Lucene search
+L

6911 matches found

OSV
OSV
added 2022/06/20 8:15 p.m.11 views

MAL-2022-4846 Malicious code in nginx-data-transfer-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5eb307be5946f29ef874fb677a7a6bd4e20c77381dbb95382223a837f3ffa621 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:15 p.m.4 views

Malicious code in nginx-data-transfer-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5eb307be5946f29ef874fb677a7a6bd4e20c77381dbb95382223a837f3ffa621 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Kubernetes Security Advisories
Kubernetes Security Advisories
added 2022/06/10 4:01 p.m.15 views

Ingress-nginx `path` sanitization can be bypassed with newline character

Issue Details A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypass the sanitization of the spec.rules.http.paths.path field of an Ingress object in the networking.k8s.io or extensions API group to obtain the...

7.6CVSS6.6AI score0.00694EPSS
SaveExploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/06/10 4:00 p.m.7 views

CVE-2021-25748

A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypass the sanitization of the spec.rules.http.paths.path field of an Ingress object in the networking.k8s.io or extensions API group to obtain the credentials of...

7.6CVSS6.8AI score0.00694EPSS
SaveExploits0References3
CNVD
CNVD
added 2022/06/09 12:00 a.m.38 views

Nginx NJS Denial of Service Vulnerability

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from the U.S. company Nginx. njs is one of the scripting language components that support extended NGINX functionality . A denial of service vulnerability exists in Nginx NJS version v0.7.2, which stems from a...

5.5CVSS5.4AI score0.00384EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/06/09 12:00 a.m.57 views

Nginx NJS Denial of Service Vulnerability (CNVD-2022-66505)

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from Nginx Inc. njs is one of the scripting language components that supports extended NGINX functionality . A denial of service vulnerability exists in Nginx NJS version v0.7.2, which originates from a...

5.5CVSS5.4AI score0.0028EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/06/09 12:00 a.m.53 views

Nginx NJS Denial of Service Vulnerability (CNVD-2022-66506)

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from Nginx Inc. njs is one of the scripting language components that supports extended NGINX functionality . A denial of service vulnerability exists in Nginx NJS version v0.7.2, which stems from a segmentatio...

5.5CVSS5.4AI score0.00384EPSS
SaveExploits1References1
Packet Storm
Packet Storm
added 2022/06/06 12:00 a.m.606 views

Reolink E1 Zoom Camera 3.0.0.716 Configuration Disclosure

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: Reolink E1 Zoom Camera Vendor URL: https://reolink.com/product/e1-zoom/ Type: Exposure of Sensitive Information to an Unauthorized Actor CWE-200 Date found: 2021-08-26 Date published:...

7.6AI score0.03729EPSS
SaveExploits4
CBLMariner
CBLMariner
added 2022/06/03 5:54 p.m.29 views

CVE-2021-3618 affecting package nginx for versions less than 1.20.2-2

CVE-2021-3618 affecting package nginx for versions less than 1.20.2-2. A patched version of the package is available...

7.4CVSS7.6AI score0.02036EPSS
SaveExploits0
Packet Storm
Packet Storm
added 2022/06/03 12:00 a.m.235 views

IIPImage Remote Memory Corruption

!/usr/bin/python3 -- coding: UTF-8 -- thiel.py IIPImage Multiple Remote Memory Corruption Vulnerabilities Jeremy Brown jbrown3264/gmail IIPImage is distributed with a server that enables advanced, high-performance image manipulation for web-based streaming and viewing of high resolution images. T...

7.5CVSS0.4AI score0.01177EPSS
SaveExploits2
NVD
NVD
added 2022/06/02 2:15 p.m.21 views

CVE-2022-30503

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njssetnumber at src/njsvalue.h...

5.5CVSS0.0028EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/06/02 2:15 p.m.6 views

CVE-2022-30503

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njssetnumber at src/njsvalue.h...

5.5CVSS6AI score0.0028EPSS
SaveExploits0References3
NVD
NVD
added 2022/06/02 2:15 p.m.30 views

CVE-2022-29780

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njsarrayprototypesort at src/njsarray.c...

5.5CVSS0.00384EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/06/02 2:15 p.m.4 views

CVE-2022-29780

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njsarrayprototypesort at src/njsarray.c...

5.5CVSS6.1AI score0.00384EPSS
SaveExploits1References3
NVD
NVD
added 2022/06/02 2:15 p.m.24 views

CVE-2022-29779

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njsvalueownenumerate at src/njsvalue.c...

5.5CVSS0.00384EPSS
SaveExploits1References2
Prion
Prion
added 2022/06/02 2:15 p.m.21 views

Design/Logic Flaw

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njsvalueownenumerate at src/njsvalue.c...

2.1CVSS5.5AI score0.00384EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2022/06/02 2:15 p.m.20 views

Design/Logic Flaw

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njsarrayprototypesort at src/njsarray.c...

2.1CVSS5.5AI score0.00384EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2022/06/02 2:15 p.m.21 views

Design/Logic Flaw

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njssetnumber at src/njsvalue.h...

2.1CVSS5.5AI score0.0028EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/06/02 12:00 a.m.12 views

Nginx 安全漏洞

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from Nginx Inc. njs is one of the scripting language components that supports extended NGINX functionality . A denial of service vulnerability exists in Nginx NJS version v0.7.2, which originates from a...

5.5CVSS5.6AI score0.0028EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/06/02 12:00 a.m.10 views

Nginx 安全漏洞

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from Nginx Inc. njs is one of the scripting language components that supports extended NGINX functionality . A denial of service vulnerability exists in Nginx NJS version v0.7.2, which stems from a segmentatio...

5.5CVSS5.5AI score0.00384EPSS
SaveExploits1References3
Rows per page
Query Builder