Lucene search
+L

241 matches found

Github Security Blog
Github Security Blog
added 2022/11/21 12:30 p.m.36 views

Garbage collection issue in BC-FJA in Java 13 and later

An issue was discovered in the FIPS Java API of Bouncy Castle BC-FJA before 1.0.2.4. Changes to the JVM garbage collector in Java 13 and later trigger an issue in the BC-FJA FIPS modules where it is possible for temporary keys used by the module to be zeroed out while still in use by the module,...

5.5CVSS5.5AI score0.00431EPSS
SaveExploits1References5Affected Software1
Prion
Prion
added 2022/11/21 10:15 a.m.48 views

Code injection

An issue was discovered in the FIPS Java API of Bouncy Castle BC-FJA before 1.0.2.4. Changes to the JVM garbage collector in Java 13 and later trigger an issue in the BC-FJA FIPS modules where it is possible for temporary keys used by the module to be zeroed out while still in use by the module,...

1.7CVSS5.4AI score0.00431EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
added 2022/11/21 10:15 a.m.23 views

CVE-2022-45146

An issue was discovered in the FIPS Java API of Bouncy Castle BC-FJA before 1.0.2.4. Changes to the JVM garbage collector in Java 13 and later trigger an issue in the BC-FJA FIPS modules where it is possible for temporary keys used by the module to be zeroed out while still in use by the module,...

5.5CVSS6.5AI score0.00431EPSS
SaveExploits1References4
CVE
CVE
added 2022/11/21 12:00 a.m.484 views

CVE-2022-45146

CVE-2022-45146 affects the FIPS Java API in BC-FJA (Bouncy Castle) before 1.0.2.4. Changes to the JVM garbage collector in Java 13+ can cause temporary keys used by BC-FJA FIPS modules to be zeroed while still in use, leading to errors or potential information loss. Note: FIPS-certified Java vers...

5.5CVSS5.2AI score0.00431EPSS
SaveExploits1References3Affected Software1
RedHat Linux
RedHat Linux
added 2022/11/15 11:55 a.m.10 views

kernel: tipc: move bc link creation back to tipc_node_create

In the Linux kernel, the following vulnerability has been resolved: tipc: move bc link creation back to tipcnodecreate Shuang Li reported a NULL pointer dereference crash: BUG: kernel NULL pointer dereference, address: 0000000000000068 RIP: 0010:tipclinkisup+0x5/0x10 tipc Call Trace:...

7.5CVSS6AI score0.00693EPSS
SaveExploits0References5
Openbugbounty
Openbugbounty
added 2022/11/10 12:57 p.m.11 views

bc-crea.fr Cross Site Scripting vulnerability OBB-3047626

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/11/08 12:00 a.m.12 views

PT-2025-8597 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A NULL pointer dereference crash was reported in the Linux kernel. The issue occurs when a bc packet is received before the bc link is created, causing a dereference of a NULL pointer ...

8.8CVSS6.2AI score0.10458EPSS
SaveExploits39References406
OSV
OSV
added 2022/11/03 5:08 a.m.12 views

MAL-2022-1475 Malicious code in bc-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1d5617c26015681699f77459a3f1a44a8b19f0dcf78ed8228fc81852afb9a78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/11/03 5:08 a.m.8 views

Malicious code in bc-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1d5617c26015681699f77459a3f1a44a8b19f0dcf78ed8228fc81852afb9a78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2022/10/08 1:19 p.m.11 views

bc-iskra.ru Cross Site Scripting vulnerability OBB-2983828

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
NVD
NVD
added 2022/10/07 11:15 a.m.27 views

CVE-2022-40829

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php orlike function. Note: Multiple third parties have disputed this as not a valid vulnerability...

9.8CVSS0.0096EPSS
SaveExploits1References2
NVD
NVD
added 2022/10/07 11:15 a.m.32 views

CVE-2022-40831

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php like function. Note: Multiple third parties have disputed this as not a valid vulnerability...

9.8CVSS0.0096EPSS
SaveExploits1References2
Prion
Prion
added 2022/10/07 11:15 a.m.39 views

Sql injection

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php ornotlike function...

7.5CVSS9.8AI score0.0096EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2022/10/07 11:15 a.m.25 views

Sql injection

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php where function...

7.5CVSS9.8AI score0.00916EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2022/10/07 11:15 a.m.30 views

Sql injection

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php orwherein function...

7.5CVSS9.8AI score0.0096EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2022/10/07 11:15 a.m.31 views

Sql injection

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php wherein function...

7.5CVSS9.8AI score0.0096EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/07 12:00 a.m.13 views

CVE-2022-40827

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php where function. Note: Multiple third parties have disputed this as not a valid vulnerability...

8AI score0.00916EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2022/10/07 12:00 a.m.16 views

CVE-2022-40829

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php orlike function. Note: Multiple third parties have disputed this as not a valid vulnerability...

8AI score0.0096EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/10/07 12:00 a.m.48 views

CVE-2022-40828

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php orwherenotin function. Note: Multiple third parties have disputed this as not a valid vulnerability...

10AI score0.0096EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/10/07 12:00 a.m.37 views

CVE-2022-40833

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php orwherein function. Note: Multiple third parties have disputed this as not a valid vulnerability...

10AI score0.0096EPSS
SaveExploits1References2
Rows per page
Query Builder