12.62-1.fc36

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

3.3CVSS0.8AI score0.00475EPSS
SaveExploits1
Broadcom
Broadcom
•added 2022/09/13 12:00 a.m.•18 views

CVE-2022-33182. Privilege escalation using switch commands "supportlink", "firmwaredownload", "portcfgupload","license", and "fosexec".

Security Advisory ID : BSA-2022-2084 Component : FOS Revision : 2.0 A privilege escalation vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, could allow a local authenticated user to escalate its privilege to root using switch commands "supportlink...

7.8CVSS7.2AI score0.002EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/09/13 12:00 a.m.•13 views

PT-2022-5068 Ā· Brocade Ā· Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.1.0 Brocade Fabric OS version 9.0.1e and earlier Brocade Fabric OS version 8.2.3c and earlier Brocade Fabric OS version 8.2.0cbn5 and earlier Brocade Fabric OS version 7.4.2.j and earlier Description: The...

5.5CVSS5.1AI score0.00221EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2022/09/13 12:00 a.m.•20 views

PT-2022-5198 Ā· Brocade Ā· Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.1.0 Brocade Fabric OS versions prior to 9.0.1e Brocade Fabric OS versions prior to 8.2.3c Brocade Fabric OS versions prior to 7.4.2j Description: A vulnerability in Brocade Fabric OS CLI could allow a loc...

8.8CVSS8.5AI score0.00189EPSS
SaveExploits0References8
Kitploit
Kitploit
•added 2022/09/12 11:30 a.m.•68 views

PersistenceSniper - Powershell Script That Can Be Used By Blue Teams, Incident Responders And System Administrators To Hunt Persistences Implanted In Windows Machines

PersistenceSniper is a Powershell script that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. The script is also available on Powershell Gallery. --- The Why Why writing such a tool, you might ask. Well, for starters, I...

7.5AI score
SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2022/09/09 12:00 a.m.•16 views

The vulnerability of the command-line interface (CLI) of the Cisco Nexus Dashboard, a platform for analytics and automation of cloud network management, allows a attacker to re-write any files.

The vulnerability of the command-line interface CLI of the Cisco Nexus Dashboard platform for analyzing and automating cloud network management involves insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to re-write any files on the vulnerable devic...

6.8CVSS6.5AI score0.01065EPSS
SaveExploits0References3
OSV
OSV
•added 2022/09/08 5:27 p.m.•12 views

CLSA-2022-1662658022 Fixed CVE-2022-29154 in rsync

CVE-2022-29154: refactoring due to broken command line arguments parsing...

7.4CVSS7.1AI score0.02313EPSS
SaveExploits1References1
OSV
OSV
•added 2022/09/08 5:18 p.m.•13 views

CLSA-2022-1662657502 Fixed CVE-2022-29154 in rsync

CVE-2022-29154: refactoring due to broken command line arguments parsing...

7.4CVSS7.1AI score0.02313EPSS
SaveExploits1References1
OSV
OSV
•added 2022/09/08 5:09 p.m.•13 views

CLSA-2022-1662656989 Fixed CVE-2022-29154 in rsync

CVE-2022-29154: refactoring due to broken command line arguments parsing...

7.4CVSS7.1AI score0.02313EPSS
SaveExploits1References1
NVD
NVD
•added 2022/09/07 10:15 p.m.•24 views

CVE-2022-36082

mangadex-downloader is a command-line tool to download manga from MangaDex. When using file: command and is a web URL location http, https, mangadex-downloader between versions 1.3.0 and 1.7.2 will try to open and read a file in local disk for each line of website contents. Version 1.7.2 contains...

5.3CVSS0.00701EPSS
SaveExploits0References2
OSV
OSV
•added 2022/09/07 10:15 p.m.•40 views

PYSEC-2022-264

mangadex-downloader is a command-line tool to download manga from MangaDex. When using file: command and is a web URL location http, https, mangadex-downloader between versions 1.3.0 and 1.7.2 will try to open and read a file in local disk for each line of website contents. Version 1.7.2 contains...

5.3CVSS1AI score0.00701EPSS
SaveExploits0References2
CVE
CVE
•added 2022/09/07 9:35 p.m.•87 views

CVE-2022-36082

mangadex-downloader is affected by a vulnerability where, when using the file: command with a web URL location (http, https), versions 1.3.0 through 1.7.2 will attempt to open and read a local disk file for each line of website contents. The issue is mitigated by a patch in version 1.7.2. The pro...

5.3CVSS5.1AI score0.00701EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/09/07 9:35 p.m.•36 views

CVE-2022-36082 mangadex-downloader vulnerable to unauthorized file reading

mangadex-downloader is a command-line tool to download manga from MangaDex. When using file: command and is a web URL location http, https, mangadex-downloader between versions 1.3.0 and 1.7.2 will try to open and read a file in local disk for each line of website contents. Version 1.7.2 contains...

5.3CVSS5.5AI score0.00701EPSS
SaveExploits0References2
Prion
Prion
•added 2022/09/06 8:15 p.m.•28 views

Out-of-bounds

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when parsing Mach-O files. A user opening a malicious Mach-O file could be affected by this vulnerability, allowing an attacker to execute code on the...

4.4CVSS7.7AI score0.00385EPSS
SaveExploits0References5Affected Software1
attackerkb
attackerkb
•added 2022/09/06 6:15 p.m.•8 views

CVE-2022-29058

An improper neutralization of special elements CWE-89 used in an OS command vulnerability CWE-78 in the command line interpreter of FortiAP 6.0.0 through 6.4.7, 7.0.0 through 7.0.3, 7.2.0, FortiAP-S 6.0.0 through 6.4.7, FortiAP-W2 6.0.0 through 6.4.7, 7.0.0 through 7.0.3, 7.2.0 and FortiAP-U 5.4....

7.8CVSS7.2AI score0.00494EPSS
SaveExploits0References2
OSV
OSV
•added 2022/09/06 6:15 p.m.•12 views

AZL-43347 CVE-2021-43565 affecting package cf-cli for versions less than 8.4.0-18

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server...

7.5CVSS6.8AI score0.01118EPSS
SaveExploits0References1
CVE
CVE
•added 2022/09/06 5:18 p.m.•105 views

CVE-2022-23682

Multiple vulnerabilities exist in the Aruba AOS-CX command line interface that could permit authenticated command injection, allowing an attacker to execute arbitrary commands as root and fully compromise the switch. Affected ArubaOS-CX versions are: 10.09.xxxx up to 10.09.1030, 10.08.xxxx up to ...

7.8CVSS8.2AI score0.00601EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/09/06 12:00 a.m.•45 views

CVE-2022-36041 Rizin Out-of-bounds Write vulnerability in Mach-O binary plugin

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when parsing Mach-O files. A user opening a malicious Mach-O file could be affected by this vulnerability, allowing an attacker to execute code on the...

7.8CVSS7.9AI score0.00385EPSS
SaveExploits0References5
Rows per page
Query Builder