Lucene search
+L

2481 matches found

OpenVAS
OpenVAS
•added 2022/05/04 12:00 a.m.•74 views

Fedora: Security Advisory for chromium (FEDORA-2022-17aa1c62da)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.6CVSS7.5AI score0.16596EPSS
SaveExploits14References4
Cvelist
Cvelist
•added 2022/05/03 3:50 p.m.•36 views

CVE-2022-0882 Illegal access to Kernel log in Fuchsia

A bug exists where an attacker can read the kernel log through exposed Zircon kernel addresses without the required capability ZXRSRCKINDROOT. It is recommended to upgrade the Fuchsia kernel to 4.1.1 or greater...

5.3CVSS5.6AI score0.00117EPSS
SaveExploits1References1
OSV
OSV
•added 2022/05/03 3:25 a.m.•59 views

GHSA-3P86-XGRQ-M6P6 Improper Neutralization of Input During Web Page Generation in Apache Tomcat

Multiple cross-site scripting XSS vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and 7.0 before 7.0.6 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the display-name tag...

4.3CVSS5.5AI score0.10009EPSS
SaveExploits2References37
OSV
OSV
•added 2022/05/03 12:00 a.m.•102 views

GHSA-3X62-X456-Q2VM OS Command Injection in git-pull-or-clone

The package git-pull-or-clone before 2.0.2 is vulnerable to Command Injection due to the use of the --upload-pack feature of git which is also supported for git clone. The source includes the use of the secure child process API spawn. However, the outpath parameter passed to it may be a...

9.8CVSS9.8AI score0.03738EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2022/05/03 12:00 a.m.•45 views

OS Command Injection in git-pull-or-clone

The package git-pull-or-clone before 2.0.2 is vulnerable to Command Injection due to the use of the --upload-pack feature of git which is also supported for git clone. The source includes the use of the secure child process API spawn. However, the outpath parameter passed to it may be a...

9.8CVSS1.5AI score0.03738EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2022/05/02 3:38 a.m.•25 views

GHSA-9RJ9-5WCV-XGF2 Roundup Improper Access Control

The EditCSVAction function in cgi/actions.py in Roundup 1.2 before 1.2.1, 1.4 through 1.4.6, and possibly other versions does not properly check permissions, which allows remote authenticated users with edit or create privileges for a class to modify arbitrary items within that class, as...

5.5CVSS6.1AI score0.02341EPSS
SaveExploits0References12
OpenVAS
OpenVAS
•added 2022/05/02 12:00 a.m.•19 views

Fedora: Security Advisory for usd (FEDORA-2022-61f6ee6353)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS6.8AI score0.02111EPSS
SaveExploits1References2
NVD
NVD
•added 2022/05/01 4:15 p.m.•43 views

CVE-2022-24437

The package git-pull-or-clone before 2.0.2 are vulnerable to Command Injection due to the use of the --upload-pack feature of git which is also supported for git clone. The source includes the use of the secure child process API spawn. However, the outpath parameter passed to it may be a...

9.8CVSS0.03738EPSS
SaveExploits1References3
Prion
Prion
•added 2022/05/01 4:15 p.m.•22 views

Command injection

The package git-pull-or-clone before 2.0.2 are vulnerable to Command Injection due to the use of the --upload-pack feature of git which is also supported for git clone. The source includes the use of the secure child process API spawn. However, the outpath parameter passed to it may be a...

7.5CVSS10AI score0.03738EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2022/05/01 3:20 p.m.•43 views

CVE-2022-24437 Command Injection

The package git-pull-or-clone before 2.0.2 are vulnerable to Command Injection due to the use of the --upload-pack feature of git which is also supported for git clone. The source includes the use of the secure child process API spawn. However, the outpath parameter passed to it may be a...

9.8CVSS10AI score0.03738EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/05/01 3:19 p.m.•11 views

CVE-2022-24437

The package git-pull-or-clone before 2.0.2 are vulnerable to Command Injection due to the use of the --upload-pack feature of git which is also supported for git clone. The source includes the use of the secure child process API spawn. However, the outpath parameter passed to it may be a...

9.8CVSS7.4AI score0.03738EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2022/04/29 12:00 a.m.•17 views

Fedora: Security Advisory for golang-github-haproxytech-client-native (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/04/29 12:00 a.m.•19 views

Fedora: Security Advisory for golang-github-google-slothfs (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/04/29 12:00 a.m.•9 views

Fedora: Security Advisory for golang-github-prometheus-node-exporter (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/04/29 12:00 a.m.•12 views

Fedora: Security Advisory for golang-github-intel-goresctrl (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/04/29 12:00 a.m.•16 views

Fedora: Security Advisory for golang-k8s-code-generator (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/04/29 12:00 a.m.•14 views

Fedora: Security Advisory for golang-k8s-sample-controller (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/04/29 12:00 a.m.•27 views

Fedora: Security Advisory for golang-github-containerd-stargz-snapshotter (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/04/29 12:00 a.m.•18 views

Fedora: Security Advisory for commit-stream (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/04/25 12:00 a.m.•36 views

Fedora: Security Advisory for kernel-headers (FEDORA-2022-8efcea6e67)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS6.8AI score0.00401EPSS
SaveExploits2References2
Rows per page
Query Builder