Lucene search
+L

5452 matches found

Veracode
Veracode
added 2020/01/31 7:20 a.m.20 views

Unauthorized Ownership Transfer

@ensdomains/ens is vulnerable to unauthorized transfer of ownership. Due to a flawed ENS deployment in ENS registry, a user with ENS Domain ownership is allowed to perform an unauthorized transfer of ownership to another user and to regain the ownership without the consent or awareness of new...

8.7CVSS3.5AI score0.01181EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2020/01/31 12:15 a.m.14 views

CVE-2020-5232

A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry...

8.7CVSS8.5AI score0.01181EPSS
SaveExploits0References2
OSV
OSV
added 2020/01/31 12:15 a.m.13 views

CVE-2020-5232

A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry...

8.7CVSS8.5AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2020/01/31 12:15 a.m.4 views

CVE-2020-5232

A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry...

8.7CVSS8AI score0.01181EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2020/01/31 12:15 a.m.15 views

Design/Logic Flaw

A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry...

4.9CVSS8.5AI score0.01181EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2020/01/30 11:55 p.m.104 views

CVE-2020-5232

CVE-2020-5232 concerns the Ethereum Name Service (ENS). The vulnerability arises when an ENS domain owner can set a trapdoor that enables transferring ownership to another user and later regaining ownership without the new owner’s consent or awareness. The public records indicate a new ENS deploy...

8.7CVSS8.5AI score0.01181EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/01/30 11:55 p.m.24 views

CVE-2020-5232 Ethereum Name Service - Malicious takeover of previously owned ENS names

A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry...

8.7CVSS8.5AI score0.01181EPSS
SaveExploits0References2
OSV
OSV
added 2020/01/30 11:55 p.m.26 views

GHSA-8F9F-PC5V-9R5H Malicious takeover of previously owned ENS names

Impact A user who owns an ENS domain can set a "trapdoor", allowing them to transfer ownership to another user, and later regain ownership without the new owner's consent or awareness. Patches A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry. The registry...

8.7CVSS8.5AI score0.01181EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2020/01/30 11:55 p.m.85 views

Malicious takeover of previously owned ENS names

Impact A user who owns an ENS domain can set a "trapdoor", allowing them to transfer ownership to another user, and later regain ownership without the new owner's consent or awareness. Patches A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry. The registry...

8.7CVSS3.5AI score0.01181EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2020/01/30 12:0 a.m.10 views

PT-2020-18328 · Ethereum · Ethereum Name Service (Ens) Registry

Name of the Vulnerable Software and Affected Versions: Ethereum Name Service ENS registry affected versions not specified Description: A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owner's consent ...

8.7CVSS8.4AI score0.01181EPSS
SaveExploits0References6
NVD
NVD
added 2020/01/28 3:15 a.m.19 views

CVE-2019-5462

A privilege escalation issue was discovered in GitLab CE/EE 9.0 and later when trigger tokens are not rotated once ownership of them has changed...

8.8CVSS8.8AI score0.02528EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2020/01/28 3:15 a.m.39 views

CVE-2019-5462

A privilege escalation issue was discovered in GitLab CE/EE 9.0 and later when trigger tokens are not rotated once ownership of them has changed...

8.8CVSS7.2AI score0.02528EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2020/01/28 2:17 a.m.39 views

CVE-2019-5462

Removed by vendor...

8.8CVSS7.3AI score0.02528EPSS
SaveExploits1
Cvelist
Cvelist
added 2020/01/28 2:17 a.m.27 views

CVE-2019-5462

A privilege escalation issue was discovered in GitLab CE/EE 9.0 and later when trigger tokens are not rotated once ownership of them has changed...

8.8AI score0.02528EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2020/01/27 12:0 a.m.49 views

SUSE SLED15 / SLES15 Security Update : slurm (SUSE-SU-2020:0228-1)

This update for slurm fixes the following issues : CVE-2019-19727: Fix permissions of configuration file 'slurmdbd.conf' bsc1155784. Fix ownership of /var/spool/slurm on new installations and upgrade bsc1158696. Fix '%posttrans' macro to cope with added newline bsc1153259. Note that Tenable Netwo...

5.5CVSS7.2AI score0.00354EPSS
SaveExploits0References6
OSV
OSV
added 2020/01/24 8:25 a.m.5 views

SUSE-SU-2020:0228-1 Security update for slurm

This update for slurm fixes the following issues: - CVE-2019-19727: Fix permissions of configuration file 'slurmdbd.conf' bsc1155784. - Fix ownership of /var/spool/slurm on new installations and upgrade bsc1158696. - Fix '%posttrans' macro to cope with added newline bsc1153259...

5.5CVSS7.3AI score0.00354EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.27 views

Huawei EulerOS: Security Advisory for rpm (EulerOS-SA-2019-2658)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.00415EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.20 views

Huawei EulerOS: Security Advisory for coreutils (EulerOS-SA-2019-2333)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS5.2AI score0.00348EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.25 views

Huawei EulerOS: Security Advisory for gvfs (EulerOS-SA-2019-1968)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS6.8AI score0.0184EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.26 views

Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2019-1217)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.6AI score0.01065EPSS
SaveExploits5References2
Rows per page
Query Builder