Lucene search
+L

1236 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:11 p.m.5 views

Malicious code in ps-crypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3344ece704cd154a5d31406e030fcde233dcb88e1b8c72f5790bb4e9d1aa65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:11 p.m.12 views

MAL-2022-5501 Malicious code in ps-crypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3344ece704cd154a5d31406e030fcde233dcb88e1b8c72f5790bb4e9d1aa65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2022/05/20 11:44 p.m.37 views

CVE-2020-28924

An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with much less entropy than advertised. The suggested passwords depend deterministically on the time the second rclone was started. This limi...

7.5CVSS1.2AI score0.01353EPSS
SaveExploits1References1
Rockylinux
Rockylinux
added 2022/05/17 7:12 a.m.20 views

new packages: perl-Crypt-OpenSSL-RSA

An update is available for perl-Crypt-OpenSSL-RSA. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

2.2AI score
SaveExploits0
Rockylinux
Rockylinux
added 2022/05/17 7:12 a.m.15 views

new packages: perl-Crypt-OpenSSL-Bignum

An update is available for perl-Crypt-OpenSSL-Bignum. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see th...

2.2AI score
SaveExploits0
Fedora
Fedora
added 2022/05/07 5:06 a.m.24 views

[SECURITY] Fedora 36 Update: golang-github-xordataexchange-crypt-0.0.2-11.20190412gitb2862e3.fc36

Store and retrieve encrypted configs from etcd or consul...

7.5CVSS2.1AI score0.03931EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2022/04/29 12:00 a.m.9 views

Fedora: Security Advisory for golang-github-xordataexchange-crypt (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/29 12:00 a.m.13 views

Fedora: Security Advisory for golang-github-xordataexchange-crypt (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
Fedora
Fedora
added 2022/04/28 5:55 a.m.39 views

[SECURITY] Fedora 34 Update: golang-github-xordataexchange-crypt-0.0.2-11.20190412gitb2862e3.fc34

Store and retrieve encrypted configs from etcd or consul...

7.5CVSS2.1AI score0.03931EPSS
SaveExploits0
Fedora
Fedora
added 2022/04/28 5:53 a.m.28 views

[SECURITY] Fedora 35 Update: golang-github-xordataexchange-crypt-0.0.2-11.20190412gitb2862e3.fc35

Store and retrieve encrypted configs from etcd or consul...

7.5CVSS2.1AI score0.03931EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2022/04/22 9:03 p.m.77 views

CVE-2022-29589

Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...

6.1CVSS3.8AI score0.00666EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/04/22 5:15 p.m.5 views

CVE-2022-29589

Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...

6.1CVSS5.9AI score0.00666EPSS
SaveExploits0References3
NVD
NVD
added 2022/04/22 5:15 p.m.39 views

CVE-2022-29589

Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...

6.1CVSS0.00666EPSS
SaveExploits0References2
Prion
Prion
added 2022/04/22 5:15 p.m.21 views

Design/Logic Flaw

Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...

4.3CVSS5.9AI score0.00666EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/04/22 4:17 p.m.19 views

CVE-2022-29589

Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...

6AI score
SaveExploits0References4
Cvelist
Cvelist
added 2022/04/22 4:17 p.m.36 views

CVE-2022-29589

Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username...

6.1AI score0.00666EPSS
SaveExploits0References2
CVE
CVE
added 2022/04/22 4:17 p.m.84 views

CVE-2022-29589

CVE-2022-29589 affects Crypt Server prior to version 3.3.0. The issue is an XSS in the index view related to serial, computername, and username fields. The underlying cause is not detailed in the provided documents beyond this linkage. Public references indicate the fix was released in version 3....

6.1CVSS5.9AI score0.00666EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/04/22 12:00 a.m.10 views

Crypt-Server 跨站脚本漏洞

Crypt-Server is a Django web application by Graham Gilbert, an individual developer in the United States. It is used to host file library keys sent by the Crypt client application. A security vulnerability exists in Crypt-Server versions prior to 3.3.0, which stems from allowing the use of XSS in...

6.1CVSS6.2AI score0.00666EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/02/19 12:00 a.m.7 views

Sha256 Crypt和Sha512 Crypt 安全漏洞

Both Sha256 Crypt and Sha512 Crypt are a cryptographic hash function by the individual developer Ulrich Drepper. A security vulnerability exists in Sha256 Crypt and Sha512 Crypt that allows an attacker to cause a denial of service CPU consumption by exploiting the vulnerability because the...

7.5CVSS8AI score0.02234EPSS
SaveExploits1References4
OSV
OSV
added 2022/02/17 5:15 a.m.6 views

DEBIAN-CVE-2022-24953

The CryptGPG extension before 1.6.7 for PHP does not prevent additional options in GPG calls, which presents a risk for certain environments and GPG versions...

5.3CVSS5.6AI score0.0085EPSS
SaveExploits0References1
Rows per page
Query Builder