Lucene search
K

31230 matches found

OSV
OSV
added 2024/06/28 2:15 p.m.2 views

UBUNTU-CVE-2024-38531

Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible. A build process has access to and can change the permissions of the build directory. After creating a setuid binary in a globally accessible location, a malicious local user can assu...

3.6CVSS5.8AI score0.00143EPSS
Exploits0References5
CVE
CVE
added 2024/06/28 1:18 p.m.73 views

CVE-2024-38531

CVE-2024-38531 affects the Nix package manager. A build process can access and modify the permissions of the build directory, and after a setuid binary is created in a globally accessible location, a local attacker could assume the permissions of a Nix daemon worker and hijack all future builds. ...

3.6CVSS3.7AI score0.00143EPSS
Exploits0References2
OSV
OSV
added 2024/06/28 1:18 p.m.27 views

CVE-2024-38531 Nix sandbox escape

Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible. A build process has access to and can change the permissions of the build directory. After creating a setuid binary in a globally accessible location, a malicious local user can assu...

3.6CVSS4.5AI score0.00143EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2024/06/28 1:18 p.m.14 views

CVE-2024-38531

Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible. A build process has access to and can change the permissions of the build directory. After creating a setuid binary in a globally accessible location, a malicious local user can assu...

3.6CVSS5.3AI score0.00143EPSS
Exploits0
CNVD
CNVD
added 2024/06/27 12:0 a.m.1 views

Binary Vulnerability in OpenPrinting libcups

openprinting is Red Hat, SUSE, Debian, Ubuntu and all other Linux systems, Posix-style operating systems and mac operating systems are common on the open source printing system. A binary vulnerability in OpenPrinting libcups can be exploited by attackers to cause a denial-of-service attack...

7AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/06/26 12:0 a.m.17 views

Rockwell Automation ThinManager ThinServer RCE (CVE-2024-5988)

Binary data rockwellthinmanagerthinservercve-2024-5988.nbin...

9.8CVSS9.6AI score0.02654EPSS
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:49 p.m.4 views

Malicious code in binary-search_tree (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0References1
OSV
OSV
added 2024/06/25 1:49 p.m.7 views

MAL-2024-6780 Malicious code in binary-search_tree (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:49 p.m.4 views

Malicious code in binary-search_frequency (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0References1
OSV
OSV
added 2024/06/25 1:49 p.m.10 views

MAL-2024-6779 Malicious code in binary-search_frequency (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/06/25 12:0 a.m.8 views

PyTorch Detection

Binary data pytorchdetect.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/06/24 12:0 a.m.14 views

Adobe FrameMaker Publishing Server Authentication Bypass (CVE-2024-30299)

Binary data adobefmpsapiauthbypass.nbin...

10CVSS9.6AI score0.01051EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/06/21 12:0 a.m.9 views

Mattermost Desktop Installed (macOS)

Binary data macosmattermostdesktopinstalled.nbin...

7.3AI score
Exploits0References1
OSV
OSV
added 2024/06/19 2:15 p.m.2 views

DEBIAN-CVE-2024-38547

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: sshcss: Fix a null-pointer dereference in loadvideobinaries The allocation failure of mycs-yuvscalerbinary in loadvideobinaries is followed with a dereference of mycs-yuvscalerbinary after the following call chain...

5.5CVSS5.2AI score0.00256EPSS
Exploits0References1
OSV
OSV
added 2024/06/19 2:15 p.m.0 views

UBUNTU-CVE-2024-38547

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: sshcss: Fix a null-pointer dereference in loadvideobinaries The allocation failure of mycs-yuvscalerbinary in loadvideobinaries is followed with a dereference of mycs-yuvscalerbinary after the following call chain...

5.5CVSS6AI score0.00256EPSS
Exploits0References21
The Hacker News
The Hacker News
added 2024/06/18 9:41 a.m.33 views

New Malware Targets Exposed Docker APIs for Cryptocurrency Mining

Cybersecurity researchers have uncovered a new malware campaign that targets publicly exposed Docket API endpoints with the aim of delivering cryptocurrency miners and other payloads. Included among the tools deployed is a remote access tool that's capable of downloading and executing more...

7.8AI score
Exploits0
SUSE CVE
SUSE CVE
added 2024/06/18 2:44 a.m.2 views

SUSE CVE-2024-36587

Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy...

7.8CVSS7.2AI score0.00173EPSS
Exploits1References3
NVD
NVD
added 2024/06/16 4:15 p.m.10 views

CVE-2024-38462

iRODS before 4.3.2 provides an msiSendMail function with a problematic dependency on the mail binary, such as in the mailMS.cppL94-L106 reference...

9.8CVSS0.00608EPSS
Exploits0References4
OSV
OSV
added 2024/06/16 4:15 p.m.12 views

CVE-2024-38462

iRODS before 4.3.2 provides an msiSendMail function with a problematic dependency on the mail binary, such as in the mailMS.cppL94-L106 reference...

9.8CVSS7.1AI score
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/06/16 12:0 a.m.4 views

PT-2024-28018 · Irods · Irods

Name of the Vulnerable Software and Affected Versions: iRODS versions prior to 4.3.2 Description: The issue concerns a problematic dependency on the mail binary in the msiSendMail function. This function is referenced in mailMS.cppL94-L106. Recommendations: For versions prior to 4.3.2, update to...

9.8CVSS7.2AI score0.00608EPSS
Exploits0References8
Rows per page
Query Builder