Lucene search
+L

9463 matches found

Fedora
Fedora
•added 2022/12/26 1:06 a.m.•100 views

[SECURITY] Fedora 37 Update: curl-7.85.0-5.fc37

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

7.5CVSS7.6AI score0.16598EPSS
SaveExploits3
BDU FSTEC
BDU FSTEC
•added 2022/12/24 12:00 a.m.•23 views

Microsoft Azure CLI Code Execution

The vulnerability of the Command Line Interface CLI of the Microsoft Azure platform is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS8.2AI score0.04172EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/12/24 12:00 a.m.•19 views

Cisco SD-WAN CLI DoS

The vulnerability of the command-line interface CLI of Cisco SD-WAN microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

6.7CVSS6.6AI score0.00255EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/12/24 12:00 a.m.•36 views

Cisco SD-WAN Path Traversal

The vulnerability of the command-line interface of microprogramming software for Cisco SD-WAN vBond Orchestrator, Cisco SD-WAN vEdge Cloud Routers, Cisco SD-WAN vEdge Routers, Cisco SD-WAN vSmart Controller, and the centralized network management system Cisco SD-WAN vManage is related to an...

7.8CVSS7.2AI score0.00633EPSS
SaveExploits1References3Affected Software4
osv_ubuntu
osv_ubuntu
•added 2022/12/23 12:15 a.m.•20 views

UBUNTU-CVE-2022-40898

An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli...

7.5CVSS7AI score0.02837EPSS
SaveExploits1References9
PyPA
PyPA
•added 2022/12/23 12:15 a.m.•14 views

PYSEC-2022-43017

An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli...

7.5CVSS6.8AI score0.02837EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2022/12/23 12:00 a.m.•18 views

Python security vulnerabilities

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security vulnerability exists in Python Packaging Authority PyPA Wheel version 0.37.1 and earlier. An attacker c...

7.5CVSS7AI score0.02837EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2022/12/21 12:00 a.m.•19 views

npm abacus-ext-cmdline: Operating system command injection vulnerability

npm abacus-ext-cmdline is a command line execution utility from npm USA. An operating system command injection vulnerability exists in abacus-ext-cmdline, which stems from incorrect user input cleanup and is prone to command injection via the execute function...

9.8CVSS8.6AI score0.01334EPSS
SaveExploits1References2
osv_debian
osv_debian
•added 2022/12/20 7:15 p.m.•18 views

DEBIAN-CVE-2022-4515

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...

7.8CVSS7.6AI score0.00608EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/20 12:00 a.m.•6 views

CVE-2022-4515: Improper Neutralization of Special Elements used in an OS Command

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...

7.8CVSS5.9AI score0.00608EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2022/12/19 6:14 p.m.•38 views

CVE-2022-4515

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...

7.8CVSS1.8AI score0.00608EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/12/19 12:00 a.m.•21 views

PT-2022-7169 · Ericsson · Ericsson Evolved Packet Gateway

Name of the Vulnerable Software and Affected Versions: Ericsson Evolved Packet Gateway EPG versions 2.x before 2.16 Ericsson Evolved Packet Gateway EPG versions 3.x before 3.25 Description: The issue is related to the command-line interface CLI of the Ericsson Evolved Packet Gateway EPG and is...

8.8CVSS8.9AI score0.00969EPSS
SaveExploits0References8
osv_ghsa
osv_ghsa
•added 2022/12/13 6:30 p.m.•61 views

GHSA-VR8J-HGMM-JH9R Denial of service by double-checked locking in openssl-src

If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some operating systems most widely: Windows this results in a denial of service when the affected process hangs. Policy processing being enabled o...

8.7CVSS6.2AI score0.01312EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2022/12/13 6:30 p.m.•45 views

Denial of service by double-checked locking in openssl-src

If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some operating systems most widely: Windows this results in a denial of service when the affected process hangs. Policy processing being enabled o...

7.5CVSS7.4AI score0.01312EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2022/12/13 4:15 p.m.•43 views

CVE-2022-3996

If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some operating systems most widely: Windows this results in a denial of service when the affected process hangs. Policy processing being enabled o...

7.5CVSS0.01312EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2022/12/13 3:43 p.m.•52 views

CVE-2022-3996 X.509 Policy Constraints Double Locking

If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some operating systems most widely: Windows this results in a denial of service when the affected process hangs. Policy processing being enabled o...

7.5CVSS7AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2022/12/13 12:00 a.m.•102 views

CVE-2022-3996

If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some operating systems most widely: Windows this results in a denial of service when the affected process hangs. Policy processing being enabled o...

7.5CVSS7AI score0.01312EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2022/12/12 1:15 p.m.•21 views

CVE-2022-37910

A buffer overflow vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in a denial of service on the affected system...

6.5CVSS6.1AI score0.00619EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/12/12 1:15 p.m.•16 views

CVE-2022-37923

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

7.2CVSS6.1AI score0.01455EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/12/12 1:15 p.m.•16 views

CVE-2022-37920

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

7.2CVSS6.1AI score0.01455EPSS
SaveExploits0References1
Rows per page
Query Builder