226 matches found
EUVD-2023-23346
Malicious code in bioql PyPI...
EUVD-2024-34983
Malicious code in bioql PyPI...
EUVD-2022-30283
Malicious code in bioql PyPI...
EUVD-2022-28781
Malicious code in bioql PyPI...
EUVD-2021-7718
Malicious code in bioql PyPI...
EUVD-2024-15804
Malicious code in bioql PyPI...
EUVD-2023-32660
Malicious code in bioql PyPI...
EUVD-2022-24390
Malicious code in bioql PyPI...
EUVD-2022-29320
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2021-3923
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information whe...
kea: Loading a malicious hook library can lead to local privilege escalation
A flaw was found in the Kea package, where an unprivileged user can instruct Kea to load a hook library from any arbitrary local file. This hook can then be executed using the same privileges that Kea runs under. This vulnerability allows an attacker with access to a local, unprivileged account t...
CVE-2023-28129
DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user...
CVE-2022-25623
The Symantec Management Agent is susceptible to a privilege escalation vulnerability. A low privilege local account can be elevated to the SYSTEM level through registry manipulations...
CVE-2021-29159
A cross-site scripting XSS vulnerability has been discovered in Nexus Repository Manager 3.x before 3.30.1. An attacker with a local account can create entities with crafted properties that, when viewed by an administrator, can execute arbitrary JavaScript in the context of the NXRM application...
CVE-2024-12021
Coverity versions prior to 2024.9.0 are vulnerable to stored cross-site scripting XSS in various administrative interfaces. The impact of exploitation may result in the compromise of local accounts managed by the Coverity platform as well as other standard impacts resulting from cross-site...
Black Duck Coverity 跨站脚本漏洞
Black Duck Coverity is a comprehensive static code analysis and software security tool from Black Duck, Inc. It is used to find and fix vulnerabilities, defects and security risks in software. A cross-site scripting vulnerability exists in versions prior to Black Duck Coverity 2024.9.0, which...
Linux Distros Unpatched Vulnerability : CVE-2020-10732
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and...
CVE-2024-0001
A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active potentially allowing a malicious actor to gain elevated privileges...
