Lucene search
+L

237 matches found

OSV
OSV
added 2024/09/18 2:15 p.m.12 views

CVE-2024-31172

Out-of-bounds Read vulnerability in Open Networking Foundation ONF libfluid libfluidmsg module. This vulnerability is associated with program routine fluidmsg::of10::StatsReplyTable::unpack. This issue affects libfluid: 0.1.0...

7.5CVSS5.8AI score0.00486EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/18 2:15 p.m.10 views

CVE-2024-31165

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation ONF libfluid libfluidmsg module. This vulnerability is associated with program routine fluidmsg::of13::SetFieldAction::unpack. This issue affects libfluid: 0.1.0...

7.5CVSS5.8AI score0.00546EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/09/18 12:00 a.m.11 views

libfluid 安全漏洞

libfluid is an Open Networking open source application. A security vulnerability exists in libfluid that stems from the fact that the fluidmsg::of10::Port: unpack routine contains an exception abort...

7.5CVSS6.8AI score0.00328EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/09/18 12:00 a.m.9 views

PT-2024-20173 · Open Networking Foundation · Libfluid

Name of the Vulnerable Software and Affected Versions: libfluid version 0.1.0 Description: The issue is related to an Unchecked Return Value to NULL Pointer Dereference vulnerability in the libfluid msg module of the Open Networking Foundation ONF libfluid. This vulnerability is associated with t...

7.5CVSS7.2AI score0.00546EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/09/18 12:00 a.m.14 views

libfluid 安全漏洞

libfluid is an Open Networking open source application. A security vulnerability exists in libfluid that stems from the fact that the fluidmsg::of13::InstructionSet::unpack routine contains a null pointer dereference vulnerability caused by an unchecked return value...

7.5CVSS6.7AI score0.00546EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/09/18 12:00 a.m.17 views

PT-2024-23836 · Open Networking Foundation · Libfluid

Name of the Vulnerable Software and Affected Versions: libfluid version 0.1.0 Description: The issue is an Out-of-bounds Read vulnerability in the Open Networking Foundation ONF libfluid, specifically in the libfluid msg module. It is associated with the program routine fluid...

7.5CVSS6.9AI score0.00371EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/09/18 12:00 a.m.15 views

PT-2024-23830 · Open Networking Foundation · Libfluid

Name of the Vulnerable Software and Affected Versions: libfluid version 0.1.0 Description: The issue is an Out-of-bounds Read vulnerability in the Open Networking Foundation ONF libfluid, specifically in the libfluid msg module. It is associated with the program routine fluid...

7.5CVSS6.9AI score0.00394EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/09/18 12:00 a.m.14 views

PT-2024-23828 · Open Networking Foundation · Libfluid

Name of the Vulnerable Software and Affected Versions: libfluid version 0.1.0 Description: The issue is an Out-of-bounds Read vulnerability in the Open Networking Foundation ONF libfluid, specifically in the libfluid msg module. It is associated with the program routine fluid...

7.5CVSS6.9AI score0.00394EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/09/18 12:00 a.m.11 views

libfluid 安全漏洞

libfluid is an Open Networking Foundation open source application. A programmatic denial of service vulnerability exists in the libfluid fluidmsg::ActionList::unpack10 example, which can be exploited by an attacker to cause a denial of service...

7.5CVSS6.6AI score0.00417EPSS
SaveExploits0References2
OSV
OSV
added 2024/08/20 8:29 p.m.42 views

GO-2023-1763 On a compromised node, the fluid-csi service account can be used to modify node specs in github.com/fluid-cloudnative/fluid

On a compromised node, the fluid-csi service account can be used to modify node specs in github.com/fluid-cloudnative/fluid...

7.8CVSS6.2AI score0.00236EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
added 2024/08/05 12:00 a.m.18 views

Microsoft Fluid Framework prague Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Fluid Framework. Authentication is not required to exploit this vulnerability. The specific flaw exists within the installation of Fluid Framework. When installed from the official Microsof...

9.8CVSS7.7AI score
SaveExploits0References1
NVD
NVD
added 2024/07/16 6:15 p.m.28 views

CVE-2023-31456

There is an SSRF vulnerability in the Fluid Topics platform that affects versions prior to 4.3, where the server can be forced to make arbitrary requests to internal and external resources by an authenticated user...

5.4CVSS0.00214EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/07/16 12:00 a.m.16 views

CVE-2023-31456

There is an SSRF vulnerability in the Fluid Topics platform that affects versions prior to 4.3, where the server can be forced to make arbitrary requests to internal and external resources by an authenticated user...

6.8AI score0.00214EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/07/16 12:00 a.m.23 views

CVE-2023-31456

There is an SSRF vulnerability in the Fluid Topics platform that affects versions prior to 4.3, where the server can be forced to make arbitrary requests to internal and external resources by an authenticated user...

0.00214EPSS
SaveExploits0References2
CVE
CVE
added 2024/07/16 12:00 a.m.64 views

CVE-2023-31456

CVE-2023-31456 involves an SSRF in the Fluid Topics platform that affects versions prior to 4.3. An authenticated user can trigger the server to make arbitrary requests to internal and external resources by abusing server-side request handling. Root cause: SSRF in the platform’s request flow. Imp...

5.4CVSS6.8AI score0.00214EPSS
SaveExploits0References2
OSV
OSV
added 2024/06/25 12:53 p.m.9 views

MAL-2024-2785 Malicious code in office-fluid-container (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:53 p.m.6 views

Malicious code in office-fluid-container (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0References1
Veracode
Veracode
added 2024/06/17 8:39 a.m.19 views

Cross-site Scripting (XSS)

TYPO3 is vulnerable to cross-site scripting XSS. The vulnerability is due to templates using built-in Fluid ViewHelpers which fail to properly encode user input...

6.4AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2024/06/07 5:08 p.m.17 views

TYPO3 Cross-Site Scripting in Fluid ViewHelpers

Failing to properly encode user input, templates using built-in Fluid ViewHelpers are vulnerable to cross-site scripting...

6.7AI score
SaveExploits0References5Affected Software1
OSV
OSV
added 2024/06/07 5:08 p.m.22 views

GHSA-85CH-44W7-RF32 TYPO3 Cross-Site Scripting in Fluid ViewHelpers

Failing to properly encode user input, templates using built-in Fluid ViewHelpers are vulnerable to cross-site scripting...

6.1CVSS6.7AI score
SaveExploits0References5
Rows per page
Query Builder