Lucene search
+L

519 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:25 p.m.•6 views

Malicious code in adaptivecards-extras-designer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4f2d2e491d346972ba6e1b2cf5cbb2a5302c1059e687739fd933c26b8df4560 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2022/05/20 10:42 p.m.•37 views

CVE-2020-12755

fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a cacheAuthentication call even if the user had not set the keepPassword option. This may lead to unintended KWallet storage of a password...

3.3CVSS1.5AI score0.00371EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•25 views

Mageia: Security Advisory (MGASA-2018-0477)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.01455EPSS
SaveExploits0References5
Amazon
Amazon
•added 2021/11/18 12:00 a.m.•12 views

Important: runc

Issue Overview: The runc package is vulnerable to a symlink exchange attack whereby an attacker can request a seemingly innocuous container configuration that results in the host filesystem being bind-mounted into the container. The highest threat from this vulnerability is to data confidentialit...

8.5CVSS7AI score0.06604EPSS
SaveExploits0
Amazon
Amazon
•added 2021/11/18 12:00 a.m.•21 views

Medium: containerd

Issue Overview: A flaw was found in containerd. Credentials may be leaked during an image pull. CVE-2020-15157 Affected Packages: containerd Note: This advisory is applicable to Amazon Linux 2 - Docker Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ section for t...

6.1CVSS6.4AI score0.02299EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2021/10/07 12:00 a.m.•44 views

Photon OS 4.0: Kubernetes PHSA-2021-4.0-0112

An update of the kubernetes package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0112. The text itself is copyright C VMware, Inc...

8.8CVSS6.9AI score0.07964EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/30 12:00 a.m.•5 views

CVE-2021-36692: Divide By Zero

libjxl v0.3.7 is affected by a Divide By Zero in issue in lib/extras/codecapng.cc jxl::DecodeImageAPNG. When encoding a malicous APNG file using cjxl, an attacker can trigger a denial of service...

6.5CVSS5.7AI score0.01221EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/07/15 12:00 a.m.•46 views

Radare2-extras has an unspecified vulnerability

radare2-extras is an application. Additional plugins for radare2. radare2-extras has a security vulnerability in the rasmswfdisass function, which can be exploited by attackers to execute arbitrary code or conduct DOS attacks...

9.8CVSS5.8AI score0.02647EPSS
SaveExploits0References1
NVD
NVD
•added 2021/07/14 10:15 p.m.•21 views

CVE-2020-24133

A heap buffer overflow vulnerability in the rasmswfdisass function of Radare2-extras before commit e74a93c allows attackers to execute arbitrary code or carry out denial of service DOS attacks...

9.8CVSS0.02647EPSS
SaveExploits0References4
OSV
OSV
•added 2021/07/14 10:15 p.m.•27 views

CVE-2020-24133

A heap buffer overflow vulnerability in the rasmswfdisass function of Radare2-extras before commit e74a93c allows attackers to execute arbitrary code or carry out denial of service DOS attacks...

9.8CVSS8.3AI score
SaveExploits0References4
Prion
Prion
•added 2021/07/14 10:15 p.m.•29 views

Heap overflow

A heap buffer overflow vulnerability in the rasmswfdisass function of Radare2-extras before commit e74a93c allows attackers to execute arbitrary code or carry out denial of service DOS attacks...

7.5CVSS9.8AI score0.02647EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2021/07/14 9:18 p.m.•94 views

CVE-2020-24133

Radare2-extras is affected by a heap buffer overflow in the r_asm_swf_disass function, exploitable via inputs processed by that function. The vulnerability exists in versions before commit e74a93c and can lead to arbitrary code execution or denial of service. Mitigation: apply the patch from comm...

9.8CVSS9.8AI score0.02647EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2021/07/14 9:18 p.m.•30 views

CVE-2020-24133

A heap buffer overflow vulnerability in the rasmswfdisass function of Radare2-extras before commit e74a93c allows attackers to execute arbitrary code or carry out denial of service DOS attacks...

9.8AI score0.02647EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/07/14 12:00 a.m.•16 views

radare2-extras 缓冲区错误漏洞

radare2-extras is an application. Additional plugins for radare2. radare2-extras has a security vulnerability in the rasmswfdisass function, which can be exploited by attackers to execute arbitrary code or conduct DOS attacks...

9.8CVSS6.1AI score0.02647EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/07/14 12:00 a.m.•20 views

PT-2021-11005 · Unknown · Radare2-Extras

Name of the Vulnerable Software and Affected Versions: Radare2-extras versions before commit e74a93c Description: A heap buffer overflow vulnerability in the r asm swf disass function allows attackers to execute arbitrary code or carry out denial of service DOS attacks. Recommendations: For...

9.8CVSS9.9AI score0.02647EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/14 12:00 a.m.•5 views

CVE-2020-24133: Out-of-bounds Write

A heap buffer overflow vulnerability in the rasmswfdisass function of Radare2-extras before commit e74a93c allows attackers to execute arbitrary code or carry out denial of service DOS attacks...

9.8CVSS6.8AI score0.02647EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2021/04/05 1:39 p.m.•202 views

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.7.5 security and bug fix update

Red Hat OpenShift Container Platform release 4.7.5 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which...

8.6CVSS6.6AI score0.03425EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2020/10/27 12:00 a.m.•40 views

Fedora 33 : 1:livecd-tools / createrepo_c / dnf-plugins-core / etc (2020-b40fc174b5)

createrepoc 0.16.1 - Update to 0.16.1 - Add the section number to the manual pages - Parse xml snippet in smaller parts RhBug:1859689 - Add module metadata support to createrepoc RhBug:1795936 librepo 1.12.1 - Update to 1.12.1 - Validate path read from repomd.xml RhBug:1868639 libdnf 0.54.2 -...

8.5CVSS6.5AI score0.02526EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/10/27 12:00 a.m.•11 views

Fedora: Security Advisory for dnf-plugins-extras (FEDORA-2020-b40fc174b5)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.5CVSS7.9AI score0.02526EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/10/19 12:00 a.m.•11 views

Fedora: Security Advisory for dnf-plugins-extras (FEDORA-2020-5d9f0ce2b3)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.5CVSS7.9AI score0.02526EPSS
SaveExploits0References2
Rows per page
Query Builder