Lucene search
+L

7251 matches found

FreeBSD
FreeBSD
added 2022/02/17 12:0 a.m.34 views

Qt5 -- QProcess unexpected search path

The Qt Company reports: Recently, the Qt Project's security team was made aware of an issue regarding QProcess and determined it to be a security issue on Unix-based platforms only. We do not believe this to be a considerable risk for applications as the likelihood of it being triggered is minima...

7.8CVSS7.6AI score0.00331EPSS
SaveExploits0References1
QT
QT
added 2022/02/17 12:0 a.m.61 views

Security advisory: QProcess

Recently, the Qt Project's security team was made aware of an issue regarding QProcess and determined it to be a security issue on Unix-based platforms only. We do not believe this to be a considerable risk for applications as the likelihood of it being triggered is minimal. Specifically, the...

7.2CVSS0.3AI score0.00331EPSS
SaveExploits0
Prion
Prion
added 2022/02/16 10:15 p.m.15 views

Design/Logic Flaw

Forms generated by JQueryForm.com before 2022-02-05 if file-upload capability is enabled allow remote unauthenticated attackers to upload executable files and achieve remote code execution. This occurs because file-extension checks occur on the client side, and because not all executable content...

6.8CVSS8.1AI score0.02596EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/02/16 9:15 p.m.6 views

CVE-2022-25265

In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 e.g., with GCC 3.2.2 and Linux kernel 2.4.20. This can cause execution of bytes located in supposedly non-executable regions of a file...

7.8CVSS7AI score0.01054EPSS
SaveExploits1References4
OSV
OSV
added 2022/02/16 9:15 p.m.9 views

DEBIAN-CVE-2022-25265

In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 e.g., with GCC 3.2.2 and Linux kernel 2.4.20. This can cause execution of bytes located in supposedly non-executable regions of a file...

7.8CVSS6.6AI score0.01054EPSS
SaveExploits1References1
OSV
OSV
added 2022/02/16 9:15 p.m.13 views

CVE-2022-25265

In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 e.g., with GCC 3.2.2 and Linux kernel 2.4.20. This can cause execution of bytes located in supposedly non-executable regions of a file...

7.8CVSS7.9AI score
SaveExploits0References3
NVD
NVD
added 2022/02/16 9:15 p.m.29 views

CVE-2022-25265

In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 e.g., with GCC 3.2.2 and Linux kernel 2.4.20. This can cause execution of bytes located in supposedly non-executable regions of a file...

7.8CVSS0.01054EPSS
SaveExploits1References3
OSV
OSV
added 2022/02/16 9:15 p.m.14 views

UBUNTU-CVE-2022-25265

In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 e.g., with GCC 3.2.2 and Linux kernel 2.4.20. This can cause execution of bytes located in supposedly non-executable regions of a file...

7.8CVSS6.8AI score0.01054EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2022/02/16 8:30 p.m.41 views

CVE-2022-25265

In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 e.g., with GCC 3.2.2 and Linux kernel 2.4.20. This can cause execution of bytes located in supposedly non-executable regions of a file...

7.6AI score0.01054EPSS
SaveExploits1References3
CVE
CVE
added 2022/02/16 8:30 p.m.294 views

CVE-2022-25265

CVE-2022-25265 is a Linux kernel issue affecting binaries built around 2003 (e.g., GCC 3.2.2 with Linux 2.4.20) that can allow local attackers to execute code by exploiting exec-all attribute in non-executable regions. Connected advisories show the vulnerability being addressed as part of kernel/...

7.8CVSS7.3AI score0.01054EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
added 2022/02/16 8:30 p.m.90 views

CVE-2022-25265

In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 e.g., with GCC 3.2.2 and Linux kernel 2.4.20. This can cause execution of bytes located in supposedly non-executable regions of a file...

7.8CVSS7AI score0.01054EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2022/02/16 12:0 a.m.11 views

The vulnerability of the image dragging function in Mozilla Firefox browsers allows a hacker to execute arbitrary code.

The vulnerability of the image dragging function in Mozilla Firefox browsers is related to insufficient warnings about dangerous actions. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by converting the image copied by the user into an executable script...

7.6CVSS7.3AI score0.00926EPSS
SaveExploits1References10Affected Software5
RedHat Linux
RedHat Linux
added 2022/02/15 10:56 a.m.3 views

Mozilla: Drag and dropping an image could have resulted in the dropped object being an executable

The Mozilla Foundation Security Advisory describes this flaw as: If a user was convinced to drag and drop an image to their desktop or other folder, the resulting object could have been changed into an executable script, which would have run arbitrary code after the user clicked it...

8.8CVSS7.5AI score0.00926EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2022/02/15 10:41 a.m.5 views

Mozilla: Drag and dropping an image could have resulted in the dropped object being an executable

The Mozilla Foundation Security Advisory describes this flaw as: If a user was convinced to drag and drop an image to their desktop or other folder, the resulting object could have been changed into an executable script, which would have run arbitrary code after the user clicked it...

8.8CVSS7.5AI score0.00926EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2022/02/15 10:37 a.m.6 views

Mozilla: Drag and dropping an image could have resulted in the dropped object being an executable

The Mozilla Foundation Security Advisory describes this flaw as: If a user was convinced to drag and drop an image to their desktop or other folder, the resulting object could have been changed into an executable script, which would have run arbitrary code after the user clicked it...

8.8CVSS7.5AI score0.00926EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2022/02/15 10:36 a.m.14 views

Mozilla: Drag and dropping an image could have resulted in the dropped object being an executable

The Mozilla Foundation Security Advisory describes this flaw as: If a user was convinced to drag and drop an image to their desktop or other folder, the resulting object could have been changed into an executable script, which would have run arbitrary code after the user clicked it...

8.8CVSS7.5AI score0.00926EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2022/02/15 10:20 a.m.5 views

Mozilla: Drag and dropping an image could have resulted in the dropped object being an executable

The Mozilla Foundation Security Advisory describes this flaw as: If a user was convinced to drag and drop an image to their desktop or other folder, the resulting object could have been changed into an executable script, which would have run arbitrary code after the user clicked it...

8.8CVSS7.5AI score0.00926EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2022/02/15 1:57 a.m.20 views

On Windows, `git-sizer` might run a `git` executable within the repository being analyzed

Impact On Windows, if git-sizer is run against a non-bare repository, and that repository has an executable called git.exe, git.bat, etc., then that executable might be run by git-sizer rather than the system git executable. An attacker could try to use social engineering to get a victim to run...

0.5AI score
SaveExploits0References3Affected Software1
RedHat Linux
RedHat Linux
added 2022/02/14 9:15 a.m.8 views

Mozilla: Drag and dropping an image could have resulted in the dropped object being an executable

The Mozilla Foundation Security Advisory describes this flaw as: If a user was convinced to drag and drop an image to their desktop or other folder, the resulting object could have been changed into an executable script, which would have run arbitrary code after the user clicked it...

8.8CVSS7.5AI score0.00926EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2022/02/14 8:53 a.m.6 views

Mozilla: Drag and dropping an image could have resulted in the dropped object being an executable

The Mozilla Foundation Security Advisory describes this flaw as: If a user was convinced to drag and drop an image to their desktop or other folder, the resulting object could have been changed into an executable script, which would have run arbitrary code after the user clicked it...

8.8CVSS7.5AI score0.00926EPSS
SaveExploits1References6
Rows per page
Query Builder