Lucene search
K

1625 matches found

Positive Technologies
Positive Technologies
added 2023/05/21 12:0 a.m.2 views

PT-2023-16311 · Undefined · Undefined

🚨 CVE-2023-33251 When Akka HTTP before 10.5.2 accepts file uploads via the FileUploadDirectives.fileUploadAll directive, the temporary file it creates has too weak permissions: it is readable by other users on Linux or UNIX, a similar issue to CVE-2022-41946. 🎖@cveNotify...

5.5CVSS6.6AI score0.00082EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2023/04/26 8:15 p.m.1 views

CVE-2023-27559

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may crash when using a specially crafted subquery. IBM X-Force ID: 249196...

7.5CVSS7.1AI score0.00155EPSS
Exploits0References5
OSV
OSV
added 2023/04/26 8:15 p.m.1 views

CVE-2023-27559

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may crash when using a specially crafted subquery. IBM X-Force ID: 249196...

7.5CVSS5.8AI score0.00155EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/04/24 12:0 a.m.1 views

PT-2023-2580 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.1, 11.1, and 11.5 Description: The issue is related to insufficient input validation in the database management system, which can be exploited by a remote attacker to...

5.9CVSS6AI score0.00192EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2023/04/12 12:0 a.m.13 views

Google Protobuf Go Module Installed (Linux/UNIX)

Binary data googleprotobufgomodulelinuxinstalled.nbin...

7.3AI score
Exploits0References1
NVD
NVD
added 2023/02/17 6:15 p.m.12 views

CVE-2021-32142

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::getschar, int in /src/libraw/src/librawdatastream.cpp...

7.8CVSS7.6AI score0.00024EPSS
Exploits1References8
OSV
OSV
added 2023/02/17 6:15 p.m.1 views

AZL-43756 CVE-2021-32142 affecting package LibRaw 0.19.5-5

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::getschar, int in /src/libraw/src/librawdatastream.cpp...

7.8CVSS6.4AI score0.00024EPSS
Exploits1References1
Prion
Prion
added 2023/02/17 6:15 p.m.24 views

Buffer overflow

Buffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker to escalate privileges via the LibRawbufferdatastream::getschar, int in /src/libraw/src/librawdatastream.cpp...

4.4CVSS7.5AI score0.00024EPSS
Exploits1References8Affected Software1
OSV
OSV
added 2023/02/17 5:15 p.m.2 views

CVE-2022-43927

IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to information Disclosure due to improper privilege management when a specially crafted table access is used. IBM X-Force ID: 241671...

7.5CVSS5.5AI score
Exploits0References2
OSV
OSV
added 2023/02/17 5:15 p.m.0 views

CVE-2022-43929

IBM Db2 for Linux, UNIX and Windows 11.1 and 11.5 may be vulnerable to a Denial of Service when executing a specially crafted 'Load' command. IBM X-Force ID: 241676...

7.5CVSS5.8AI score
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 6:20 a.m.2 views

SUSE CVE-2004-0746

Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session...

7.5CVSS6.9AI score0.01495EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:21 a.m.0 views

SUSE CVE-2015-1838

modules/serverdensitydevice.py in SaltStack before 2014.7.4 does not properly handle files in /tmp...

5.3CVSS5.4AI score0.00069EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:51 a.m.2 views

SUSE CVE-2020-35176

In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname omitting the initial /etc, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501 and CVE-2020-29600...

5.3CVSS7.2AI score0.00937EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 3:27 a.m.2 views

SUSE CVE-2022-25255

In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH...

7.3CVSS7AI score0.00089EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2023/02/08 12:0 a.m.2 views

PT-2023-2144 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows versions 11.1 through 11.5 Description: The issue is related to insufficient input validation in the database management system, which can be exploited to cause a Denial of Service by executing a specially...

7.5CVSS7.3AI score0.00112EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2023/02/08 12:0 a.m.1 views

PT-2023-2143 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows versions 10.5 through 11.5 Description: The issue is related to insufficient protection of service data when processing tables, which can allow a remote attacker to gain unauthorized access to protected...

7.5CVSS7.5AI score0.00136EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2023/01/09 12:0 a.m.13 views

Temurin Java Detection (Linux / Unix)

Binary data temurinjavanixinstalled.nbin...

7.3AI score
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:6 p.m.25 views

Security Bulletin: DB2 Recovery Expert for Linux, UNIX and Windows affected by vulnerability in IBM Java JRE (CVE-2013-0169)

Abstract IBM DB2 Recovery Expert for Linux, UNIX and Windows uses the IBM Java Runtime Environment JRE and is affected by a vulnerability issue in the IBM JRE. Content VULNERABILITY DETAILS: CVE ID: CVE-2013-0169 DESCRIPTION: The TLS protocol does not properly consider timing side-channel attacks...

2.6CVSS6.1AI score0.00943EPSS
Exploits0Affected Software1
Cvelist
Cvelist
added 2022/08/25 11:18 p.m.13 views

CVE-2022-30984

A buffer overflow vulnerability in the Rubrik Backup Service RBS Agent for Linux or Unix-based systems in Rubrik CDM 7.0.1, 7.0.1-p1, 7.0.1-p2 or 7.0.1-p3 before CDM 7.0.2-p2 could allow a local attacker to obtain root privileges by sending a crafted message to the RBS agent...

7.9AI score0.00046EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/08/25 12:0 a.m.2 views

Rubrik 安全漏洞

Rubrik is a suite of cloud data management platforms from US-based Rubrik. The platform is capable of providing data backup, data protection, data analytics, data compliance and data recovery. A security vulnerability exists in Rubrik Backup Service RBS on Rubrik CDM versions 7.0.1, 7.0.1-p1,...

7.8CVSS6.5AI score0.00046EPSS
Exploits0References4
Rows per page
Query Builder