Lucene search
+L

166 matches found

Citrix
Citrix
added 2024/07/13 12:0 a.m.10 views

Provisioning Services Target Device Software Fails to Install

Provisioning Services Target Device Software might fail during the installation with the following error: When you click OK , the following error appears: Reviewing the Event Viewer of the server displays the following errors: “Product: Citrix Provisioning Services Target Device x64 -- Error...

7AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/07/03 12:0 a.m.29 views

CentOS 9 : python-urllib3-1.26.5-6.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the python- urllib3-1.26.5-6.el9 build changelog. - urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with ProxyManager, the Proxy-Authorization...

6.5CVSS6.7AI score0.01141EPSS
Exploits1References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:30 p.m.5 views

Malicious code in Pathoschild.Stardew.Mod.BuildConfig (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:57 p.m.6 views

Malicious code in react-router-dom-v7 (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSV
OSV
added 2023/10/10 2:15 p.m.16 views

AZL-31313 CVE-2023-44487 affecting package jx for versions less than 3.2.236-13

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

7.5CVSS7AI score0.99999EPSS
Exploits20References1
Positive Technologies
Positive Technologies
added 2023/08/03 12:0 a.m.7 views

PT-2023-36241 · Unknown · Python-Pip

Name of the Vulnerable Software and Affected Versions: python-pip affected versions not specified Description: The issue with python-pip is related to the presence of .exe files in the RPM package, which could cause problems with security scanners. Recommendations: At the moment, there is no...

7AI score
Exploits0References3
OSV
OSV
added 2023/04/12 1:15 p.m.8 views

AZL-26165 CVE-2023-29580 affecting package yasm 1.3.0-17

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the component yasmexprcreate at /libyasm/expr.c...

5.5CVSS6AI score0.00312EPSS
Exploits1References1
Amazon
Amazon
added 2023/03/22 12:0 a.m.6 views

Medium: bash

Issue Overview: A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parametertransform. This issue may lead to memory problems. CVE-2022-3715 Affected Packages: bash Issue Correction: Run dnf update bash --releasever 2023.0.20230322 or dnf update --advisory...

7.8CVSS7.2AI score0.00356EPSS
Exploits1
OpenVAS
OpenVAS
added 2022/07/05 12:0 a.m.14 views

SUSE: Security Advisory (SUSE-SU-2022:2249-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8CVSS8.5AI score0.07269EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2022/05/03 12:0 a.m.33 views

Redis RCE Vulnerability (CVE-2022-0543) - Active Check

Redis is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:redis:redis"; if...

10CVSS9.3AI score0.9967EPSS
Exploits10References7
WPVulnDB
WPVulnDB
added 2022/03/11 12:0 a.m.339 views

WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package

Description The @wordpress/url package used in WordPress and the Gutenberg plugin is affected by a Prototype Pollution issue...

7.1AI score
Exploits0References2
NVD
NVD
added 2021/10/07 8:15 p.m.21 views

CVE-2021-42094

An issue was discovered in Zammad before 4.1.1. Command Injection can occur via custom Packages...

9.8CVSS0.01887EPSS
Exploits0References1
CNVD
CNVD
added 2020/06/16 12:0 a.m.8 views

chownr package competitive conditions issue vulnerability

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine from Joyent, Inc. The platform is used to build highly scalable applications and write code that can handle tens of thousands of simultaneous connections to a physical machine. chownr package is one of the...

2.5CVSS3.6AI score0.00336EPSS
Exploits1References1
OSV
OSV
added 2019/05/24 12:41 p.m.7 views

SUSE-SU-2019:1352-1 Security update for python3

This update for python3 to version 3.6.8 fixes the following issues: Security issue fixed: - CVE-2019-9947: Fixed an issue in urllib2 which allowed CRLF injection if the attacker controls a url parameter bsc1130840. Non-security issue fixed: - Fixed broken debuginfo packages by switching off LTO...

6.1CVSS7.7AI score0.05601EPSS
Exploits1References4
OSV
OSV
added 2019/02/17 6:29 a.m.3 views

DEBIAN-CVE-2019-8398

An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5Tgetsize in H5T.c...

6.5CVSS6.2AI score0.01192EPSS
Exploits1References1
OSV
OSV
added 2018/05/31 8:29 p.m.9 views

AZL-44502 CVE-2016-10540 affecting package js-jquery 3.5.0-4

Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript RegExp objects. The primary function, minimatchpath, pattern in Minimatch 3.0.1 and earlier is vulnerable to ReDoS in the pattern parameter...

7.5CVSS7.1AI score0.01743EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.7 views

Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

Multiple vulnerabilities in the linux-headers-2.6.24-etchnhalf.1-footbridge package of the Debian GNU/Linux operating system. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information...

7.2CVSS5.5AI score0.00833EPSS
Exploits9References11Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.7 views

The vulnerability of the OpenSUSE operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Mesa-libGL1 package in the openSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

6.8CVSS5.4AI score0.02609EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.7 views

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the system-config-printer-gui-0.6.116.10 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

5.1CVSS5.4AI score0.01967EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.7 views

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the gegl-0.1.2 package for the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...

7.5CVSS7.5AI score0.1326EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder