Lucene search
+L

9259 matches found

Vulnrichment
Vulnrichment
added 2022/12/25 10:20 a.m.19 views

CVE-2021-4277 fredsmith utils Filename screenshot_sync predictable state

A vulnerability, which was classified as problematic, has been found in fredsmith utils. This issue affects some unknown processing of the file screenshotsync of the component Filename Handler. The manipulation leads to predictable from observable state. The name of the patch is...

2.6CVSS7AI score0.00452EPSS
SaveExploits0References2
CVE
CVE
added 2022/12/25 10:20 a.m.94 views

CVE-2021-4277

CVE-2021-4277 affects fredsmith utils, specifically the Filename Handler component’s handling of the file screenshot_sync. The vulnerability arises from how unknown processing leads to predictable data from observable state. A patch named dbab1b66955eeb3d76b34612b358307f5c4e3944 exists and is rec...

5.3CVSS4.3AI score0.00452EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/12/25 10:20 a.m.34 views

CVE-2021-4277 fredsmith utils Filename screenshot_sync predictable state

A vulnerability, which was classified as problematic, has been found in fredsmith utils. This issue affects some unknown processing of the file screenshotsync of the component Filename Handler. The manipulation leads to predictable from observable state. The name of the patch is...

2.6CVSS5.7AI score0.00452EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/12/25 12:00 a.m.9 views

utils 安全特征问题漏洞

utils is a utility program by Fred Smith Personal Developer. A security vulnerability exists in utils that stems from a problem with the unknown handling of the screenshotsync file of the Filename Handler component, which can lead to predictions from observable state...

5.3CVSS5AI score0.00452EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/12/25 12:00 a.m.14 views

PT-2022-11682 · Unknown · Fredsmith Utils

Name of the Vulnerable Software and Affected Versions: fredsmith utils affected versions not specified Description: A problematic issue has been found in the processing of the file screenshot sync of the component Filename Handler. The manipulation leads to predictable data from observable state...

5.3CVSS7.2AI score0.00452EPSS
SaveExploits0References4
OSV
OSV
added 2022/12/23 12:30 a.m.12 views

GHSA-QWMP-2CF2-G9G6 pypa/wheel vulnerable to Regular Expression denial of service (ReDoS)

Python Packaging Authority PyPA Wheel is a reference implementation of the Python wheel packaging standard. Wheel 0.37.1 and earlier are vulnerable to a Regular Expression denial of service via attacker controlled input to the wheel cli. The vulnerable regex is used to verify the validity of Whee...

7.5CVSS6.7AI score0.02659EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
added 2022/12/23 12:00 a.m.24 views

Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2022-355-01)

The version of mozilla-thunderbird installed on the remote host is prior to 102.6.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-355-01 advisory. - A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious...

8.8CVSS8.4AI score0.00884EPSS
SaveExploits0References1
NVD
NVD
added 2022/12/22 8:15 p.m.18 views

CVE-2022-46874

A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious extension in its place. This could potentially led to user confusion and the execution of malicious code.Note: This issue was originally included in the advisories for Thunderbird...

8.8CVSS0.00884EPSS
SaveExploits0References7
OSV
OSV
added 2022/12/22 8:15 p.m.9 views

CVE-2022-46874

A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious extension in its place. This could potentially led to user confusion and the execution of malicious code.Note: This issue was originally included in the advisories for Thunderbird...

8.8CVSS8.6AI score
SaveExploits0References7
OSV
OSV
added 2022/12/22 8:15 p.m.3 views

DEBIAN-CVE-2022-46874

A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious extension in its place. This could potentially led to user confusion and the execution of malicious code.Note: This issue was originally included in the advisories for Thunderbird...

8.8CVSS8.2AI score0.00884EPSS
SaveExploits0References1
NVD
NVD
added 2022/12/22 8:15 p.m.17 views

CVE-2022-45415

When downloading an HTML file, if the title of the page was formatted as a filename with a malicious extension, Firefox may have saved the file with that extension, leading to possible system compromise if the downloaded file was later ran. This vulnerability affects Firefox 107...

7.8CVSS0.00232EPSS
SaveExploits0References2
Prion
Prion
added 2022/12/22 8:15 p.m.20 views

Design/Logic Flaw

A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious extension in its place. This could potentially led to user confusion and the execution of malicious code.Note: This issue was originally included in the advisories for Thunderbird...

6.8CVSS8.6AI score0.00884EPSS
SaveExploits0References7Affected Software3
Vulnrichment
Vulnrichment
added 2022/12/22 12:00 a.m.7 views

CVE-2022-34482

An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an executable extension, and by extension potentially tricked the user into executing malicious code. While very similar, this is a separate issue from...

5.8AI score0.00721EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2022/12/22 12:00 a.m.27 views

CVE-2022-46874

A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious extension in its place. This could potentially led to user confusion and the execution of malicious code.Note: This issue was originally included in the advisories for Thunderbird...

8.8CVSS8.9AI score0.00884EPSS
SaveExploits0
CVE
CVE
added 2022/12/22 12:00 a.m.506 views

CVE-2022-45415

This CVE affects Mozilla Firefox. When downloading an HTML file, if the page title is formatted as a filename with a malicious extension, Firefox may save the file with that extension, potentially allowing system compromise if the file is executed. Affected versions are Firefox

7.8CVSS7.7AI score0.00232EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2022/12/22 12:00 a.m.37 views

CVE-2022-46874

A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious extension in its place. This could potentially led to user confusion and the execution of malicious code.Note: This issue was originally included in the advisories for Thunderbird...

8.8CVSS8.8AI score0.00884EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2022/12/22 12:00 a.m.6 views

CVE-2022-34483

An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an executable extension, and by extension potentially tricked the user into executing malicious code. While very similar, this is a separate issue from...

5.8AI score0.00721EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/12/22 12:00 a.m.30 views

CVE-2022-34483

An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an executable extension, and by extension potentially tricked the user into executing malicious code. While very similar, this is a separate issue from...

8.8AI score0.00721EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/12/22 12:00 a.m.36 views

Mozilla Thunderbird < 102.6.1

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 102.6.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2022-54 advisory. - A file with a long filename could have had its filename truncated to remove the valid extension, leaving a...

8.8CVSS8.4AI score0.00884EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/12/22 12:00 a.m.30 views

Mozilla Thunderbird < 102.6.1

The version of Thunderbird installed on the remote Windows host is prior to 102.6.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2022-54 advisory. - A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious...

8.8CVSS8.4AI score0.00884EPSS
SaveExploits0References2
Rows per page
Query Builder