Lucene search
K

18 matches found

vulnersOsv
vulnersOsv
added 2026/03/05 10:1 p.m.4 views

admet-workbench (>=0.1.0 <=0.1.1), agent-gpt-aws (>=0.4.4 <=0.9.5) +83 more potentially affected by unknown CVE via sagemaker (>=1.52.1 <=3.10.1)

sagemaker PYPI version =1.52.1, =0.1.0, =0.4.4, =1.0.29, =1.3.24, =0.1.1b20230324, =0.0.2, =0.4.6, =0.1.13, =5.118.1, =0.1.0, =5.11.0, =5.11.0a0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5R2P-PJR8-7FH7...

5.8AI score
Exploits0
vulnersOsv
vulnersOsv
added 2026/03/05 10:1 p.m.3 views

admet-workbench (>=0.1.0 <=0.1.1), agent-gpt-aws (>=0.4.4 <=0.9.5) +53 more potentially affected by unknown CVE via sagemaker-core (=2.10.1)

sagemaker-core PYPI version =2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker-core and may be impacted: - admet-workbench =0.1.0, =0.4.4, =1.3.16, =0.0.2, =0.1.13, =0.1.0, =0.4.0, =1.0.1, =0.4.0, =0.1.12, =0.1.0, =0.2.7 and more Source...

5.8AI score
Exploits0
vulnersOsv
vulnersOsv
added 2026/02/02 11:33 p.m.2 views

admet-workbench (>=0.1.0 <=0.1.1), agent-gpt-aws (>=0.4.4 <=0.9.5) +49 more potentially affected by CVE-2026-1777 via sagemaker (=3.10.1)

sagemaker PYPI version =3.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - admet-workbench =0.1.0, =0.4.4, =1.3.24, =0.0.2, =0.1.13, =0.1.0, =0.4.0, =1.0.1, =0.4.0, =0.1.12, =0.1.0, =0.2.7 and more Source cves:...

8.5CVSS5.8AI score0.00022EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2023-46673

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate...

7.5CVSS7.2AI score0.00458EPSS
Exploits0References2
Veracode
Veracode
added 2023/11/23 7:34 a.m.231 views

Denial Of Service (DoS)

elasticsearch is vulnerable to Denial Of Service DoS. The vulnerability is caused due to a lack of exception handling while calling the simulate pipeline API. The script processor of an ingest pipeline fails to handle malformed scripts. This can lead to an elastic node crash and ultimately deny...

7.5CVSS7AI score0.00458EPSS
Exploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2023/11/23 1:57 a.m.87 views

CVE-2023-46673

A flaw was found in Elasticsearch. A malicious script used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API. Mitigation No mitigation is yet available for this flaw...

7.5CVSS6.8AI score0.00458EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2023/11/22 12:30 p.m.25 views

Elasticsearch Improper Handling of Exceptional Conditions

It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API...

7.5CVSS7.1AI score0.00458EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2023/11/22 9:27 a.m.32 views

CVE-2023-46673

It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API...

6.5CVSS7.6AI score0.00458EPSS
Exploits0References2
CVE
CVE
added 2023/11/22 9:27 a.m.105 views

CVE-2023-46673

CVE-2023-46673 affects Elastic Elasticsearch. Malformed scripts in the script processor of an Ingest Pipeline can cause an Elasticsearch node to crash when calling the Simulate Pipeline API, enabling a denial of service. The vulnerability is tied to the Simulate Pipeline API handling and may impa...

7.5CVSS7.3AI score0.00458EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/22 12:0 a.m.2 views

PT-2023-30154 · Unknown · Elasticsearch

Name of the Vulnerable Software and Affected Versions: Elasticsearch affected versions not specified Description: The issue arises from malformed scripts used in the script processor of an Ingest Pipeline, which can cause an Elasticsearch node to crash when calling the "Simulate Pipeline API"...

7.5CVSS7.2AI score0.00458EPSS
Exploits0References12
OpenVAS
OpenVAS
added 2022/02/16 12:0 a.m.18 views

Fedora: Security Advisory for zsh (FEDORA-2022-adf0c6d196)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.8AI score0.00147EPSS
Exploits0References2
Fedora
Fedora
added 2020/03/13 2:30 a.m.25 views

[SECURITY] Fedora 30 Update: zsh-5.7.1-6.fc30

The zsh shell is a command interpreter usable as an interactive login shell and as a shell script command processor. Zsh resembles the ksh shell the Korn shell, but includes many enhancements. Zsh supports command line editing, built-in spelling correction, programmable command completion, shell...

7.8CVSS0.8AI score0.00092EPSS
Exploits0
OpenVAS
OpenVAS
added 2020/03/13 12:0 a.m.27 views

Fedora: Security Advisory for zsh (FEDORA-2020-9009363f0f)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.9AI score0.00092EPSS
Exploits0References2
Fedora
Fedora
added 2018/04/17 12:24 a.m.20 views

[SECURITY] Fedora 28 Update: zsh-5.5-1.fc28

The zsh shell is a command interpreter usable as an interactive login shell and as a shell script command processor. Zsh resembles the ksh shell the Korn shell, but includes many enhancements. Zsh supports command line editing, built-in spelling correction, programmable command completion, shell...

7.8CVSS0.8AI score0.00074EPSS
Exploits0
CVE
CVE
added 2014/06/11 1:0 a.m.76 views

CVE-2014-1817

CVE-2014-1817 concerns a vulnerability in usp10.dll (Uniscribe) that affects multiple Windows versions (Server 2003 SP2, Vista, Server 2008/2008 R2, Windows 7/8/8.1, Server 2012/R2) and related Office components. The issue arises from processing a crafted EMF+ record in a font file, enabling remo...

9.3CVSS8.6AI score0.44437EPSS
Exploits0References7Affected Software9
Tenable Nessus
Tenable Nessus
added 2013/08/14 12:0 a.m.40 views

MS13-060: Vulnerability in Unicode Scripts Processor Could Allow Remote Code Execution (2850869)

The version of Microsoft Windows installed on the remote host includes a vulnerable version of the Unicode Script Processor, also known as Uniscribe. Some font types are not parsed correctly, which can result in memory corruption. An attacker could exploit this by tricking a user into viewing a...

9.3CVSS5.9AI score0.44472EPSS
Exploits1References2
Check Point Advisories
Check Point Advisories
added 2010/09/14 12:0 a.m.3 views

Embedded Base-64 Encoded TTF Files (CVE-2010-2738)

Unicode Script Processor is a Windows component that enables a text layout client to format complex scripts. A remote code execution vulnerability has been reported in the way affected versions of Microsoft Windows incorrectly parse specific font types. A remote attacker could exploit this issue...

9.3CVSS7.2AI score0.15844EPSS
Exploits5
Tenable Nessus
Tenable Nessus
added 2010/09/14 12:0 a.m.40 views

MS10-063: Vulnerability in Unicode Scripts Processor Could Allow Remote Code Execution (2320113)

The version of Microsoft Windows or Microsoft Office on the remote host includes a version of the Unicode Script Processor Usp10.dll, also known as Uniscribe, which incorrectly validates a table in OpenType fonts. If an attacker can trick a user on the affected system into visiting a malicious...

9.3CVSS5.9AI score0.15844EPSS
Exploits5References2
Rows per page
Query Builder