Lucene search
+L

8348 matches found

OSV
OSV
added 2019/05/20 7:56 a.m.5 views

SUSE-SU-2019:1290-1 Security update for nmap

This update for nmap fixes the following issues: Security issue fixed: - CVE-2018-15173: Fixed a remote denial of service attack via a crafted TCP-based service bsc1104139. Non-security issue fixed: - Add missing runtime dependency python-xml which prevented zenmap from starting bsc1133512...

7.5CVSS7.3AI score0.06081EPSS
SaveExploits1References4
Prion
Prion
added 2019/05/16 10:29 p.m.20 views

Sql injection

In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when service ids allow user input, this could allow for SQL Injection and remote code execution. This is related to symfony/dependency-injection...

7.5CVSS9.9AI score0.0595EPSS
SaveExploits1References3Affected Software2
NVD
NVD
added 2019/05/16 10:29 p.m.17 views

CVE-2019-10910

In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when service ids allow user input, this could allow for SQL Injection and remote code execution. This is related to symfony/dependency-injection...

9.8CVSS10AI score0.0595EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2019/05/16 10:29 p.m.35 views

CVE-2019-10910

In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when service ids allow user input, this could allow for SQL Injection and remote code execution. This is related to symfony/dependency-injection...

9.8CVSS7.3AI score0.0595EPSS
SaveExploits1References3
OSV
OSV
added 2019/05/16 10:29 p.m.9 views

UBUNTU-CVE-2019-10910

In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when service ids allow user input, this could allow for SQL Injection and remote code execution. This is related to symfony/dependency-injection...

9.8CVSS7.4AI score0.0595EPSS
SaveExploits1References4
OSV
OSV
added 2019/05/16 10:29 p.m.1 views

DEBIAN-CVE-2019-10910

In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when service ids allow user input, this could allow for SQL Injection and remote code execution. This is related to symfony/dependency-injection...

9.8CVSS8.5AI score0.0595EPSS
SaveExploits1References1
OSV
OSV
added 2019/05/16 10:29 p.m.22 views

CVE-2019-10910

In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when service ids allow user input, this could allow for SQL Injection and remote code execution. This is related to symfony/dependency-injection...

9.8CVSS9.9AI score
SaveExploits0References3
Cvelist
Cvelist
added 2019/05/16 9:31 p.m.42 views

CVE-2019-10910

In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when service ids allow user input, this could allow for SQL Injection and remote code execution. This is related to symfony/dependency-injection...

9.9AI score0.0595EPSS
SaveExploits1References3
CVE
CVE
added 2019/05/16 9:31 p.m.1322 views

CVE-2019-10910

CVE-2019-10910 affects Symfony versions prior to fixed releases: Symfony 2.7.51+, 2.8.50+, 3.x 3.4.26+, 4.x 4.1.12+, and 4.2.x 4.2.7+. The issue arises when service IDs can be influenced by user input, allowing SQL injection and remote code execution via the dependency-injection component. Mitiga...

9.8CVSS9.8AI score0.0595EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
added 2019/05/16 9:31 p.m.65 views

CVE-2019-10910

In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when service ids allow user input, this could allow for SQL Injection and remote code execution. This is related to symfony/dependency-injection...

9.8CVSS8.3AI score0.0595EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:00 a.m.18 views

SUSE SLED12 / SLES12 Security Update : audit (SUSE-SU-2019:1166-1)

This update for audit fixes the following issues : Audit on SUSE Linux Enterprise 12 SP3 was updated to 2.8.1 to bring new features and bugfixes. bsc1125535 FATE326346 Many features were added to auparsenormalize cli option added to auditd and audispd for setting config dir In auditd, restore the...

5.3CVSS6.2AI score0.02755EPSS
SaveExploits0References8
OSV
OSV
added 2019/05/07 9:01 a.m.8 views

SUSE-SU-2019:1166-1 Security update for audit

This update for audit fixes the following issues: Audit on SUSE Linux Enterprise 12 SP3 was updated to 2.8.1 to bring new features and bugfixes. bsc1125535 FATE326346 Many features were added to auparsenormalize cli option added to auditd and audispd for setting config dir In auditd, restore the...

5.3CVSS5.6AI score0.02755EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2019/05/07 12:00 a.m.83 views

Fedora Update for systemd FEDORA-2019-18b3a10c7f

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS7.1AI score0.03016EPSS
SaveExploits14References2
nodejs
nodejs
added 2019/05/06 2:17 p.m.20 views

Malicious Package

Overview All versions of reques typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
nodejs
nodejs
added 2019/05/06 2:16 p.m.19 views

Malicious Package

Overview All versions of reequest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
nodejs
nodejs
added 2019/05/06 2:11 p.m.19 views

Malicious Package

Overview All versions of calk typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
nodejs
nodejs
added 2019/05/06 2:10 p.m.19 views

Malicious Package

Overview All versions of eact typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
nodejs
nodejs
added 2019/05/06 2:09 p.m.17 views

Malicious Package

Overview All versions of experss typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
nodejs
nodejs
added 2019/05/06 2:07 p.m.18 views

Malicious Package

Overview All versions of momen typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
nodejs
nodejs
added 2019/05/06 2:07 p.m.15 views

Malicious Package

Overview All versions of aysnc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
Rows per page
Query Builder