Lucene search
K

813 matches found

Prion
Prion
added 2022/10/12 11:15 p.m.20 views

Double free

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

5CVSS7.4AI score0.00295EPSS
Exploits0References7Affected Software2
OSV
OSV
added 2022/10/12 11:15 p.m.0 views

UBUNTU-CVE-2022-39282

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

7.5CVSS6.7AI score0.00295EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2022/10/12 12:0 a.m.4 views

CVE-2022-39282 RDP client: Read of uninitialized memory with parallel port redirection

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

3.5CVSS6.7AI score0.00295EPSS
Exploits0References7
CNNVD
CNNVD
added 2022/10/12 12:0 a.m.1 views

FreeRDP 安全漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A security vulnerability exists in FreeRDP versions prior to 2.8.1, which stems from the fact that a FreeRDP-based client on a unix system using the /parallel command line switch may read...

7.5CVSS6.4AI score0.00295EPSS
Exploits0References13
OSV
OSV
added 2022/10/12 12:0 a.m.23 views

CVE-2022-39282 RDP client: Read of uninitialized memory with parallel port redirection

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

3.5CVSS6.2AI score0.00295EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2022/10/12 12:0 a.m.2 views

PT-2022-5111 · Freerdp +9 · Freerdp +9

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.8.1 Description: The issue is related to the use of uninitialized data when processing the /parallel command line switch in FreeRDP based clients on Unix systems. This could allow a remote attacker to read, modify,...

9.8CVSS6.4AI score0.06359EPSS
Exploits16References192
Cvelist
Cvelist
added 2022/10/12 12:0 a.m.18 views

CVE-2022-39282 RDP client: Read of uninitialized memory with parallel port redirection

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

3.5CVSS7.7AI score0.00295EPSS
Exploits0References7
Fedora
Fedora
added 2022/10/08 5:34 p.m.19 views

[SECURITY] Fedora 36 Update: python-joblib-1.2.0-1.fc36

Joblib is a set of tools to provide lightweight pipelining in Python. In particular, joblib offers: transparent disk-caching of the output values and lazy re-evaluation memorize pattern easy simple parallel computing logging and tracing of the execution...

9.8CVSS2.6AI score0.00265EPSS
Exploits1
Openbugbounty
Openbugbounty
added 2022/09/28 12:39 p.m.16 views

parallel-schallplatten.de Cross Site Scripting vulnerability OBB-2961776

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
OSV
OSV
added 2022/09/26 5:15 a.m.1 views

DEBIAN-CVE-2022-21797

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

9.8CVSS7.3AI score0.00265EPSS
Exploits1References1
NVD
NVD
added 2022/09/26 5:15 a.m.15 views

CVE-2022-21797

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

9.8CVSS0.00265EPSS
Exploits1References9
OSV
OSV
added 2022/09/26 5:15 a.m.46 views

PYSEC-2022-288

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

9.8CVSS4.7AI score0.00265EPSS
Exploits1References4
OSV
OSV
added 2022/09/26 5:15 a.m.0 views

UBUNTU-CVE-2022-21797

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

9.8CVSS6.7AI score0.00265EPSS
Exploits1References6
PyPA
PyPA
added 2022/09/26 5:15 a.m.5 views

PYSEC-2022-288

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

9.8CVSS5.5AI score0.00265EPSS
Exploits1References4Affected Software1
Debian CVE
Debian CVE
added 2022/09/26 5:5 a.m.30 views

CVE-2022-21797

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

9.8CVSS7.2AI score0.00265EPSS
Exploits1
CVE
CVE
added 2022/09/26 5:5 a.m.194 views

CVE-2022-21797

CVE-2022-21797 affects joblib: versions 0 up to 1.1.x are vulnerable to arbitrary code execution via the pre_dispatch flag in Parallel(), caused by an eval() statement. Severity is high/critical per sources; impact is arbitrary code execution. Remediation: upgrade to joblib 1.2.0 or later (e.g., ...

9.8CVSS8.4AI score0.00265EPSS
Exploits1References9Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/26 5:5 a.m.16 views

CVE-2022-21797 Arbitrary Code Execution

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

7.3CVSS7.1AI score0.00265EPSS
Exploits1References9
AlpineLinux
AlpineLinux
added 2022/09/26 5:5 a.m.51 views

CVE-2022-21797

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

9.8CVSS8.5AI score0.00265EPSS
Exploits1
ATTACKERKB
ATTACKERKB
added 2022/09/26 5:0 a.m.2 views

CVE-2022-21797

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

9.8CVSS6.8AI score0.00265EPSS
Exploits1References12
FreeBSD
FreeBSD
added 2022/09/26 12:0 a.m.19 views

py39-joblib -- arbitrary code execution

jimlinntu reports: The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

9.8CVSS9.5AI score0.00265EPSS
Exploits1References2
Rows per page
Query Builder