Lucene search
+L

6859 matches found

Fedora
Fedora
•added 2024/07/02 8:16 p.m.•33 views

[SECURITY] Fedora 40 Update: ghostscript-10.02.1-10.fc40

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

6.3CVSS7AI score0.27992EPSS
SaveExploits6
CNNVD
CNNVD
•added 2024/07/01 12:00 a.m.•10 views

schema security vulnerability

schema is a library from gorilla open source. Converts structures to and from form values. A security vulnerability exists in schema versions prior to 1.4.1, which stems from vulnerability to a memory exhaustion vulnerability...

7.5CVSS6.8AI score0.01096EPSS
SaveExploits0References6
Microsoft CVE
Microsoft CVE
•added 2024/06/30 2:00 p.m.•10 views

Unixodbc: out of bounds stack write due to pointer-to-integer types conversion

...

7.8CVSS7AI score0.00284EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/06/28 9:18 p.m.•23 views

CVE-2024-38533 ZKsync Era invalid stack addressing conversion

ZKsync Era is a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. There is possible invalid stack access due to the addresses used to access the stack not properly being converted to cells. This issue has been patched in version 1.5.0...

6.5CVSS7AI score0.00263EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/28 9:18 p.m.•47 views

CVE-2024-38533 ZKsync Era invalid stack addressing conversion

ZKsync Era is a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. There is possible invalid stack access due to the addresses used to access the stack not properly being converted to cells. This issue has been patched in version 1.5.0...

6.5CVSS0.00263EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/06/28 9:18 p.m.•19 views

CVE-2024-38533 ZKsync Era invalid stack addressing conversion

ZKsync Era is a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. There is possible invalid stack access due to the addresses used to access the stack not properly being converted to cells. This issue has been patched in version 1.5.0...

6.5CVSS6.8AI score
SaveExploits0References3
Mend
Mend
•added 2024/06/28 9:18 p.m.•9 views

CVE-2024-38533

ZKsync Era is a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. There is possible invalid stack access due to the addresses used to access the stack not properly being converted to cells. This issue has been patched in version 1.5.0...

6.9CVSS0.00263EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/06/28 12:00 a.m.•19 views

ZKsync Era Security Vulnerability

ZKsync Era is an open source compiler from Matter Labs. A security vulnerability exists in ZKsync Era versions prior to 1.5.0, which stems from the address used to access the stack not being properly converted to a unit, and therefore invalid stack access may exist...

6.5CVSS6.7AI score0.00263EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 12:25 p.m.•6 views

Malicious code in agora-daily-conversion (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2024/06/25 12:25 p.m.•9 views

MAL-2024-1735 Malicious code in agora-daily-conversion (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Fedora
Fedora
•added 2024/06/18 10:07 a.m.•64 views

[SECURITY] Fedora 40 Update: ghostscript-10.02.1-9.fc40

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

8.8CVSS6.4AI score0.01425EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2024/06/18 12:00 a.m.•35 views

Oracle Linux 8 : glibc (ELSA-2024-12440)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12440 advisory. - CVE-2024-33599: nscd: buffer overflow in netgroup cache RHEL-34264 - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache RHEL-34267 -...

8.1CVSS7.1AI score0.8833EPSS
SaveExploits19References5
Oracle linux
Oracle linux
•added 2024/06/17 12:00 a.m.•73 views

glibc security update

2.28-251.0.2.2 - Forward port of Oracle patches over 2.28-251.2 Reviewed-by: Jose E. Marchesi Oracle history: May-23-2024 Cupertino Miranda - 2.28-251.0.2.1 - Forward port of Oracle patches over 2.28-251.1 Reviewed-by: Jose E. Marchesi May-22-2024 Cupertino Miranda - 2.28-251.0.2 - Forward port o...

8.1CVSS7.1AI score0.0131EPSS
SaveExploits0
Hacker One
Hacker One
•added 2024/06/14 8:39 a.m.•76 views

curl: Incorrect Encoding Conversion in hostname results in indeterminate SSRF vulnerabilities

Vulnerability description not provided...

9.8CVSS9.4AI score0.99998EPSS
SaveExploits116
SUSE CVE
SUSE CVE
•added 2024/06/14 3:52 a.m.•9 views

SUSE CVE-2023-52890

NTFS-3G before 75dcdc2 has a use-after-free in ntfsuppercasembs in libntfs-3g/unistr.c. NOTE: discussion suggests that exploitation would be challenging...

4.5CVSS7AI score0.00158EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/06/13 12:00 a.m.•18 views

Google pixel security vulnerability

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google pixel, which stems from an improper conversion in the s5e9865mifsetrate module of exynosdvfs.c, where out-of-bounds reads may occur...

8.1CVSS6.7AI score0.00178EPSS
SaveExploits0References3
CNVD
CNVD
•added 2024/06/12 12:00 a.m.•33 views

Siemens Tecnomatix Plant Simulation Type Conversion Error Vulnerability

Tecnomatix Plant Simulation models, simulates, explores and optimizes logistics systems and their processes. These models allow material flow, resource utilization and logistics analysis of all manufacturing plans from global production facilities to local plants and specific production lines pri...

7.8CVSS7AI score0.00251EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2024/06/11 3:11 p.m.•598 views

Exploit for OS Command Injection in Php

CVE-2024-4577 This is a PoC for PHP CVE-2024-4577. Introdu...

9.8CVSS10AI score0.99998EPSS
SaveExploits116
NVD
NVD
•added 2024/06/11 10:15 a.m.•50 views

CVE-2023-52217

Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking.This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.11...

6.3CVSS0.00232EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/06/11 10:15 a.m.•17 views

CVE-2023-52217

Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking.This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.11...

6.3CVSS5.8AI score0.00232EPSS
SaveExploits0References1
Rows per page
Query Builder