Lucene search
+L

32698 matches found

OSV
OSV
added 2023/09/19 6:30 a.m.79 views

GHSA-6F9P-G466-F8V8 blamer vulnerable to Arbitrary Argument Injection via the blameByFile() API

Versions of the blamer package before 1.0.4 are vulnerable to Arbitrary Argument Injection via the blameByFile API. The library does not sanitize for user input or validate the given file path conforms to a specific schema, nor does it properly pass command-line flags to the git binary using the...

6.5CVSS9.1AI score0.00924EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2023/09/19 6:30 a.m.33 views

blamer vulnerable to Arbitrary Argument Injection via the blameByFile() API

Versions of the blamer package before 1.0.4 are vulnerable to Arbitrary Argument Injection via the blameByFile API. The library does not sanitize for user input or validate the given file path conforms to a specific schema, nor does it properly pass command-line flags to the git binary using the...

9.1CVSS9.1AI score0.00924EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2023/09/19 5:17 a.m.42 views

CVE-2023-26143

Versions of the package blamer before 1.0.4 are vulnerable to Arbitrary Argument Injection via the blameByFile API. The library does not sanitize for user input or validate the given file path conforms to a specific schema, nor does it properly pass command-line flags to the git binary using the...

9.1CVSS7.3AI score0.00924EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2023/09/19 5:00 a.m.8 views

CVE-2023-26143

Versions of the package blamer before 1.0.4 are vulnerable to Arbitrary Argument Injection via the blameByFile API. The library does not sanitize for user input or validate the given file path conforms to a specific schema, nor does it properly pass command-line flags to the git binary using the...

6.5CVSS7.2AI score0.00924EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/09/19 5:00 a.m.57 views

CVE-2023-26143

Versions of the package blamer before 1.0.4 are vulnerable to Arbitrary Argument Injection via the blameByFile API. The library does not sanitize for user input or validate the given file path conforms to a specific schema, nor does it properly pass command-line flags to the git binary using the...

6.5CVSS9.7AI score0.00924EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2023/09/19 1:56 a.m.15 views

SUSE CVE-2023-36479

Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have the wrong command executed. If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for a binary with a space in its name, th...

3.5CVSS8AI score0.01162EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2023/09/19 12:00 a.m.10 views

The vulnerability of the libbfd library in the GNU Binutils development environment, related to the handling of zero pointer operations, allows attackers to trigger a service failure.

The vulnerability of the libbfd library in the GNU Binutils development environment is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.01055EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/09/16 12:00 a.m.17 views

The vulnerability of the CLFS driver for Windows operating systems allows attackers to gain increased privileges.

The vulnerability of the CLFS driver in Windows operating systems is related to the issue where operations exceed the buffer boundaries in memory when processing BLF log files. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS7.2AI score0.0373EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2023/09/15 6:37 p.m.68 views

CVE-2023-36479

Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have the wrong command executed. If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for a binary with a space in its name, th...

3.5CVSS6AI score0.01162EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2023/09/15 12:00 a.m.12 views

NETGEAR ProSAFE Network Management System (NMS) Detection

Binary data netgearnmsdetect.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/09/15 12:00 a.m.45 views

Grafana Labs WebUI Default Credentials

Binary data grafanalabswebuidefaultcreds.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/09/15 12:00 a.m.36 views

NETGEAR ProSAFE Network Management System Authentication Bypass (CVE-2023-38096)

Binary data netgearnmszdi-23-920.nbin...

9.8CVSS9.3AI score0.82035EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/14 4:16 p.m.4 views

GHSA-3GH6-V5V9-6V9J Jetty vulnerable to errant command quoting in CGI Servlet

If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for a binary with a space in its name, the servlet will escape the command by wrapping it in quotation marks. This wrapped command, plus an optional command prefix, will then be executed through a call to Runtime.exec. If the...

3.5CVSS6.9AI score0.01162EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
added 2023/09/14 12:00 a.m.13 views

Grafana Labs Web Detection

Binary data grafanalabsdetect.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/09/14 12:00 a.m.28 views

OpenSSH Detection

Binary data opensshdetect.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/09/14 12:00 a.m.27 views

Apple iOS < 15.7.9 Vulnerability (HT213913)

Binary data appleios1579check.nbin...

7.8CVSS7.3AI score0.4506EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2023/09/14 12:00 a.m.24 views

Apple iOS < 16.6.1 Multiple Vulnerabilities (HT213905)

Binary data appleios1661check.nbin...

7.8CVSS7.3AI score0.4506EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2023/09/14 12:00 a.m.14 views

Maxthon Browser Installed (Windows)

Binary data maxthonbrowserwininstalled.nbin...

7.3AI score
SaveExploits0References1
Kitploit
Kitploit
added 2023/09/12 11:30 a.m.102 views

VTScanner - A Comprehensive Python-based Security Tool For File Scanning, Malware Detection, And Analysis In An Ever-Evolving Cyber Landscape

VTScanner is a versatile Python tool that empowers users to perform comprehensive file scans within a selected directory for malware detection and analysis. It seamlessly integrates with the VirusTotal API to deliver extensive insights into the safety of your files. VTScanner is compatible with...

7.1AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/09/12 12:00 a.m.6 views

Puppet Enterprise Installed (Linux)

Binary data puppetenterprisenixinstalled.nbin...

7.3AI score
SaveExploits0References1
Rows per page
Query Builder