Lucene search
+L

4243 matches found

PyPA
PyPA
•added 2019/11/16 1:15 a.m.•14 views

PYSEC-2019-102

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS7.8AI score0.02327EPSS
SaveExploits0References6Affected Software1
Prion
Prion
•added 2019/11/16 1:15 a.m.•23 views

Sql injection

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

7.5CVSS10AI score0.02327EPSS
SaveExploits0References5Affected Software2
OSV
OSV
•added 2019/11/16 1:15 a.m.•21 views

PYSEC-2019-32

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

7AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2019/11/16 1:15 a.m.•28 views

CVE-2019-19010

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS7.3AI score0.02327EPSS
SaveExploits0References2
OSV
OSV
•added 2019/11/16 1:15 a.m.•46 views

PYSEC-2019-102

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS7AI score0.02327EPSS
SaveExploits0References6
OSV
OSV
•added 2019/11/16 1:15 a.m.•11 views

UBUNTU-CVE-2019-19010

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS7.3AI score0.02327EPSS
SaveExploits0References3
Mend
Mend
•added 2019/11/16 12:52 a.m.•3 views

CVE-2019-19010

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS0.02327EPSS
SaveExploits0References15
Cvelist
Cvelist
•added 2019/11/16 12:52 a.m.•41 views

CVE-2019-19010

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

10AI score0.02327EPSS
SaveExploits0References5
CVE
CVE
•added 2019/11/16 12:52 a.m.•145 views

CVE-2019-19010

CVE-2019-19010 affects Limnoria (Limnoria/Math plugin) and Supybot, where eval injection in the Math plugin allows remote unauthenticated attackers to disclose information and potentially other impact via the calc and icalc commands. Affected versions include Limnoria before 2019.11.09 and Supybo...

9.8CVSS9.9AI score0.02327EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
•added 2019/11/16 12:52 a.m.•94 views

CVE-2019-19010

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS10AI score0.02327EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/16 12:00 a.m.•3 views

CVE-2019-19010: Improper Control of Generation of Code

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS8.2AI score0.02327EPSS
SaveExploits0References2
nodejs
nodejs
•added 2019/11/15 3:27 p.m.•27 views

Sandbox Breakout / Arbitrary Code Execution

Overview All versions of safe-eval are vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to restrict access to the main context through Error objects. This may allow attackers to execute arbitrary code in the system. Evaluating the payload function var ex = new Erro...

8AI score
SaveExploits0Affected Software1
CNVD
CNVD
•added 2019/11/07 12:00 a.m.•22 views

LibSass Uncontrolled Recursion Vulnerability

LibSass is a C/C++ implementation of the Sass compiler. An uncontrolled recursion vulnerability exists in Sass::Eval::operator in eval.cpp in LibSass 3.6.1. No detailed vulnerability details are provided at this time...

6.5CVSS6.9AI score0.01512EPSS
SaveExploits1References1
OSV
OSV
•added 2019/11/06 4:15 p.m.•35 views

CVE-2019-18797

LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operatorSass::BinaryExpression in eval.cpp...

6.5CVSS6.7AI score
SaveExploits0References1
Mend
Mend
•added 2019/11/06 3:07 p.m.•5 views

CVE-2019-18797

LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operatorSass::BinaryExpression in eval.cpp...

7.1CVSS0.01512EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2019/11/06 3:07 p.m.•42 views

CVE-2019-18797

LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operatorSass::BinaryExpression in eval.cpp...

7.1AI score0.01512EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/06 12:00 a.m.•4 views

CVE-2019-18797: Uncontrolled Recursion

LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operatorSass::BinaryExpression in eval.cpp...

6.5CVSS7.5AI score0.01512EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/11/06 12:00 a.m.•4 views

PT-2019-15669

Name of the Vulnerable Software and Affected Versions LibSass version 3.6.1 Description The issue is related to uncontrolled recursion in the Sass::Eval::operator function, specifically when handling Sass::Binary Expression objects in the eval.cpp file. Recommendations For LibSass version 3.6.1, ...

6.5CVSS0.01512EPSS
SaveExploits1References8
NVD
NVD
•added 2019/11/04 9:15 p.m.•25 views

CVE-2013-4409

An eval vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests...

9.8CVSS9.5AI score0.03649EPSS
SaveExploits0References10
PyPA
PyPA
•added 2019/11/04 9:15 p.m.•15 views

PYSEC-2019-175

An eval vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests...

9.8CVSS7AI score0.03649EPSS
SaveExploits0References10Affected Software1
Rows per page
Query Builder