Lucene search
+L

779 matches found

OSV
OSV
•added 2022/12/05 10:15 p.m.•6 views

DEBIAN-CVE-2022-30123

A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...

10CVSS6.7AI score0.01884EPSS
SaveExploits0References1
OSV
OSV
•added 2022/12/05 10:15 p.m.•12 views

UBUNTU-CVE-2022-30123

A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...

10CVSS6.7AI score0.01884EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2022/12/05 10:15 p.m.•47 views

CVE-2022-30123

A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...

10CVSS6.7AI score0.01884EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/05 12:00 a.m.•1 views

CVE-2022-30123: Improper Neutralization of Escape, Meta, or Control Sequences

A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...

10CVSS5.9AI score0.01884EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/12/05 12:00 a.m.•46 views

CVE-2022-30123

A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...

9.7AI score0.01884EPSS
SaveExploits0References4
OSV
OSV
•added 2022/12/05 12:00 a.m.•49 views

CVE-2022-30123

A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...

9.5AI score
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2022/11/02 4:34 p.m.•18 views

rubygem-rack: crafted requests can cause shell escape sequences

A flaw was found in ruby gem-rack. This flaw allows a malicious actor to craft requests that can cause shell escape sequences to be written to the terminal via rack's Lint middleware and CommonLogger middleware. This issue can leverage these escape sequences to execute commands in the victim's...

10CVSS7AI score0.01884EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2022/08/01 12:00 a.m.•9 views

Fedora: Security Advisory for golang-x-lint (FEDORA-2022-5038c3236c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
•added 2022/07/31 1:37 a.m.•15 views

[SECURITY] Fedora 36 Update: golang-x-lint-0-17.20210123git83fdc39.fc36

Golint is a linter for Go source code...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2022/07/18 12:00 a.m.•23 views

Fedora: Security Advisory for golang-github-golangci-lint-1 (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
BDU FSTEC
BDU FSTEC
•added 2022/07/08 12:00 a.m.•25 views

The vulnerability of the modular interface between web servers and web applications in Rack, related to improper neutralization of special elements used in operating system commands, allows attackers to execute arbitrary shell commands on the target system.

The vulnerability of the modular interface between web servers and Rack web applications is related to improper input validation during data processing, as transmitted through the intermediate software Rack Lint and CommonLogger. Exploiting this vulnerability allows a remote attacker to send...

10CVSS7.1AI score0.01884EPSS
SaveExploits0References11Affected Software10
OpenVAS
OpenVAS
•added 2022/07/06 12:00 a.m.•18 views

Fedora: Security Advisory for golang-github-golangci-lint-1 (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2022/07/06 12:00 a.m.•23 views

Fedora: Security Advisory for golang-x-lint (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
Fedora
Fedora
•added 2022/07/04 1:35 a.m.•23 views

[SECURITY] Fedora 36 Update: golang-x-lint-0-16.20210123git83fdc39.fc36

Golint is a linter for Go source code...

9.3CVSS8.2AI score0.0995EPSS
SaveExploits4
Snyk
Snyk
•added 2022/06/23 9:25 a.m.•8 views

Malicious Package

Overview @kraken-frontend/eslint-config is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

9.8CVSS7AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/06/21 8:00 a.m.•53 views

CVE-2022-30123

A flaw was found in ruby gem-rack. This flaw allows a malicious actor to craft requests that can cause shell escape sequences to be written to the terminal via rack's Lint middleware and CommonLogger middleware. This issue can leverage these escape sequences to execute commands in the victim's...

10CVSS3.9AI score0.01884EPSS
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:24 p.m.•10 views

Malicious code in lint-config-qiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82e79286ad9f157e9ada13b80515e00e1ad6d6c2ba5ef082e276af3e9da6d390 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:24 p.m.•15 views

MAL-2022-4316 Malicious code in lint-config-qiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82e79286ad9f157e9ada13b80515e00e1ad6d6c2ba5ef082e276af3e9da6d390 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:20 p.m.•7 views

Malicious code in lint-staged-var (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4da4b87a4c269a9789a5a70dfbc44c6335dc52f7685106953c6074d368e4f4af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:20 p.m.•17 views

MAL-2022-4317 Malicious code in lint-staged-var (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4da4b87a4c269a9789a5a70dfbc44c6335dc52f7685106953c6074d368e4f4af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Rows per page
Query Builder