Lucene search
+L

1204 matches found

Github Security Blog
Github Security Blog
•added 2019/11/20 1:31 a.m.•48 views

Eval injection in Supybot/Limnoria

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS6.8AI score0.02327EPSS
SaveExploits0References8Affected Software1
OSV
OSV
•added 2019/11/20 1:31 a.m.•53 views

GHSA-6G88-VR3V-76MF Eval injection in Supybot/Limnoria

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS10AI score0.02327EPSS
SaveExploits0References9
Veracode
Veracode
•added 2019/11/19 2:01 a.m.•30 views

Remote Code Execution (RCE)

limnoria is vulnerable to remote code execution RCE. The vulnerability exists as eval injection is possible through the unsafe eval function used in Math/plugin.py...

9.8CVSS4.3AI score0.02327EPSS
SaveExploits0References9Affected Software2
NVD
NVD
•added 2019/11/16 1:15 a.m.•25 views

CVE-2019-19010

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS10AI score0.02327EPSS
SaveExploits0References5
OSV
OSV
•added 2019/11/16 1:15 a.m.•31 views

CVE-2019-19010

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS10AI score
SaveExploits0References5
attackerkb
attackerkb
•added 2019/11/16 1:15 a.m.•8 views

CVE-2019-19010

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS8.5AI score0.02327EPSS
SaveExploits0References9
OSV
OSV
•added 2019/11/16 1:15 a.m.•20 views

PYSEC-2019-32

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

7AI score
SaveExploits0References5
PyPA
PyPA
•added 2019/11/16 1:15 a.m.•14 views

PYSEC-2019-102

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS7.8AI score0.02327EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2019/11/16 1:15 a.m.•10 views

UBUNTU-CVE-2019-19010

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS7.3AI score0.02327EPSS
SaveExploits0References3
Prion
Prion
•added 2019/11/16 1:15 a.m.•23 views

Sql injection

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

7.5CVSS10AI score0.02327EPSS
SaveExploits0References5Affected Software2
UbuntuCve
UbuntuCve
•added 2019/11/16 1:15 a.m.•27 views

CVE-2019-19010

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS7.3AI score0.02327EPSS
SaveExploits0References2
OSV
OSV
•added 2019/11/16 1:15 a.m.•46 views

PYSEC-2019-102

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS7AI score0.02327EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2019/11/16 12:52 a.m.•39 views

CVE-2019-19010

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

10AI score0.02327EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2019/11/16 12:52 a.m.•92 views

CVE-2019-19010

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS10AI score0.02327EPSS
SaveExploits0
CVE
CVE
•added 2019/11/16 12:52 a.m.•144 views

CVE-2019-19010

CVE-2019-19010 affects Limnoria (Limnoria/Math plugin) and Supybot, where eval injection in the Math plugin allows remote unauthenticated attackers to disclose information and potentially other impact via the calc and icalc commands. Affected versions include Limnoria before 2019.11.09 and Supybo...

9.8CVSS9.9AI score0.02327EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/16 12:00 a.m.•2 views

CVE-2019-19010: Improper Control of Generation of Code

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS8.2AI score0.02327EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2019/10/04 8:57 p.m.•28 views

CVE-2008-5906

Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts...

6.8CVSS8.1AI score0.01968EPSS
SaveExploits0References3
NVD
NVD
•added 2019/08/22 7:15 p.m.•23 views

CVE-2018-20988

The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation...

7.5CVSS7.8AI score0.01377EPSS
SaveExploits0References1
Prion
Prion
•added 2019/08/22 7:15 p.m.•18 views

Code injection

The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation...

5CVSS7.8AI score0.01377EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/08/22 6:53 p.m.•30 views

CVE-2018-20988

The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation...

7.8AI score0.01377EPSS
SaveExploits0References1
Rows per page
Query Builder