Lucene search
+L

10727 matches found

Github Security Blog
Github Security Blog
added 2024/09/23 10:05 p.m.278 views

Duplicate Advisory: Camaleon CMS vulnerable to remote code execution through code injection (GHSL-2024-185)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7x4w-cj9r-h4v9. This link is maintained to preserve external references. Original Description The actions defined inside of the MediaController class do not check whether a given path is inside a certain path e....

7.3AI score
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2024/09/23 12:00 a.m.16 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-2460)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS7.4AI score0.36081EPSS
SaveExploits2References2
Gentoo Linux
Gentoo Linux
added 2024/09/23 12:00 a.m.28 views

curl: Multiple Vulnerabilities

Background A command line tool and library for transferring data with URLs. Description Multiple vulnerabilities have been discovered in curl. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no...

8.6CVSS7.4AI score0.36081EPSS
SaveExploits6
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:00 a.m.10 views

The vulnerability of the software for interacting with servers via CURL lies in the use of memory after it is freed, allowing an attacker to cause a service failure.

The vulnerability of the software for interacting with servers via CURL is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

5.9CVSS6.7AI score0.02511EPSS
SaveExploits1References12Affected Software4
Tenable Nessus
Tenable Nessus
added 2024/09/23 12:00 a.m.29 views

GLSA-202409-20 : curl: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202409-20 curl: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in curl. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from th...

8.6CVSS6.6AI score0.36081EPSS
SaveExploits6References12
GithubExploit
GithubExploit
added 2024/09/19 9:35 a.m.797 views

Exploit for Command Injection in Jc21 Nginx_Proxy_Manager

POCCVE-2024-46256 CVE-2024-46256 and CVE-2024-46257 is the...

9.8CVSS9.9AI score0.03084EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2024/09/19 12:00 a.m.22 views

CBL Mariner 2.0 Security Update: curl (CVE-2024-6197_-_A)

The version of curl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-6197-A advisory. - NIST NVD Details CVE-2024-6197 Note that Nessus has not tested for this issue but has instead relied only on...

7.5CVSS8AI score0.04296EPSS
SaveExploits1References1
IBM Security Bulletins
IBM Security Bulletins
added 2024/09/18 10:14 a.m.53 views

Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities

Summary IBM QRadar SIEM includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. These have been addressed in the update. Vulnerability Details CVEID:CVE-2024-25629 DESCRIPTION: C-ares is vulnerable to a denial of service, caused by an...

10CVSS9.3AI score0.36081EPSS
SaveExploits3Affected Software1
F5 Networks
F5 Networks
added 2024/09/17 9:59 p.m.51 views

K000141099: Curl vulnerability CVE-2024-8096

Security Advisory Description When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine. If the returned...

6.5CVSS7.4AI score0.00729EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2024/09/17 12:00 a.m.19 views

Ubuntu: Security Advisory (USN-7012-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.5AI score0.00729EPSS
SaveExploits1References2
Packet Storm
Packet Storm
added 2024/09/17 12:00 a.m.235 views

Membership Management System 1.0 Code Injection

============================================================================================================================================= | Title : Membership Management System version 1.0 php code injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser :...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/09/17 12:00 a.m.204 views

Live Membership Management System 1.0 Code Injection

============================================================================================================================================= | Title : Live Membership Management System version 1.0 php code injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser ...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/09/17 12:00 a.m.187 views

Online Student Grading System 1.0 Code Injection

============================================================================================================================================= | Title : Online Student Grading System 1.0 php code injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla...

7.4AI score
SaveExploits0
OSV
OSV
added 2024/09/16 12:25 p.m.12 views

RHSA-2024:0428 Red Hat Security Advisory: curl security and bug fix update

Bulletin has no description...

5.9CVSS6.5AI score0.02511EPSS
SaveExploits6References32
OSV
OSV
added 2024/09/16 12:25 p.m.34 views

RHSA-2023:6679 Red Hat Security Advisory: curl security update

Bulletin has no description...

5.9CVSS7AI score0.02195EPSS
SaveExploits4References24
OSV
OSV
added 2024/09/16 12:25 p.m.35 views

RHSA-2023:4523 Red Hat Security Advisory: curl security update

Bulletin has no description...

5.9CVSS7.6AI score0.01806EPSS
SaveExploits2References13
Ubuntu
Ubuntu
added 2024/09/16 11:44 a.m.13 views

USN-7012-1: curl vulnerability

Hiroki Kurosawa discovered that curl incorrectly handled certain OCSP responses. This could result in bad certificates not being checked properly, contrary to expectations...

6.5CVSS7AI score0.00729EPSS
SaveExploits1
OSV
OSV
added 2024/09/16 11:44 a.m.6 views

USN-7012-1 curl vulnerability

Hiroki Kurosawa discovered that curl incorrectly handled certain OCSP responses. This could result in bad certificates not being checked properly, contrary to expectations...

6.5CVSS7.2AI score0.00729EPSS
SaveExploits1References2
OSV
OSV
added 2024/09/16 11:43 a.m.24 views

RHSA-2023:3106 Red Hat Security Advisory: curl security and bug fix update

Bulletin has no description...

5.9CVSS7.4AI score0.01607EPSS
SaveExploits1References9
OSV
OSV
added 2024/09/16 11:43 a.m.21 views

RHSA-2023:2650 Red Hat Security Advisory: curl security update

Bulletin has no description...

5.9CVSS7.4AI score0.01607EPSS
SaveExploits1References8
Rows per page
Query Builder