17828 matches found
7ghost-cli (>=1.17.6-next.0, <=1.18.4), @ai16z/client-telegram (>=0.1.1, <=0.1.4-alpha.3) +131 more potentially affected by CVE-2024-56334 via systeminformation (>=5.0.6, <=5.23.6)
systeminformation NPM version =5.0.6, =1.17.6-next.0, =0.1.1, =0.1.1, =0.0.1-2.1-beta-provision, =1.0.10, =7.0.1, =7.0.1, =6.1.4, =6.1.4, =6.1.4, =6.1.4, =7.0.1, =6.1.4, =6.1.4, =6.1.4, =13.0.0 and more Source cves: CVE-2024-56334 Source advisory: OSV:GHSA-CVV5-9H9W-QP2M...
GHSA-6V67-2WR5-GVF4 vulnerabilities
Vulnerabilities for packages: cassandra-fips, dependency-track, sonarqube, cassandra-reaper, tez, apache-nifi, thingsboard, ontop-fips, management-api-for-apache-cassandra-4.1, cassandra, kserve-modelmesh, trino, akhq, ontop, sonar-scanner-cli, management-api-for-apache-cassandra-4.0, sonarqube-1...
CVE-2024-12798 vulnerabilities
Vulnerabilities for packages: cassandra-fips, dependency-track, sonarqube, cassandra-reaper, tez, apache-nifi, thingsboard, ontop-fips, management-api-for-apache-cassandra-4.1, cassandra, kserve-modelmesh, trino, akhq, ontop, sonar-scanner-cli, management-api-for-apache-cassandra-4.0, sonarqube-1...
Malware in kiosk-cli
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2021-26093
An access of uninitialized pointer CWE-824 vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a local and authenticated attacker to crash the access point being managed by the controller by executing a crafted CLI command...
PT-2024-10896
Name of the Vulnerable Software and Affected Versions FortiWLC versions 8.6.0, 8.5.3 and earlier Description An access of uninitialized pointer vulnerability in FortiWLC may allow a local and authenticated attacker to crash the access point being managed by the controller by executing a crafted C...
CVE-2021-26093: Access of Uninitialized Pointer
An access of uninitialized pointer CWE-824 vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a local and authenticated attacker to crash the access point being managed by the controller by executing a crafted CLI command...
AZL-54473 CVE-2024-45338 affecting package cf-cli for versions less than 8.7.3-5
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...
GHSA-32GQ-X56H-299C age vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution
A plugin name containing a path separator may allow an attacker to execute an arbitrary binary. Such a plugin name can be provided to the age CLI through an attacker-controlled recipient or identity string, or to the plugin.NewIdentity, plugin.NewIdentityWithoutData, or plugin.NewRecipient APIs. ...
age vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution
A plugin name containing a path separator may allow an attacker to execute an arbitrary binary. Such a plugin name can be provided to the age CLI through an attacker-controlled recipient or identity string, or to the plugin.NewIdentity, plugin.NewIdentityWithoutData, or plugin.NewRecipient APIs. ...
rage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution
A plugin name containing a path separator may allow an attacker to execute an arbitrary binary. Such a plugin name can be provided to the rage CLI through an attacker-controlled recipient or identity string, or to the following age APIs when the plugin feature flag is enabled: -...
GHSA-4FG7-VXC8-QX5W rage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution
A plugin name containing a path separator may allow an attacker to execute an arbitrary binary. Such a plugin name can be provided to the rage CLI through an attacker-controlled recipient or identity string, or to the following age APIs when the plugin feature flag is enabled: -...
CVE-2024-24786 affecting package moby-cli for versions less than 24.0.9-6
CVE-2024-24786 affecting package moby-cli for versions less than 24.0.9-6. A patched version of the package is available...
CVE-2024-24786 affecting package cf-cli for versions less than 8.4.0-22
CVE-2024-24786 affecting package cf-cli for versions less than 8.4.0-22. A patched version of the package is available...
PT-2024-34351
Subreption releases research exposing critical security flaws in FIPS/Common Criteria certified enterprise network switches. https://t.co/VQ6kMiK9uq FLAPPYSWITCH abuses CVE-2024-50604, CVE-2024-50605, CVE-2024-50606 and CVE-2024-50607, for breaking out of the management "cli",...
age vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution
A plugin name containing a path separator may allow an attacker to execute an arbitrary binary. Such a plugin name can be provided to the age CLI through an attacker-controlled recipient or identity string, or to the plugin.NewIdentity, plugin.NewIdentityWithoutData, or plugin.NewRecipient APIs. ...
PT-2024-34353
Subreption releases research exposing critical security flaws in FIPS/Common Criteria certified enterprise network switches. https://t.co/VQ6kMiK9uq FLAPPYSWITCH abuses CVE-2024-50604, CVE-2024-50605, CVE-2024-50606 and CVE-2024-50607, for breaking out of the management "cli",...
PT-2024-34352
Subreption releases research exposing critical security flaws in FIPS/Common Criteria certified enterprise network switches. https://t.co/VQ6kMiK9uq FLAPPYSWITCH abuses CVE-2024-50604, CVE-2024-50605, CVE-2024-50606 and CVE-2024-50607, for breaking out of the management "cli",...
PT-2024-34354
Subreption releases research exposing critical security flaws in FIPS/Common Criteria certified enterprise network switches. https://t.co/VQ6kMiK9uq FLAPPYSWITCH abuses CVE-2024-50604, CVE-2024-50605, CVE-2024-50606 and CVE-2024-50607, for breaking out of the management "cli",...