Lucene search
+L

3190 matches found

Github Security Blog
Github Security Blog
added 2022/09/21 3:36 p.m.24 views

personnummer/rust vulnerable to Improper Input Validation

This vulnerability was reported to the personnummer team in June 2020. The slow response was due to locked ownership of some of the affected packages, which caused delays to update packages prior to disclosure. The vulnerability is determined to be low severity. Impact This vulnerability impacts...

2.5AI score
SaveExploits0References7Affected Software1
Circl
Circl
added 2022/09/20 2:38 a.m.26 views

CVE-2022-38532

creationtimestamp| type| source ---|---|--- 2022-09-20 02:38:30+00:00| seen| https://t.me/cibsecurity/50109 2025-06-11 18:40:35+00:00| seen| https://gist.github.com/jeraldjunkmail/ee0ad43aba73dd2e8960007d9955b4c2 2025-06-11 18:42:10+00:00| seen|...

7.8CVSS7.5AI score0.0046EPSS
SaveExploits2References3
GitLab Advisory Database
GitLab Advisory Database
added 2022/09/19 12:0 a.m.14 views

personnummer/dart vulnerable to Improper Input Validation

This vulnerability was reported to the personnummer team in June 2020. The slow response was due to locked ownership of some of the affected packages, which caused delays to update packages prior to disclosure. The vulnerability is determined to be low severity...

5.3CVSS6.1AI score0.00489EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/09/18 5:15 p.m.3 views

CVE-2022-40769

profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from Ethereum vanity addresses and steal cryptocurrency, as exploited in the wild in June 2022...

7.5CVSS5.8AI score0.01098EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2022/09/18 4:1 p.m.41 views

CVE-2022-40769

profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from Ethereum vanity addresses and steal cryptocurrency, as exploited in the wild in June 2022...

7.7AI score0.01098EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/09/18 12:0 a.m.14 views

PT-2022-25527

Name of the Vulnerable Software and Affected Versions profanity versions 1.60 and earlier Description The issue allows attackers to recover private keys from Ethereum vanity addresses and steal cryptocurrency due to only four billion possible RNG initializations. This has been exploited in the...

7.5CVSS7AI score0.01098EPSS
SaveExploits0References8
OSV
OSV
added 2022/09/15 12:0 a.m.86 views

GHSA-5M2H-7RF2-RPX6 UniSharp Laravel Filemanager directory traversal vulnerability

UniSharp laravel-filemanager aka Laravel Filemanager with league/flysystem version = 2.0.0...

6.5CVSS6.3AI score0.04298EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2022/09/15 12:0 a.m.34 views

UniSharp Laravel Filemanager directory traversal vulnerability

UniSharp laravel-filemanager aka Laravel Filemanager with league/flysystem version = 2.0.0...

6.5CVSS6.3AI score0.04298EPSS
SaveExploits1References6Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2022/09/14 12:0 a.m.8 views

VulnCheck KEV: CVE-2022-40734

UniSharp laravel-filemanager aka Laravel Filemanager before 2.6.4 allows download?workingdir=%2F.. directory traversal to read arbitrary files, as exploited in the wild in June 2022. This is related to league/flysystem before 2.0.0...

6.5CVSS6.7AI score0.04298EPSS
SaveExploits1References1
NVD
NVD
added 2022/09/12 7:15 p.m.30 views

CVE-2022-1700

Improper Restriction of XML External Entity Reference 'XXE' vulnerability in the Policy Engine of Forcepoint Data Loss Prevention DLP, which is also leveraged by Forcepoint One Endpoint F1E, Web Security Content Gateway, Email Security with DLP enabled, and Cloud Security Gateway prior to June 20...

9.8CVSS0.00715EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/09/07 2:15 p.m.11 views

CVE-2022-37108

An injection vulnerability in the syslog-ng configuration wizard in Securonix Snypr 6.4 allows an application user with the "Manage Ingesters" permission to execute arbitrary code on remote ingesters by appending arbitrary text to text files that are executed by the system, such as users' crontab...

8.7CVSS7.5AI score0.01031EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2022/08/19 6:23 p.m.37 views

Security Bulletin: Tivoli Storage Productivity Center - Oracle CPU February 2012, June 2012

Summary Multiple security vulnerabilities exist in the IBM Java SDK that is shipped with IBM Tivoli Storage Productivity Center. Vulnerability Details IBM Tivoli Storage Productivity Center 4.x is shipped with an IBM Java SDK that is based on the Oracle JDK. Oracle released February 2012 and Apri...

10CVSS8.6AI score0.06336EPSS
SaveExploits1Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2022/07/26 7:54 a.m.57 views

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for June 2022

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 21.0.2-IF012 and 21.0.3-IF010. Vulnerability Details CVEID:CVE-2021-43138 DESCRIPTION: Async could allow a remote attacker to...

8.2CVSS8.6AI score0.07558EPSS
SaveExploits4Affected Software1
Circl
Circl
added 2022/07/15 2:33 a.m.8 views

CVE-2022-32409

creationtimestamp| type| source ---|---|--- 2022-07-15 02:33:09+00:00| seen| https://t.me/cibsecurity/46287 2025-06-08 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-06-08 2025-06-09 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-06-09...

9.8CVSS7.3AI score0.12593EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.8 views

Fishtank 路径遍历漏洞

Fishtank is a remote monitoring and control interface by Rentaro Matsukata, a personal developer in the U.S. A path traversal vulnerability exists in Fishtank 2015-06-24 and earlier versions, which stems from a failure of Flask's sendfile function to properly filter special elements in resource o...

9.3CVSS5.8AI score0.01272EPSS
SaveExploits1References2
Circl
Circl
added 2022/06/30 10:43 p.m.9 views

CVE-2022-34795

creationtimestamp| type| source ---|---|--- 2022-06-30 22:43:48+00:00| seen| https://t.me/cibsecurity/45442...

5.4CVSS5.5AI score0.00606EPSS
SaveExploits0References1
Circl
Circl
added 2022/06/30 10:38 p.m.11 views

CVE-2022-34783

creationtimestamp| type| source ---|---|--- 2022-06-30 22:38:53+00:00| seen| https://t.me/cibsecurity/45436...

5.4CVSS5.5AI score0.80518EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2022/06/30 9:16 p.m.21 views

fun.ie Cross Site Scripting vulnerability OBB-2703043

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Circl
Circl
added 2022/06/30 8:38 p.m.9 views

CVE-2022-2057

creationtimestamp| type| source ---|---|--- 2022-06-30 20:38:47+00:00| seen| https://t.me/cibsecurity/45420...

6.5CVSS6.5AI score0.01224EPSS
SaveExploits1References1
Openbugbounty
Openbugbounty
added 2022/06/30 10:25 a.m.13 views

misorae.kr Cross Site Scripting vulnerability OBB-2701169

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Rows per page
Query Builder