Lucene search
K

649 matches found

Fedora
Fedora
added 2022/07/04 1:35 a.m.11 views

[SECURITY] Fedora 36 Update: golang-x-perf-0-0.15.20210123gitbdcc622.fc36

This package holds the source for various tools related to performance measurement, storage, and analysis. - cmd/benchstat contains a command-line tool that computes and 7 compares statistics about benchmarks. - cmd/benchsave contains a command-line tool for publishing benchmark results. - storag...

9.3CVSS8.1AI score0.00963EPSS
Exploits4
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:21 p.m.1 views

Malicious code in github-action-benchmark (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f873a3ef25b833c6a1b1d4b8d5079265a195382dc4dbbfda249bcf9ae8d20c8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2022/06/20 8:21 p.m.5 views

MAL-2022-3371 Malicious code in github-action-benchmark (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f873a3ef25b833c6a1b1d4b8d5079265a195382dc4dbbfda249bcf9ae8d20c8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Veracode
Veracode
added 2022/05/09 7:14 a.m.8 views

Man In The Middle (MitM)

xterm-benchmark is vulnerable to man-in-the-middle. The library does not download its dependency package via secure channel using https, allowing an attacker to intercept the communication...

2.1AI score
Exploits0
Fedora
Fedora
added 2022/05/07 5:6 a.m.19 views

[SECURITY] Fedora 36 Update: golang-x-perf-0-0.14.20210123gitbdcc622.fc36

This package holds the source for various tools related to performance measurement, storage, and analysis. - cmd/benchstat contains a command-line tool that computes and 7 compares statistics about benchmarks. - cmd/benchsave contains a command-line tool for publishing benchmark results. - storag...

7.5CVSS9.3AI score0.00089EPSS
Exploits0
Fedora
Fedora
added 2022/04/28 5:55 a.m.17 views

[SECURITY] Fedora 34 Update: golang-x-perf-0-0.14.20210123gitbdcc622.fc34

This package holds the source for various tools related to performance measurement, storage, and analysis. - cmd/benchstat contains a command-line tool that computes and 7 compares statistics about benchmarks. - cmd/benchsave contains a command-line tool for publishing benchmark results. - storag...

7.5CVSS9.3AI score0.00089EPSS
Exploits0
Fedora
Fedora
added 2022/04/28 5:53 a.m.22 views

[SECURITY] Fedora 35 Update: golang-x-perf-0-0.14.20210123gitbdcc622.fc35

This package holds the source for various tools related to performance measurement, storage, and analysis. - cmd/benchstat contains a command-line tool that computes and 7 compares statistics about benchmarks. - cmd/benchsave contains a command-line tool for publishing benchmark results. - storag...

7.5CVSS9.3AI score0.00089EPSS
Exploits0
NVD
NVD
added 2022/04/27 4:15 p.m.11 views

CVE-2022-22521

In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin...

7.3CVSS0.00123EPSS
Exploits2References4
OSV
OSV
added 2022/04/27 4:15 p.m.0 views

CVE-2022-22521

In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin...

7.3CVSS5.9AI score
Exploits0References4
Prion
Prion
added 2022/04/27 4:15 p.m.9 views

Code injection

In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin...

6.9CVSS7.2AI score0.00123EPSS
Exploits2References4Affected Software1
Cvelist
Cvelist
added 2022/04/27 3:15 p.m.10 views

CVE-2022-22521 Privilege Escalation in Miele Benchmark Programming Tool

In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin...

7.3CVSS7.5AI score0.00123EPSS
Exploits2References4
CVE
CVE
added 2022/04/27 3:15 p.m.83 views

CVE-2022-22521

CVE-2022-22521 affects the Miele Benchmark Programming Tool. Versions prior to 1.2.71 allow an attacker with low privileges to cause a user with administrative privileges to execute manipulated executables, enabling privilege escalation. The issue is documented across multiple sources (NVD/NVD CV...

7.3CVSS7.3AI score0.00123EPSS
Exploits2References4Affected Software1
Packet Storm
Packet Storm
added 2022/04/27 12:0 a.m.212 views

Miele Benchmark Programming Tool 1.1.49 / 1.2.71 Privilege Escalation

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Privilege Escalation product: Miele Benchmark Programming Tool vulnerable version: at least 1.1.49 and 1.2.71 fixed version: 1.2.72 CVE number: CVE-2022-22521 impact:...

1AI score0.00123EPSS
Exploits2
ATTACKERKB
ATTACKERKB
added 2022/04/27 12:0 a.m.4 views

CVE-2022-22521

In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin...

7.3CVSS7.2AI score0.00123EPSS
Exploits2References5Affected Software1
Positive Technologies
Positive Technologies
added 2022/04/27 12:0 a.m.2 views

PT-2022-15491 · Miele · Miele Benchmark Programming Tool

Name of the Vulnerable Software and Affected Versions: Miele Benchmark Programming Tool versions prior to 1.2.71 Description: The issue allows executable files manipulated by attackers to be unknowingly executed with user privileges. An attacker with low privileges may trick a user with...

7.3CVSS7.3AI score0.00123EPSS
Exploits2References7
CNNVD
CNNVD
added 2022/04/27 12:0 a.m.2 views

Miele Benchmark Programming Tool 安全漏洞

Miele Benchmark Programming Tool is a desktop application from Miele Germany. It allows users to easily edit washing machine and tumble dryer programs and machine settings on their Miele Professional devices. A security vulnerability exists in Miele Benchmark Programming Tool versions prior to...

7.3CVSS7.3AI score0.00123EPSS
Exploits2References7
Hacker One
Hacker One
added 2022/02/22 10:34 p.m.33 views

Ruby on Rails: ReDoS in Rack::Multipart

A regular expression denial of service ReDoS vulnerability was discovered in the Rack gem's Multipart module. This vulnerability allowed an attacker to cause a denial of service by sending a specially crafted header, resulting in excessive CPU usage on the server. The vulnerability has been patch...

7.5CVSS8AI score0.01042EPSS
Exploits0
CNVD
CNVD
added 2022/01/05 12:0 a.m.15 views

dhrystone buffer overflow vulnerability

dhrystone is a comprehensive benchmark program for system integer programming from the personal developer Reinhold P. Weicker. dhrystone suffers from a buffer error vulnerability stemming from a null pointer dereference in the main function dhry1.c of dhrystone 2.1, which could be exploited by an...

7.5CVSS5.3AI score0.00336EPSS
Exploits0References1
Wallarm Lab
Wallarm Lab
added 2021/09/14 11:43 p.m.40 views

Wallarm API Firewall outperforms Nginx in a production environment

Wallarm API Firewall is a free light-weighted API Firewall that protects your API endpoints in cloud-native environments with API schema validation. Wallarm API Firewall relies on a positive security model allowing calls that match a predefined API specification, while rejecting everything else...

6.9AI score
Exploits0
Openbugbounty
Openbugbounty
added 2021/08/20 9:13 p.m.32 views

benchmark-learning.com Cross Site Scripting vulnerability OBB-2120641

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Exploits0
Rows per page
Query Builder