2208 matches found
PT-2023-35503 · Tor · Tor
Name of the Vulnerable Software and Affected Versions: tor versions 0.4.7.12 through 0.4.7.13 Description: The issue concerns a fix for the SafeSocks option to avoid DNS leaks. Additionally, there are improvements to congestion control and a fix for relay channel handling. New metrics are also...
PT-2025-13343 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential spectre v1 gadget in the ip metrics convert function has been resolved. The issue arises from the use of the type variable as an array index, which could lead to cpu...
PT-2025-13342 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential spectre v1 gadget in the fib metrics match function has been resolved. The issue arises from the use of the type variable as an array index, which could lead to cpu...
MISP 安全漏洞
MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP version 2.4.167 that stems from incorrect access...
MISP 跨站脚本漏洞
MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A cross-site scripting vulnerability exists in MISP version 2.4.167. An attacker exploits...
CVE-2023-0296
The Birthday attack against 64-bit block ciphers flaw CVE-2016-2183 was reported for the health checks port 9979 on etcd grpc-proxy component. Even though the CVE-2016-2183 has been fixed in the etcd components, to enable periodic health checks from kubelet, it was necessary to open up a new port...
Design/Logic Flaw
The Birthday attack against 64-bit block ciphers flaw CVE-2016-2183 was reported for the health checks port 9979 on etcd grpc-proxy component. Even though the CVE-2016-2183 has been fixed in the etcd components, to enable periodic health checks from kubelet, it was necessary to open up a new port...
CVE-2023-0296
The Birthday attack against 64-bit block ciphers CVE-2016-2183 was reported for the health checks port 9979 on the etcd grpc-proxy component. Even though the CVE-2016-2183 has been fixed in the etcd components, to enable periodic health checks from kubelet, it was necessary to open up a new port...
PT-2023-35502 · Tor · Tor
Name of the Vulnerable Software and Affected Versions: tor versions 0.4.7.12 through 0.4.7.13 Description: The issue concerns a fix for the SafeSocks option to avoid DNS leaks. Additionally, there are improvements to congestion control and fixes for relay channel handling. New metrics are also...
PT-2023-10202 · Unknown · Fumon Trello-Octometric
Name of the Vulnerable Software and Affected Versions: Fumon trello-octometric affected versions not specified Description: A critical issue has been found in Fumon trello-octometric, affecting the main function of the file metrics-ui/server/srv.go. The manipulation of the num argument leads to s...
CVE-2022-4860
A vulnerability was found in KBase Metrics. It has been classified as critical. This affects the function uploaduserdata of the file source/dailycronjobs/methodsuploaduserstats.py. The manipulation leads to sql injection. The patch is named 959dfb6b05991e30b0fa972a1ecdcaae8e1dae6d. It is...
Sql injection
A vulnerability was found in KBase Metrics. It has been classified as critical. This affects the function uploaduserdata of the file source/dailycronjobs/methodsuploaduserstats.py. The manipulation leads to sql injection. The patch is named 959dfb6b05991e30b0fa972a1ecdcaae8e1dae6d. It is...
CVE-2022-4860 KBase Metrics methods_upload_user_stats.py upload_user_data sql injection
A vulnerability was found in KBase Metrics. It has been classified as critical. This affects the function uploaduserdata of the file source/dailycronjobs/methodsuploaduserstats.py. The manipulation leads to sql injection. The patch is named 959dfb6b05991e30b0fa972a1ecdcaae8e1dae6d. It is...
CVE-2022-4860 KBase Metrics methods_upload_user_stats.py upload_user_data sql injection
A vulnerability was found in KBase Metrics. It has been classified as critical. This affects the function uploaduserdata of the file source/dailycronjobs/methodsuploaduserstats.py. The manipulation leads to sql injection. The patch is named 959dfb6b05991e30b0fa972a1ecdcaae8e1dae6d. It is...
CVE-2022-4860
CVE-2022-4860 affects KBase Metrics. Concrete details across connected records show a SQL injection in the function upload_user_data (file src/daily_cron_jobs/methods_upload_user_stats.py). The issue arises from how user data is uploaded, enabling injection under certain inputs. The patch 959dfb6...
PT-2022-28146 · Unknown · Kbase Metrics
Name of the Vulnerable Software and Affected Versions: KBase Metrics affected versions not specified Description: A critical issue was found in KBase Metrics, affecting the upload user data function of the file source/daily cron jobs/methods upload user stats.py. This issue leads to sql injection...
KBase Metrics SQL注入漏洞
KBase Metrics are scripts and other tools used to collect metrics and generate reports and summaries. KBase Metrics suffers from a SQL injection vulnerability that stems from a problem with the function uploaduserdata in the file source/dailycronjobs/methodsuploaduserstats.py, which can lead to s...
CVE-2022-37310
OX App Suite through 7.10.6 allows XSS via a malicious capability to the metrics or help module, as demonstrated by a /!!&app=io.ox/files&cap= URI...