Lucene search
+L

51 matches found

AlpineLinux
AlpineLinux
•added 2024/11/26 3:15 p.m.•44 views

CVE-2024-36463

The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and use it to access internal properties of objects...

8.8CVSS7.3AI score0.0082EPSS
SaveExploits0References1
osv-debian
osv-debian
•added 2024/11/26 3:15 p.m.•11 views

DEBIAN-CVE-2024-36463

The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and use it to access internal properties of objects...

8.8CVSS6.6AI score0.0082EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/26 3:15 p.m.•64 views

CVE-2024-36463

The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and use it to access internal properties of objects...

8.8CVSS0.0082EPSS
SaveExploits0References1
osv-ubuntu
osv-ubuntu
•added 2024/11/26 3:15 p.m.•15 views

UBUNTU-CVE-2024-36463

The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and use it to access internal properties of objects...

8.8CVSS5.9AI score0.0082EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/11/26 3:06 p.m.•41 views

CVE-2024-36463

The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and use it to access internal properties of objects...

6.5CVSS0.0082EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/26 3:06 p.m.•100 views

CVE-2024-36463

The CVE-2024-36463 issue affects Zabbix JS where the atob implementation can be used to create strings with arbitrary content and access internal properties of objects. This is the stated vulnerability, but the provided documents do not specify affected versions, concrete exploit steps, or remedi...

8.8CVSS6.5AI score0.0082EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/26 3:06 p.m.•19 views

CVE-2024-36463

The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and use it to access internal properties of objects...

6.5CVSS7.2AI score0.0082EPSS
SaveExploits0References1
Mend
Mend
•added 2024/11/26 3:06 p.m.•6 views

CVE-2024-36463

The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and use it to access internal properties of objects...

8.8CVSS0.0082EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2024/11/26 3:06 p.m.•53 views

CVE-2024-36463

The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and use it to access internal properties of objects...

8.8CVSS6.6AI score0.0082EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/26 12:00 a.m.•2 views

CVE-2024-36463: Access to Critical Private Variable via Public Method

The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and use it to access internal properties of objects...

8.8CVSS6.8AI score0.0082EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/26 12:00 a.m.•23 views

Zabbix 安全漏洞

Zabbix is an open source monitoring system from Zabbix. The system supports network monitoring, server monitoring, cloud monitoring, and application monitoring. A security vulnerability exists in Zabbix that stems from an improper implementation of the atob function, which may allow the creation ...

8.8CVSS6.5AI score0.0082EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/28 12:00 a.m.•11 views

PT-2024-9177 · Zabbix +5 · Zabbix +5

Name of the Vulnerable Software and Affected Versions: Zabbix versions prior to 7.0.2 Description: The issue is related to the implementation of atob in "Zabbix JS", which allows creating a string with arbitrary content to access internal properties of objects. This can potentially lead to data...

9.9CVSS6.7AI score0.79105EPSS
SaveExploits15References119
SUSE CVE
SUSE CVE
•added 2023/05/24 2:01 a.m.•16 views

SUSE CVE-2021-46888

An issue was discovered in hledger before 1.23. A Stored Cross-Site Scripting XSS vulnerability exists in toBloodhoundJson that allows an attacker to execute JavaScript by encoding user-controlled values in a payload with base64 and parsing them with the atob function...

5.4CVSS5.6AI score0.00759EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2023/05/21 8:15 p.m.•14 views

CVE-2021-46888

An issue was discovered in hledger before 1.23. A Stored Cross-Site Scripting XSS vulnerability exists in toBloodhoundJson that allows an attacker to execute JavaScript by encoding user-controlled values in a payload with base64 and parsing them with the atob function...

5.4CVSS6AI score0.00759EPSS
SaveExploits1References5
Mend
Mend
•added 2023/05/21 12:00 a.m.•3 views

CVE-2021-46888

An issue was discovered in hledger before 1.23. A Stored Cross-Site Scripting XSS vulnerability exists in toBloodhoundJson that allows an attacker to execute JavaScript by encoding user-controlled values in a payload with base64 and parsing them with the atob function...

5.4CVSS0.00759EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/21 12:00 a.m.•5 views

CVE-2021-46888: Improper Neutralization of Input During Web Page Generation

An issue was discovered in hledger before 1.23. A Stored Cross-Site Scripting XSS vulnerability exists in toBloodhoundJson that allows an attacker to execute JavaScript by encoding user-controlled values in a payload with base64 and parsing them with the atob function...

5.4CVSS6.1AI score0.00759EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2023/02/15 5:30 a.m.•8 views

SUSE CVE-2014-1725

The base64DecodeInternal function in wtf/text/Base64.cpp in Blink, as used in Google Chrome before 34.0.1847.116, does not properly handle string data composed exclusively of whitespace characters, which allows remote attackers to cause a denial of service out-of-bounds read via a window.atob...

5CVSS8.7AI score0.01432EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2023/02/15 4:33 a.m.•11 views

SUSE CVE-2018-3745

atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below...

9.1CVSS9.1AI score0.02141EPSS
SaveExploits1References3
vulnersOsv
vulnersOsv
•added 2018/10/09 12:56 a.m.•7 views

@applicaster/zapp-pipes-dev-kit (1.2.2), @concordant/c-service (>=1.1.2, <=1.1.4) +78 more potentially affected by CVE-2018-3745 via atob (>=2.0.0, <=2.0.3)

atob NPM version =2.0.0, =1.1.2, =6.3.4, =6.5.2, =1.1.1, =6.4.2, =6.4.2, =2.3.2, =8.8.7, =8.9.6 and more Source cves: CVE-2018-3745 Source advisory: OSV:GHSA-8W4H-3CM3-2PM2...

9.1CVSS8.4AI score0.02141EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2018/10/09 12:56 a.m.•43 views

Out-of-bounds Read in atob

Versions of atob before 2.1.0 uninitialized Buffers when number is passed in input on Node.js 4.x and below. Recommendation Update to version 2.1.0 or later...

9.1CVSS4.4AI score0.02141EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder