Lucene search
+L

3 matches found

Mageia
Mageia
added 2022/10/13 8:5 p.m.80 views

Updated python packages fix security vulnerability

The mailcap module does not add escape characters into commands discovered in the system mailcap file. CVE-2015-20107 Allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. CVE-2021-4189 The urlparse method does not...

8CVSS7.3AI score0.08325EPSS
SaveExploits2References7
Tenable Nessus
Tenable Nessus
added 2022/02/13 12:0 a.m.49 views

EulerOS Virtualization 3.0.6.0 : ruby (EulerOS-SA-2022-1093)

According to the versions of the ruby packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and...

7.4CVSS7.5AI score0.0305EPSS
SaveExploits2References4
AlpineLinux
AlpineLinux
added 2020/12/14 7:38 p.m.81 views

CVE-2020-8284

A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service...

4.3CVSS6.5AI score0.03851EPSS
SaveExploits0
Rows per page
Query Builder