Lucene search
+L

774 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2023/05/09 12:12 a.m.10 views

Malicious code in recurrence-formatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 970492e695237c754d7801c30cdab26ae4402dd14fe49a15fbe5a009641021e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2023/05/09 12:12 a.m.17 views

MAL-2023-742 Malicious code in recurrence-formatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 970492e695237c754d7801c30cdab26ae4402dd14fe49a15fbe5a009641021e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2023/04/30 12:00 a.m.14 views

Fedora: Security Advisory for rust-comrak (FEDORA-2023-e9243281cb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.7AI score0.01268EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/04/30 12:00 a.m.31 views

Fedora: Security Advisory for rust-comrak (FEDORA-2023-b37722768e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.7AI score0.01268EPSS
SaveExploits0References2
Fedora
Fedora
added 2023/04/29 2:53 a.m.24 views

[SECURITY] Fedora 38 Update: rust-comrak-0.18.0-1.fc38

A 100% CommonMark-compatible GitHub Flavored Markdown parser and formatter...

9.8CVSS8.8AI score0.01268EPSS
SaveExploits0
OSV
OSV
added 2023/04/17 12:00 p.m.19 views

RUSTSEC-2023-0035 Adverserial use of `make_bitflags!` macro can cause undefined behavior

The macro relied on an expression of the form Enum::Variant always being a variant of the enum. However, it may also be an associated integer constant, in which case there's no guarantee that the value of said constant consists only of bits valid for this bitflag type. Thus, code like this could...

7.2AI score
SaveExploits0References3
RustSec
RustSec
added 2023/04/17 12:00 p.m.20 views

Adverserial use of `make_bitflags!` macro can cause undefined behavior

The macro relied on an expression of the form Enum::Variant always being a variant of the enum. However, it may also be an associated integer constant, in which case there's no guarantee that the value of said constant consists only of bits valid for this bitflag type. Thus, code like this could...

6.8AI score
SaveExploits0Affected Software1
NVD
NVD
added 2023/04/15 11:15 p.m.33 views

CVE-2018-15472

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. The diff formatter using rouge can block for a long time in Sidekiq jobs without any timeout...

7.5CVSS7.3AI score0.00723EPSS
SaveExploits0References2
OSV
OSV
added 2023/04/15 11:15 p.m.28 views

CVE-2018-15472

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. The diff formatter using rouge can block for a long time in Sidekiq jobs without any timeout...

7.5CVSS7.5AI score
SaveExploits0References2
Prion
Prion
added 2023/04/15 11:15 p.m.22 views

Design/Logic Flaw

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. The diff formatter using rouge can block for a long time in Sidekiq jobs without any timeout...

5CVSS7.4AI score0.00723EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2023/04/15 11:15 p.m.25 views

CVE-2018-15472

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. The diff formatter using rouge can block for a long time in Sidekiq jobs without any timeout...

7.5CVSS7.1AI score0.00723EPSS
SaveExploits0References2
OSV
OSV
added 2023/04/15 11:15 p.m.12 views

UBUNTU-CVE-2018-15472

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. The diff formatter using rouge can block for a long time in Sidekiq jobs without any timeout...

7.5CVSS7.1AI score0.00723EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/04/15 12:00 a.m.35 views

CVE-2018-15472

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. The diff formatter using rouge can block for a long time in Sidekiq jobs without any timeout...

7.4AI score0.00723EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/04/15 12:00 a.m.17 views

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab that stems from the diff formatter...

7.5CVSS7.3AI score0.00723EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2023/04/15 12:00 a.m.62 views

CVE-2018-15472

Removed by vendor...

7.5CVSS7.1AI score0.00723EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/04/15 12:00 a.m.12 views

PT-2023-10678 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab Community and Enterprise Edition versions 11.1.0 through 11.1.7 GitLab Community and Enterprise Edition versions 11.2.0 through 11.2.4 GitLab Community and Enterprise Edition versions 11.3.0 through 11.3.1 Description: An issue was...

7.5CVSS7.3AI score0.00723EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2023/03/18 12:00 a.m.36 views

EulerOS 2.0 SP10 : git (EulerOS-SA-2023-1548)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined b...

9.8CVSS8.7AI score0.56334EPSS
SaveExploits0References4
Drupal
Drupal
added 2023/03/15 12:00 a.m.22 views

Responsive media Image Formatter - Critical - Unsupported - SA-CONTRIB-2023-011

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466procedure---own-project---unsupported...

6.6AI score
SaveExploits0References2
Veracode
Veracode
added 2023/03/11 5:18 a.m.23 views

Cross-site Scripting (XSS)

redmine is vulnerable to Cross-site Scripting XSS attacks. The library contains persistent XSS in its Textile formatter due to improper sanitization in Redcloth3 Textile-formatted fields. Depending on the configuration, this may require login as a registered user...

6.1CVSS5.5AI score0.00429EPSS
SaveExploits0References2Affected Software1
Veracode
Veracode
added 2023/03/10 10:13 p.m.21 views

Cross-Site Scripting (XSS)

redmine is vulnerable to Cross-Site Scripting XSS attacks. The library allows persistent XSS in its Textile formatter due to improper sanitization of the blockquote syntax in Textile-formatted fields, allowing an attacker to inject and execute malicious javascript on victim's browser...

6.1CVSS5.5AI score0.00402EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder