Lucene search
+L

453 matches found

osv_suse
osv_suse
•added 2022/07/04 7:52 a.m.•18 views

SUSE-SU-2022:2251-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2022-1292: Fixed command injection in crehash bsc1199166. - CVE-2022-2068: Fixed more shell code injection issues in crehash. bsc1200550...

10CVSS6.8AI score0.96391EPSS
SaveExploits6References6
osv_suse
osv_suse
•added 2022/06/28 4:04 a.m.•12 views

SUSE-SU-2022:2197-1 Security update for openssl-1_0_0

This update for openssl-100 fixes the following issues: - CVE-2022-1292: Fixed command injection in crehash bsc1199166. - CVE-2022-2068: Fixed more shell code injection issues in crehash. bsc1200550...

10CVSS6.8AI score0.96391EPSS
SaveExploits6References5
OpenVAS
OpenVAS
•added 2022/06/27 12:00 a.m.•45 views

SUSE: Security Advisory (SUSE-SU-2022:2180-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.4AI score0.96391EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2022/06/27 12:00 a.m.•27 views

SUSE: Security Advisory (SUSE-SU-2022:2182-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.8AI score0.96391EPSS
SaveExploits6References6
osv_suse
osv_suse
•added 2022/06/24 12:32 p.m.•20 views

SUSE-SU-2022:2182-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2022-1292: Fixed command injection in crehash bsc1199166. - CVE-2022-2068: Fixed more shell code injection issues in crehash. bsc1200550...

10CVSS6.8AI score0.96391EPSS
SaveExploits6References6
osv_suse
osv_suse
•added 2022/06/24 12:29 p.m.•12 views

SUSE-SU-2022:2181-1 Security update for openssl

This update for openssl fixes the following issues: - CVE-2022-2068: Fixed more shell code injection issues in crehash. bsc1200550...

10CVSS9.8AI score0.96391EPSS
SaveExploits1References3
osv_suse
osv_suse
•added 2022/06/24 12:28 p.m.•6 views

SUSE-SU-2022:2180-1 Security update for openssl

This update for openssl fixes the following issues: - CVE-2022-2068: Fixed more shell code injection issues in crehash. bsc1200550...

10CVSS9.8AI score0.96391EPSS
SaveExploits1References3
osv_suse
osv_suse
•added 2022/06/24 12:05 p.m.•14 views

SUSE-SU-2022:2179-1 Security update for openssl

This update for openssl fixes the following issues: - CVE-2022-2068: Fixed more shell code injection issues in crehash. bsc1200550...

10CVSS9.8AI score0.96391EPSS
SaveExploits1References3
GithubExploit
GithubExploit
•added 2022/06/04 7:48 p.m.•452 views

Exploit for CVE-2022-30190

CVE-2022-30190 !N|Solidhttps://socprime.com/wp-content/up...

9.3CVSS8.1AI score0.99163EPSS
SaveExploits64
osv_ghsa
osv_ghsa
•added 2022/05/24 5:38 p.m.•32 views

GHSA-99XX-83JM-H24M ClusterLabs crmsh vulnerable to shell code injection

An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call crm history when crm is run were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges...

7.8CVSS8.2AI score0.00689EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
•added 2022/05/24 5:38 p.m.•35 views

ClusterLabs crmsh vulnerable to shell code injection

An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call crm history when crm is run were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges...

7.8CVSS8.2AI score0.00689EPSS
SaveExploits1References8Affected Software1
osv_ghsa
osv_ghsa
•added 2022/03/29 10:10 p.m.•88 views

GHSA-838H-JQP6-CF2F Sandbox bypass leading to arbitrary code execution in Deno

Impact The versions of Deno between release 1.18.0 and 1.20.2 inclusive are vulnerable to an attack where a malicious actor controlling the code executed in a Deno runtime could bypass permission checks and execute arbitrary shell code. There is no evidence that this vulnerability has been...

10CVSS9.6AI score0.01147EPSS
SaveExploits0References7
Prion
Prion
•added 2022/03/25 10:15 p.m.•59 views

Code injection

Deno is a runtime for JavaScript and TypeScript. The versions of Deno between release 1.18.0 and 1.20.2 inclusive are vulnerable to an attack where a malicious actor controlling the code executed in a Deno runtime could bypass all permission checks and execute arbitrary shell code. This...

7.5CVSS9.6AI score0.01147EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/03/25 9:15 p.m.•65 views

CVE-2022-24783 Sandbox bypass leading to arbitrary code execution in Deno

Deno is a runtime for JavaScript and TypeScript. The versions of Deno between release 1.18.0 and 1.20.2 inclusive are vulnerable to an attack where a malicious actor controlling the code executed in a Deno runtime could bypass all permission checks and execute arbitrary shell code. This...

10CVSS9.8AI score0.01147EPSS
SaveExploits0References1
Mend
Mend
•added 2022/03/25 9:15 p.m.•8 views

CVE-2022-24783

Deno is a runtime for JavaScript and TypeScript. The versions of Deno between release 1.18.0 and 1.20.2 inclusive are vulnerable to an attack where a malicious actor controlling the code executed in a Deno runtime could bypass all permission checks and execute arbitrary shell code. This...

10CVSS0.01147EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2022/03/25 12:00 a.m.•26 views

Deno security vulnerabilities

Deno is open source a simple , modern and secure JavaScript and TypeScript runtime environment . It uses V8 and built with Rust. Versions of Deno from 1.18.0 to 1.20.2 contain a security vulnerability that allows an attacker to bypass all privilege checks and execute arbitrary shell code...

10CVSS8.6AI score0.01147EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/25 12:00 a.m.•8 views

CVE-2022-24783: Improper Privilege Management

Deno is a runtime for JavaScript and TypeScript. The versions of Deno between release 1.18.0 and 1.20.2 inclusive are vulnerable to an attack where a malicious actor controlling the code executed in a Deno runtime could bypass all permission checks and execute arbitrary shell code. This...

10CVSS8.2AI score0.01147EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/03/25 12:00 a.m.•26 views

PT-2022-16876 · Deno · Deno

Name of the Vulnerable Software and Affected Versions: Deno versions 1.18.0 through 1.20.2 Description: The issue allows a malicious actor controlling the code executed in a Deno runtime to bypass all permission checks and execute arbitrary shell code. This does not affect users of Deno Deploy. T...

10CVSS9.6AI score0.01147EPSS
SaveExploits0References10
Packet Storm
Packet Storm
•added 2022/03/07 12:00 a.m.•268 views

part-db 0.5.11 Remote Code Execution

Exploit Title: part-db 0.5.11 - Remote Code Execution RCE Google Dork: NA Date: 03/04/2022 Exploit Author: Sunny Mehra @DSKMehra Vendor Homepage: https://github.com/part-db/part-db Software Link: https://github.com/part-db/part-db Version: 0.5.11. Tested on: KALI OS CVE : CVE-2022-0848...

9.6AI score0.35436EPSS
SaveExploits5
zdt
zdt
•added 2022/03/07 12:00 a.m.•584 views

part-db 0.5.11 - Remote Code Execution Exploit

Exploit Title: part-db 0.5.11 - Remote Code Execution RCE Exploit Author: Sunny Mehra @DSKMehra Vendor Homepage: https://github.com/part-db/part-db Software Link: https://github.com/part-db/part-db Version: 0.5.11. Tested on: KALI OS CVE : CVE-2022-0848 --------------- !/bin/bash...

10CVSS9.6AI score0.35436EPSS
SaveExploits5
Rows per page
Query Builder