Lucene search
+L

2011 matches found

Cvelist
Cvelist
•added 2022/06/30 6:40 p.m.•41 views

CVE-2013-4561

In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity...

9.2AI score0.01432EPSS
SaveExploits1References2
CVE
CVE
•added 2022/06/30 6:40 p.m.•83 views

CVE-2013-4561

CVE-2013-4561 concerns OpenShift runtime: a cron job on an OpenShift node updates mcollective facts and mishandles a temporary file. The root cause is improper handling of a temporary file during that cron operation, which can lead to confidentiality and integrity losses. The NVD metrics indicate...

9.1CVSS9AI score0.01432EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/30 12:00 a.m.•8 views

CVE-2013-4561: Insecure Temporary File

In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity...

9.1CVSS8.1AI score0.01432EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/06/30 12:00 a.m.•2 views

PT-2022-7748

Name of the Vulnerable Software and Affected Versions openshift affected versions not specified Description The issue is related to a cron job in an openshift node that updates mcollective facts but mishandles a temporary file. This mishandling may lead to loss of confidentiality and integrity...

9.1CVSS0.01432EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/06/30 12:00 a.m.•18 views

Red Hat OpenShift 安全漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying and running applications. A security vulnerability exists in Red Hat OpenShift that stems from a cron job to update mcollective with error handling temporary...

9.1CVSS8.2AI score0.01432EPSS
SaveExploits1References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:11 p.m.•6 views

Malicious code in cron-guru (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59fc7f83ba3d39b56b332fb2105a5ffd56d875a6c3b9333e4210c56234c4825c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:11 p.m.•10 views

Malicious code in node-cron-master (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae251f427512a885e950ac70e8039b90f8ef6d22e8393886461f599805dc0688 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:11 p.m.•6 views

Malicious code in node-cron-master1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1116bb33470ca9581591802dcf0769f1108fc3116f737866e526ea461a13b237 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:11 p.m.•11 views

MAL-2022-4883 Malicious code in node-cron-master1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1116bb33470ca9581591802dcf0769f1108fc3116f737866e526ea461a13b237 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:11 p.m.•17 views

MAL-2022-2242 Malicious code in cron-guru (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59fc7f83ba3d39b56b332fb2105a5ffd56d875a6c3b9333e4210c56234c4825c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:11 p.m.•16 views

MAL-2022-4882 Malicious code in node-cron-master (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae251f427512a885e950ac70e8039b90f8ef6d22e8393886461f599805dc0688 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2022/06/16 12:00 a.m.•89 views

Webmin <= 1.994 Multiple Vulnerabilities

Webmin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:webmin:webmin"; ifdescription...

9.6CVSS7.5AI score0.04036EPSS
SaveExploits10References6
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/08 8:53 a.m.•8 views

Malicious code in cron-mail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 767cf74abe659abd511efa142db25a3161d82c6bccedc8c596e0591ba5b4308a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/08 8:53 a.m.•13 views

MAL-2022-2243 Malicious code in cron-mail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 767cf74abe659abd511efa142db25a3161d82c6bccedc8c596e0591ba5b4308a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
GithubExploit
GithubExploit
•added 2022/05/25 10:47 a.m.•71 views

Exploit for Improper Authentication in Atlassian Jira_Data_Center

Atlassian Jira Seraph Authentication Bypass RCE(CVE-2022-0540)...

9.8CVSS7.6AI score0.88057EPSS
SaveExploits2
OSV
OSV
•added 2022/05/17 4:45 a.m.•78 views

GHSA-9CRX-P357-5VW8 Ajenti Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in plugins/main/content/js/ajenti.coffee in Ajenti before 1.2.15 allows remote authenticated users to inject arbitrary web script or HTML via the command field in the Cron functionality...

5.4CVSS5.3AI score0.01499EPSS
SaveExploits1References9
Github Security Blog
Github Security Blog
•added 2022/05/17 4:45 a.m.•31 views

Ajenti Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in plugins/main/content/js/ajenti.coffee in Ajenti before 1.2.15 allows remote authenticated users to inject arbitrary web script or HTML via the command field in the Cron functionality...

3.5CVSS5.6AI score0.01499EPSS
SaveExploits1References9Affected Software1
Github Security Blog
Github Security Blog
•added 2022/05/17 1:36 a.m.•33 views

Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

Cross-site scripting XSS vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving the "cron of a message."...

4.3CVSS4.9AI score0.06593EPSS
SaveExploits1References8Affected Software1
Github Security Blog
Github Security Blog
•added 2022/05/13 1:50 a.m.•50 views

Infinite Loop in Jenkins Core

A Cron expression form validation could enter infinite loop, potentially resulting in denial of service. The form validation for cron expressions e.g. "Poll SCM", "Build periodically" could enter infinite loops when cron expressions only matching certain rare dates were entered, blocking request...

6.5CVSS0.9AI score0.0117EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2022/05/13 1:50 a.m.•42 views

GHSA-8QPF-FV36-H4R8 Infinite Loop in Jenkins Core

A Cron expression form validation could enter infinite loop, potentially resulting in denial of service. The form validation for cron expressions e.g. "Poll SCM", "Build periodically" could enter infinite loops when cron expressions only matching certain rare dates were entered, blocking request...

6.5CVSS6.8AI score0.0117EPSS
SaveExploits0References3
Rows per page
Query Builder