Lucene search
+L

409 matches found

Positive Technologies
Positive Technologies
•added 2022/07/25 12:00 a.m.•12 views

PT-2022-17036 · Unknown · Qr Code Generator

Name of the Vulnerable Software and Affected Versions: QR Code Generator version 5.2.7 Description: A vulnerability in the component process.php of QR Code Generator allows attackers to perform directory traversal. Recommendations: For QR Code Generator version 5.2.7, consider restricting access ...

7.5CVSS7.5AI score0.01499EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/25 12:00 a.m.•3 views

CVE-2022-24992: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the component process.php of QR Code Generator v5.2.7 allows attackers to perform directory traversal...

7.5CVSS7.1AI score0.01499EPSS
SaveExploits1References4
NVD
NVD
•added 2022/07/23 12:15 a.m.•17 views

CVE-2022-1127

Use after free in QR Code Generator in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction...

8.8CVSS0.00892EPSS
SaveExploits1References3
OSV
OSV
•added 2022/07/23 12:15 a.m.•5 views

DEBIAN-CVE-2022-1127

Use after free in QR Code Generator in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction...

8.8CVSS7.5AI score0.00892EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2022/07/23 12:15 a.m.•31 views

CVE-2022-1127

Use after free in QR Code Generator in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction...

8.8CVSS7AI score0.00892EPSS
SaveExploits1References1
CVE
CVE
•added 2022/07/22 11:36 p.m.•203 views

CVE-2022-1127

CVE-2022-1127 concerns Google Chrome prior to version 100.0.4896.60, with a use-after-free in the QR Code Generator that could allow a remote attacker, after convincing a user to perform specific interactions, to potentially exploit heap corruption. The issue is tied to Chrome’s QR Code Generator...

8.8CVSS8.9AI score0.00892EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/22 12:00 a.m.•2 views

CVE-2022-1127: Use After Free

Use after free in QR Code Generator in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction...

8.8CVSS8.7AI score0.00892EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2022/07/21 10:34 p.m.•58 views

Cranelift vulnerable to miscompilation of constant values in division on AArch64

Impact There was a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors could result in incorrect division results at runtime. The translation rules for constants did not take into account whether sign- or zero-extension should happen, which resulted in an...

7.5CVSS7.4AI score0.00897EPSS
SaveExploits0References5Affected Software2
OSV
OSV
•added 2022/07/21 10:34 p.m.•78 views

GHSA-7F6X-JWH5-M9R4 Cranelift vulnerable to miscompilation of constant values in division on AArch64

Impact There was a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors could result in incorrect division results at runtime. The translation rules for constants did not take into account whether sign- or zero-extension should happen, which resulted in an...

5.9CVSS6.7AI score0.00897EPSS
SaveExploits1References5
OSV
OSV
•added 2022/07/20 10:30 p.m.•32 views

CVE-2022-31146 Use After Free in Wasmtime

Wasmtime is a standalone runtime for WebAssembly. There is a bug in the Wasmtime's code generator, Cranelift, where functions using reference types may be incorrectly missing metadata required for runtime garbage collection. This means that if a GC happens at runtime then the GC pass will...

6.4CVSS8.6AI score
SaveExploits0References5
OpenVAS
OpenVAS
•added 2022/07/18 12:00 a.m.•27 views

Fedora: Security Advisory for golang-github-dave-jennifer (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2022/07/18 12:00 a.m.•19 views

Fedora: Security Advisory for golang-k8s-code-generator (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
Fedora
Fedora
•added 2022/07/17 1:15 a.m.•22 views

[SECURITY] Fedora 35 Update: golang-github-dave-jennifer-1.4.1-5.fc35

Jennifer is a code generator for Go...

9.3CVSS1.5AI score0.0995EPSS
SaveExploits4
Fedora
Fedora
•added 2022/07/17 1:15 a.m.•48 views

[SECURITY] Fedora 35 Update: act-1.6.0-6.fc35

The Automatic Component Toolkit ACT is a code generator that takes an instance of an Interface Description Language file and generates a thin C89-API, implementation stubs and language bindings of your desired software component...

9.3CVSS2.2AI score0.0995EPSS
SaveExploits4
OpenVAS
OpenVAS
•added 2022/07/06 12:00 a.m.•16 views

Fedora: Security Advisory for act (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2022/07/06 12:00 a.m.•38 views

Fedora: Security Advisory for golang-k8s-code-generator (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS8.9AI score0.0995EPSS
SaveExploits3References2
OpenVAS
OpenVAS
•added 2022/07/06 12:00 a.m.•32 views

Fedora: Security Advisory for golang-github-dave-jennifer (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
Fedora
Fedora
•added 2022/07/04 1:35 a.m.•22 views

[SECURITY] Fedora 36 Update: golang-github-dave-jennifer-1.4.1-5.fc36

Jennifer is a code generator for Go...

9.3CVSS8.3AI score0.0995EPSS
SaveExploits4
Fedora
Fedora
•added 2022/07/04 1:35 a.m.•48 views

[SECURITY] Fedora 36 Update: act-1.6.0-6.fc36

The Automatic Component Toolkit ACT is a code generator that takes an instance of an Interface Description Language file and generates a thin C89-API, implementation stubs and language bindings of your desired software component...

9.3CVSS8.3AI score0.0995EPSS
SaveExploits4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:17 p.m.•6 views

Malicious code in util-raml-code-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 799fc21544f2a219ef768485dd268c4ff8ce0c60253b674a5941ef22ad018be5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Rows per page
Query Builder