Lucene search
+L

5295 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/12 12:00 a.m.•3 views

CVE-2023-37455: Improper Restriction of Rendered UI Layers or Frames

The permission request prompt from the site in the background tab was overlaid on top of the site in the foreground tab. This vulnerability affects Firefox for iOS 115...

5.4CVSS5.8AI score0.00301EPSS
SaveExploits0References2
NVD
NVD
•added 2023/07/11 6:15 p.m.•59 views

CVE-2023-37271

RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted environment. RestrictedPython does not check access to stack frames and their attributes. Stack frames are accessible within at least generators and generat...

9.9CVSS9.1AI score0.00847EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2023/07/11 6:15 p.m.•26 views

CVE-2023-37271

RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted environment. RestrictedPython does not check access to stack frames and their attributes. Stack frames are accessible within at least generators and generat...

9.9CVSS7.5AI score0.00847EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2023/07/11 6:15 p.m.•14 views

UBUNTU-CVE-2023-37271

RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted environment. RestrictedPython does not check access to stack frames and their attributes. Stack frames are accessible within at least generators and generat...

9.9CVSS6.3AI score0.00847EPSS
SaveExploits0References5
Prion
Prion
•added 2023/07/11 6:15 p.m.•24 views

Default configuration

RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted environment. RestrictedPython does not check access to stack frames and their attributes. Stack frames are accessible within at least generators and generat...

6.5CVSS9.3AI score0.00847EPSS
SaveExploits0References2Affected Software1
osv_pysec
osv_pysec
•added 2023/07/11 6:15 p.m.•33 views

PYSEC-2023-118

RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted environment. RestrictedPython does not check access to stack frames and their attributes. Stack frames are accessible within at least generators and generat...

9.9CVSS9AI score0.00847EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/07/11 5:14 p.m.•52 views

CVE-2023-37271 RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape

RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted environment. RestrictedPython does not check access to stack frames and their attributes. Stack frames are accessible within at least generators and generat...

8.4CVSS9.1AI score
SaveExploits0References4
CVE
CVE
•added 2023/07/11 5:14 p.m.•112 views

CVE-2023-37271

CVE-2023-37271 concerns RestrictedPython, a tool for sandboxing Python code. The vulnerability arises because RestrictedPython does not sanitize access to stack frames, allowing code inside generators/generator expressions to access the current stack frame and walk the stack beyond the sandbox bo...

9.9CVSS9AI score0.00847EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2023/07/11 5:14 p.m.•92 views

CVE-2023-37271

RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted environment. RestrictedPython does not check access to stack frames and their attributes. Stack frames are accessible within at least generators and generat...

9.9CVSS9.4AI score0.00847EPSS
SaveExploits0
osv_cve
osv_cve
•added 2023/07/11 10:15 a.m.•18 views

CVE-2023-35921

A vulnerability has been identified in SIMATIC MV540 H All versions V3.3.4, SIMATIC MV540 S All versions V3.3.4, SIMATIC MV550 H All versions V3.3.4, SIMATIC MV550 S All versions V3.3.4, SIMATIC MV560 U All versions V3.3.4, SIMATIC MV560 X All versions V3.3.4. Affected devices cannot properly...

7.5CVSS7.2AI score0.00866EPSS
SaveExploits0References1
Prion
Prion
•added 2023/07/11 10:15 a.m.•31 views

Design/Logic Flaw

A vulnerability has been identified in SIMATIC MV540 H All versions V3.3.4, SIMATIC MV540 S All versions V3.3.4, SIMATIC MV550 H All versions V3.3.4, SIMATIC MV550 S All versions V3.3.4, SIMATIC MV560 U All versions V3.3.4, SIMATIC MV560 X All versions V3.3.4. Affected devices cannot properly...

5CVSS7.4AI score0.00866EPSS
SaveExploits0References1Affected Software6
CVE
CVE
•added 2023/07/11 9:07 a.m.•57 views

CVE-2023-35921

CVE-2023-35921 affects Siemens SIMATIC MV540 H/S, MV550 H/S, MV560 U/X (all versions

7.5CVSS7.3AI score0.00866EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/07/11 9:07 a.m.•20 views

CVE-2023-35921

A vulnerability has been identified in SIMATIC MV540 H All versions V3.3.4, SIMATIC MV540 S All versions V3.3.4, SIMATIC MV550 H All versions V3.3.4, SIMATIC MV550 S All versions V3.3.4, SIMATIC MV560 U All versions V3.3.4, SIMATIC MV560 X All versions V3.3.4. Affected devices cannot properly...

7.5CVSS7.2AI score0.00866EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/11 12:00 a.m.•3 views

CVE-2023-35921: Uncontrolled Resource Consumption

A vulnerability has been identified in SIMATIC MV540 H All versions V3.3.4, SIMATIC MV540 S All versions V3.3.4, SIMATIC MV550 H All versions V3.3.4, SIMATIC MV550 S All versions V3.3.4, SIMATIC MV560 U All versions V3.3.4, SIMATIC MV560 X All versions V3.3.4. Affected devices cannot properly...

7.5CVSS6.9AI score0.00866EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/07/11 12:00 a.m.•21 views

RestrictedPython 安全漏洞

RestrictedPython is a tool that helps define a subset of the Python language that allows program input to be provided to a trusted environment. A security vulnerability exists in RestrictedPython versions prior to 5.3, and prior to 6.1, which stems from allowing a user to provide program input to...

9.9CVSS8.7AI score0.00847EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/11 12:00 a.m.•2 views

CVE-2023-37271: Improper Control of Dynamically-Managed Code Resources

RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted environment. RestrictedPython does not check access to stack frames and their attributes. Stack frames are accessible within at least generators and generat...

9.9CVSS8.3AI score0.00847EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2023/07/10 12:30 p.m.•203 views

WPAxFuzz - A Full-Featured Open-Source Wi-Fi Fuzzer

This tool is capable of fuzzing either any management, control or data frame of the 802.11 protocol or the SAE exchange. For the management, control or data frames, you can choose either the "standard" mode where all of the frames transmitted have valid size values or the "random" mode where the...

7.5CVSS6.9AI score0.0241EPSS
SaveExploits0References4
osv_usn
osv_usn
•added 2023/07/06 8:40 p.m.•21 views

USN-6208-1 golang-websocket vulnerability

It was discovered that Gorilla WebSocket incorrectly handled decoding WebSocket frames. An attacker could possibly use this issue to cause a crash, resulting in a denial of service...

7.5CVSS6.7AI score0.02146EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/06/20 12:00 a.m.•14 views

PT-2023-4034 · Siemens · Simatic Mv540 S +2

Name of the Vulnerable Software and Affected Versions: SIMATIC MV540 H versions prior to V3.3.4 SIMATIC MV540 S versions prior to V3.3.4 SIMATIC MV550 H versions prior to V3.3.4 SIMATIC MV550 S versions prior to V3.3.4 SIMATIC MV560 U versions prior to V3.3.4 SIMATIC MV560 X versions prior to...

7.8CVSS7.4AI score0.00866EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2023/06/09 7:33 p.m.•44 views

Denial of Service via reachable assertion

A grpc-swift server is vulnerable to a denial of service attack via a reachable assertion. This was due to incorrect logic when handling GOAWAY frames. The attack is low-effort: it takes very little resources to construct and send the required sequence of frames. The impact on availability is hig...

7.5CVSS6.6AI score0.01177EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder