Lucene search
+L

244 matches found

osv_cve
osv_cve
•added 2022/09/12 12:00 a.m.•20 views

CVE-2022-37767

Pebble Templates 3.1.5 allows attackers to bypass a protection mechanism and implement arbitrary code execution with springbok. NOTE: the vendor disputes this because input to the Pebble templating engine is intended to include arbitrary Java code, and thus either the input should not arrive from...

9.8AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/12 12:00 a.m.•8 views

CVE-2022-37767: Incorrect Authorization

Pebble Templates 3.1.5 allows attackers to bypass a protection mechanism and implement arbitrary code execution with springbok. NOTE: the vendor disputes this because input to the Pebble templating engine is intended to include arbitrary Java code, and thus either the input should not arrive from...

9.8CVSS8.6AI score0.01477EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2022/07/31 12:00 a.m.•22 views

Fedora: Security Advisory for golang-github-cockroachdb-pebble (FEDORA-2022-5ef0bd9a27)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/07/31 12:00 a.m.•20 views

Fedora: Security Advisory for golang-github-letsencrypt-pebble (FEDORA-2022-ea8f4e232d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
•added 2022/07/30 1:57 a.m.•20 views

[SECURITY] Fedora 36 Update: golang-github-letsencrypt-pebble-2.3.1-6.fc36

A miniature version of Boulder, Pebble is a small RFC 8555 ACME test server n ot suited for a production certificate authority...

7.3AI score
SaveExploits0
Fedora
Fedora
•added 2022/07/30 1:55 a.m.•23 views

[SECURITY] Fedora 36 Update: golang-github-cockroachdb-pebble-0-0.9.20210108git48f5530.fc36

RocksDB/LevelDB inspired key-value database in Go...

1.4AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2022/07/21 12:00 a.m.•29 views

Fedora: Security Advisory for golang-github-letsencrypt-pebble (FEDORA-2022-3e1ade35db)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
Fedora
Fedora
•added 2022/07/20 1:40 a.m.•42 views

[SECURITY] Fedora 35 Update: golang-github-letsencrypt-pebble-2.3.1-5.fc35

A miniature version of Boulder, Pebble is a small RFC 8555 ACME test server n ot suited for a production certificate authority...

9.3CVSS8.2AI score0.0995EPSS
SaveExploits4
OpenVAS
OpenVAS
•added 2022/07/18 12:00 a.m.•25 views

Fedora: Security Advisory for golang-github-cockroachdb-pebble (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS9.1AI score0.05994EPSS
SaveExploits1References2
Fedora
Fedora
•added 2022/07/17 1:15 a.m.•42 views

[SECURITY] Fedora 35 Update: golang-github-cockroachdb-pebble-0-0.6.20210108git48f5530.fc35

RocksDB/LevelDB inspired key-value database in Go...

9.3CVSS1.4AI score0.0995EPSS
SaveExploits3
OpenVAS
OpenVAS
•added 2022/07/14 12:00 a.m.•30 views

Fedora: Security Advisory for golang-github-letsencrypt-pebble (FEDORA-2022-ba365d3703)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS8.9AI score0.0416EPSS
SaveExploits2References2
Fedora
Fedora
•added 2022/07/13 2:00 a.m.•37 views

[SECURITY] Fedora 36 Update: golang-github-letsencrypt-pebble-2.3.1-5.fc36

A miniature version of Boulder, Pebble is a small RFC 8555 ACME test server n ot suited for a production certificate authority...

9.3CVSS8.2AI score0.0995EPSS
SaveExploits4
OpenVAS
OpenVAS
•added 2022/07/06 12:00 a.m.•21 views

Fedora: Security Advisory for golang-github-cockroachdb-pebble (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
Fedora
Fedora
•added 2022/07/04 1:35 a.m.•40 views

[SECURITY] Fedora 36 Update: golang-github-cockroachdb-pebble-0-0.8.20210108git48f5530.fc36

RocksDB/LevelDB inspired key-value database in Go...

9.3CVSS8.1AI score0.0995EPSS
SaveExploits4
osv_ghsa
osv_ghsa
•added 2022/05/24 10:01 p.m.•26 views

GHSA-83M8-7HJ8-FF5W Pebble Templates Improper Input Validation vulnerability

Pebble Templates prior to 3.1.4 allows attackers to bypass a protection mechanism intended to block access to instances of java.lang.Class because getClass is accessible via the public static java.lang.Class java.lang.Class.forNamejava.lang.Module,java.lang.String signature...

9.8CVSS9.4AI score0.01277EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2022/05/24 10:01 p.m.•30 views

Pebble Templates Improper Input Validation vulnerability

Pebble Templates prior to 3.1.4 allows attackers to bypass a protection mechanism intended to block access to instances of java.lang.Class because getClass is accessible via the public static java.lang.Class java.lang.Class.forNamejava.lang.Module,java.lang.String signature...

9.8CVSS6.9AI score0.01277EPSS
SaveExploits1References5Affected Software1
OpenVAS
OpenVAS
•added 2022/05/08 12:00 a.m.•27 views

Fedora: Security Advisory for golang-github-cockroachdb-pebble (FEDORA-2022-08ae2dd481)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
Fedora
Fedora
•added 2022/05/07 5:06 a.m.•31 views

[SECURITY] Fedora 36 Update: golang-github-cockroachdb-pebble-0-0.7.20210108git48f5530.fc36

RocksDB/LevelDB inspired key-value database in Go...

7.5CVSS1.4AI score0.03931EPSS
SaveExploits0
osv_cve
osv_cve
•added 2021/08/11 4:15 p.m.•22 views

CVE-2021-38546

CREATIVE Pebble devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, the intensit...

5.9CVSS5.8AI score0.01287EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/08/11 4:15 p.m.•13 views

CVE-2021-38546

CREATIVE Pebble devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, the intensit...

5.9CVSS6.4AI score0.01287EPSS
SaveExploits1References2
Rows per page
Query Builder