Lucene search
+L

3564 matches found

Vulnrichment
Vulnrichment
•added 2024/07/05 6:55 a.m.•31 views

CVE-2024-39481 media: mc: Fix graph walk in media_pipeline_start

In the Linux kernel, the following vulnerability has been resolved: media: mc: Fix graph walk in mediapipelinestart The graph walk tries to follow all links, even if they are not between pads. This causes a crash with, e.g. a MEDIALNKFLANCILLARYLINK link. Fix this by allowing the walk to proceed...

6.8AI score0.00222EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/05 12:00 a.m.•3 views

CVE-2024-39481: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: mc: Fix graph walk in mediapipelinestart The graph walk tries to follow all links, even if they are not between pads. This causes a crash with, e.g. a MEDIALNKFLANCILLARYLINK link. Fix this by allowing the walk to proceed...

7.8CVSS5.9AI score0.00222EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2024/07/05 12:00 a.m.•19 views

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from a graph traversal occurring in mediapipelinestart, which causes the program to crash...

5.5CVSS6.5AI score0.00222EPSS
SaveExploits0References7
osv_mal
osv_mal
•added 2024/06/25 1:34 p.m.•10 views

MAL-2024-5032 Malicious code in datagraph (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
osv_mal
osv_mal
•added 2024/06/25 12:41 p.m.•20 views

MAL-2024-2294 Malicious code in ember-nf-graph-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ebe095668166c2fe0cab161db6eabfe48bbed4b707808733ac6315734dc651b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 12:41 p.m.•11 views

Malicious code in ember-nf-graph-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ebe095668166c2fe0cab161db6eabfe48bbed4b707808733ac6315734dc651b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2024/06/25 12:00 a.m.•24 views

CraftCMS Security Vulnerability

CraftCMS is a content management system from CraftCMS, Inc. A security vulnerability exists in CraftCMS version v3.7.31 and earlier versions. An attacker exploited the vulnerability to perform a SQL injection attack via a GraphQL API endpoint...

9.8CVSS7.8AI score0.53242EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2024/06/12 8:14 a.m.•326 views

Exploit for Improper Access Control in Apache Hugegraph

Remote Code Execution vulnerability in Apache HugeGraph Server...

9.8CVSS10AI score0.9921EPSS
SaveExploits13
NVD
NVD
•added 2024/06/10 3:15 p.m.•64 views

CVE-2024-35307

Argument Injection Leading to Remote Code Execution in Realtime Graph Extension, allowing unauthenticated attackers to execute arbitrary code on the server. This issue affects Pandora FMS: from 700 through 777...

9.8CVSS0.00913EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/06/10 3:15 p.m.•12 views

CVE-2024-35307

Argument Injection Leading to Remote Code Execution in Realtime Graph Extension, allowing unauthenticated attackers to execute arbitrary code on the server. This issue affects Pandora FMS: from 700 through 777...

9.8CVSS8.7AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/10 2:33 p.m.•23 views

CVE-2024-35307 Argument Injection Leading to Remote Code Execution in Realtime Graph Extension

Argument Injection Leading to Remote Code Execution in Realtime Graph Extension, allowing unauthenticated attackers to execute arbitrary code on the server. This issue affects Pandora FMS: from 700 through 777...

9.4CVSS8.7AI score0.00913EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/10 2:33 p.m.•54 views

CVE-2024-35307 Argument Injection Leading to Remote Code Execution in Realtime Graph Extension

Argument Injection Leading to Remote Code Execution in Realtime Graph Extension, allowing unauthenticated attackers to execute arbitrary code on the server. This issue affects Pandora FMS: from 700 through 777...

9.4CVSS0.00913EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/10 12:00 a.m.•8 views

PT-2024-26425

Name of the Vulnerable Software and Affected Versions Pandora FMS versions 700 through 776 Description The issue allows unauthenticated attackers to execute arbitrary code on the server through Argument Injection Leading to Remote Code Execution in the Realtime Graph Extension. Recommendations Fo...

9.8CVSS6.6AI score0.00913EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/10 12:00 a.m.•26 views

CVE-2024-35307: Improper Neutralization of Argument Delimiters in a Command

Argument Injection Leading to Remote Code Execution in Realtime Graph Extension, allowing unauthenticated attackers to execute arbitrary code on the server. This issue affects Pandora FMS: from 700 through 777...

9.8CVSS6.5AI score0.00913EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/06/07 12:00 a.m.•23 views

Apache HugeGraph Auth Bypass

The vulnerability of the Apache HugeGraph graph database server relates to the bypassing of the authentication process. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code...

10CVSS8.4AI score0.9921EPSS
SaveExploits13References5Affected Software1
Patchstack
Patchstack
•added 2024/06/06 7:04 a.m.•22 views

WordPress Open Graph plugin <= 1.11.2 - Unauthenticated Sensitive Information Exposure vulnerability

Unauthenticated Sensitive Information Exposure vulnerability discovered by Krzysztof Zając in WordPress Plugin Open Graph versions = 1.11.2...

5.3CVSS6.9AI score0.00452EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/06/06 4:15 a.m.•39 views

CVE-2024-5615

The Open Graph plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.11.2 via the 'opengraphdefaultdescription' function. This makes it possible for unauthenticated attackers to extract sensitive data including partial content of...

5.3CVSS5AI score0.00452EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2024/06/06 4:15 a.m.•12 views

CVE-2024-5615

The Open Graph plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.11.2 via the 'opengraphdefaultdescription' function. This makes it possible for unauthenticated attackers to extract sensitive data including partial content of...

5.3CVSS5.9AI score0.00452EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2024/06/06 4:15 a.m.•15 views

CVE-2024-5615

The Open Graph plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.11.2 via the 'opengraphdefaultdescription' function. This makes it possible for unauthenticated attackers to extract sensitive data including partial content of...

5.3CVSS5.8AI score0.00452EPSS
SaveExploits0References3
CVE
CVE
•added 2024/06/06 3:32 a.m.•99 views

CVE-2024-5615

The CVE-2024-5615 entry concerns the WordPress Open Graph plugin vulnerability allowing Sensitive Information Exposure via opengraph_default_description in versions up to 1.11.2. Connected Red Hat entry repeats this description; no additional technical details (e.g., patch version or concrete exp...

5.3CVSS5.4AI score0.00452EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder