Lucene search
+L

1576 matches found

Cvelist
Cvelist
•added 2024/02/11 11:00 p.m.•59 views

CVE-2024-1433 KDE Plasma Workspace Theme File eventpluginsmanager.cpp enabledPlugins path traversal

A vulnerability, which was classified as problematic, was found in KDE Plasma Workspace up to 5.93.0. This affects the function EventPluginsManager::enabledPlugins of the file components/calendar/eventpluginsmanager.cpp of the component Theme File Handler. The manipulation of the argument pluginI...

3.1CVSS4.3AI score0.00788EPSS
SaveExploits0References3
Mend
Mend
•added 2024/02/11 11:00 p.m.•7 views

CVE-2024-1433

A vulnerability, which was classified as problematic, was found in KDE Plasma Workspace up to 5.93.0. This affects the function EventPluginsManager::enabledPlugins of the file components/calendar/eventpluginsmanager.cpp of the component Theme File Handler. The manipulation of the argument pluginI...

3.7CVSS0.00788EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/11 12:00 a.m.•7 views

CVE-2024-1433: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability, which was classified as problematic, was found in KDE Plasma Workspace up to 5.93.0. This affects the function EventPluginsManager::enabledPlugins of the file components/calendar/eventpluginsmanager.cpp of the component Theme File Handler. The manipulation of the argument pluginI...

3.7CVSS4.6AI score0.00788EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/11 12:00 a.m.•21 views

PT-2024-18043 · Kde · Kde Plasma Workspace

Name of the Vulnerable Software and Affected Versions: KDE Plasma Workspace versions up to 5.93.0 Description: A problematic vulnerability was found in KDE Plasma Workspace, affecting the function EventPluginsManager::enabledPlugins of the file components/calendar/eventpluginsmanager.cpp of the...

3.7CVSS4.5AI score0.00788EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2024/02/02 12:00 a.m.•18 views

PT-2024-17340 · Unknown · Hyper Cdcatalog

Name of the Vulnerable Software and Affected Versions: Hyper CdCatalog version 2.3.1 Description: A problematic issue was found in the HCF File Handler component, leading to denial of service. The manipulation can be exploited locally. The issue has been publicly disclosed and may be used for...

5.5CVSS6.9AI score0.00419EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/02 12:00 a.m.•7 views

CVE-2024-1191: Improper Resource Shutdown or Release

A vulnerability was found in Hyper CdCatalog 2.3.1. It has been classified as problematic. This affects an unknown part of the component HCF File Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be...

5.5CVSS5AI score0.00419EPSS
SaveExploits1References2
Veracode
Veracode
•added 2024/01/29 9:51 a.m.•27 views

Insecure Deserialization

temporai is vulnerable to Insecure Deserialization. The vulnerability is caused due to a missing validation/sanitization while deserializing user provided data in function loadfromfile of the component PKL File Handler within utils/serialization.py. An attacker can exploit this remotely to...

8.8CVSS6.7AI score0.00668EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
•added 2024/01/29 8:15 a.m.•34 views

Insecure Deserialization

synthcity is vulnerable to Insecure Deserialization. The vulnerability is caused due to a missing validation/sanitization while deserializing user provided data in the loadfromfile function of the PKL File Handler component within utils/serialization.py...

9.8CVSS6.8AI score0.00684EPSS
SaveExploits0References5Affected Software1
osv-debian
osv-debian
•added 2024/01/27 1:15 p.m.•15 views

DEBIAN-CVE-2024-0962

A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function getsplitentry of the file src/coaposcore.c of the component Configuration File Handler. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely...

7.8CVSS6.7AI score0.00757EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
•added 2024/01/27 1:15 p.m.•92 views

CVE-2024-0962

A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function getsplitentry of the file src/coaposcore.c of the component Configuration File Handler. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely...

7.5CVSS7.1AI score0.00757EPSS
SaveExploits1
osv-ubuntu
osv-ubuntu
•added 2024/01/27 1:15 p.m.•20 views

UBUNTU-CVE-2024-0962

A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function getsplitentry of the file src/coaposcore.c of the component Configuration File Handler. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely...

7.8CVSS5.9AI score0.00757EPSS
SaveExploits1References5
Prion
Prion
•added 2024/01/27 1:15 p.m.•25 views

Stack overflow

A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function getsplitentry of the file src/coaposcore.c of the component Configuration File Handler. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely...

7.5CVSS7.2AI score0.00757EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2024/01/27 12:31 p.m.•115 views

CVE-2024-0962

CVE-2024-0962 affects obgm libcoap 4.3.4. The vulnerability is in the function get_split_entry of src/coap_oscore.c (Configuration File Handler) and leads to a stack-based buffer overflow. The issue is exploitable remotely according to the description, and public disclosure of the exploit is note...

7.8CVSS7.6AI score0.00757EPSS
SaveExploits1References5Affected Software1
osv-cve
osv-cve
•added 2024/01/27 12:31 p.m.•34 views

CVE-2024-0962 obgm libcoap Configuration File coap_oscore.c get_split_entry stack-based overflow

A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function getsplitentry of the file src/coaposcore.c of the component Configuration File Handler. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely...

6.3CVSS6.8AI score
SaveExploits0References7
Mend
Mend
•added 2024/01/27 12:31 p.m.•7 views

CVE-2024-0962

A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function getsplitentry of the file src/coaposcore.c of the component Configuration File Handler. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely...

7.8CVSS0.00757EPSS
SaveExploits1References8
Debian CVE
Debian CVE
•added 2024/01/27 12:31 p.m.•80 views

CVE-2024-0962

A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function getsplitentry of the file src/coaposcore.c of the component Configuration File Handler. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely...

7.8CVSS6.5AI score0.00757EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2024/01/27 12:00 a.m.•14 views

PT-2024-15942

Name of the Vulnerable Software and Affected Versions: obgm libcoap version 4.3.4 Description: A critical issue has been found in the function get split entry of the file src/coap oscore.c of the component Configuration File Handler. This issue leads to a stack-based buffer overflow. The attack c...

7.8CVSS6.7AI score0.00757EPSS
SaveExploits1References15
Github Security Blog
Github Security Blog
•added 2024/01/26 6:30 p.m.•45 views

Deserialization of untrusted data in synthcity

A vulnerability, which was classified as critical, has been found in vanderSchaar LAB synthcity 0.2.9. Affected by this issue is the function loadfromfile of the component PKL File Handler. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been...

9.8CVSS6.9AI score0.00684EPSS
SaveExploits0References6Affected Software1
osv-ghsa
osv-ghsa
•added 2024/01/26 6:30 p.m.•95 views

GHSA-4957-7VHP-7V59 Deserialization of untrusted data in synthcity

A vulnerability, which was classified as critical, has been found in vanderSchaar LAB synthcity 0.2.9. Affected by this issue is the function loadfromfile of the component PKL File Handler. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been...

9.8CVSS7.9AI score0.00684EPSS
SaveExploits0References6
NVD
NVD
•added 2024/01/26 6:15 p.m.•57 views

CVE-2024-0937

A vulnerability, which was classified as critical, has been found in vanderSchaar LAB synthcity 0.2.9. Affected by this issue is the function loadfromfile of the component PKL File Handler. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been...

9.8CVSS7.1AI score0.00684EPSS
SaveExploits0References4
Rows per page
Query Builder