Lucene search
+L

13530 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/06 12:00 a.m.•11 views

CVE-2024-27935: Exposure of Data Element to Wrong Session

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.35.1 and prior to version 1.36.3, a vulnerability in Deno's Node.js compatibility runtime allows for cross-session data contamination during simultaneous asynchronous reads from Node.js streams sourced from sockets o...

8.3CVSS6.2AI score0.00722EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/03/06 12:00 a.m.•26 views

Jenkins Delphix Plugin Security Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...

5.3CVSS5.9AI score0.00417EPSS
SaveExploits0References2
NVD
NVD
•added 2024/03/05 11:15 p.m.•42 views

CVE-2024-24275

Cross Site Scripting vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the global search function...

9.6CVSS5.7AI score0.00869EPSS
SaveExploits1References1
Prion
Prion
•added 2024/03/05 11:15 p.m.•43 views

Cross site scripting

Cross Site Scripting vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the global search function...

6.2AI score0.00869EPSS
SaveExploits1References1
osv_ghsa
osv_ghsa
•added 2024/03/05 8:49 p.m.•119 views

GHSA-WRQV-PF6J-MQJP Deno's Node.js Compatibility Runtime has Cross-Session Data Contamination

Summary A vulnerability in Deno's Node.js compatibility runtime allows for cross-session data contamination during simultaneous asynchronous reads from Node.js streams sourced from sockets or files. The issue arises from the re-use of a global buffer BUF in streamwrap.ts used as a performance...

7.2CVSS6.3AI score0.00722EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2024/03/05 8:49 p.m.•42 views

Deno's Node.js Compatibility Runtime has Cross-Session Data Contamination

Summary A vulnerability in Deno's Node.js compatibility runtime allows for cross-session data contamination during simultaneous asynchronous reads from Node.js streams sourced from sockets or files. The issue arises from the re-use of a global buffer BUF in streamwrap.ts used as a performance...

8.3CVSS6.3AI score0.00722EPSS
SaveExploits1References5Affected Software1
RedhatCVE
RedhatCVE
•added 2024/03/05 5:08 p.m.•22 views

CVE-2021-47083

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: fix global-out-of-bounds issue When eint virtual eint number is greater than gpio number, it maybe produce 'desceintn' size globle-out-of-bounds issue...

6CVSS6.3AI score0.00229EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/03/05 12:00 a.m.•14 views

PT-2024-2415 · Artica · Artica Proxy

Name of the Vulnerable Software and Affected Versions: Artica-Proxy affected versions not specified Description: The Artica-Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. ...

10CVSS8.8AI score0.8126EPSS
SaveExploits9References14
Positive Technologies
Positive Technologies
•added 2024/03/05 12:00 a.m.•22 views

PT-2024-20333 · Teamwire · Teamwire Windows Desktop Client

Name of the Vulnerable Software and Affected Versions: Teamwire Windows desktop client versions 2.0.1 through 2.4.0 Description: The issue allows a remote attacker to obtain sensitive information via a crafted payload to the global search function. This is a Cross Site Scripting vulnerability...

9.6CVSS5.8AI score0.00869EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/05 12:00 a.m.•10 views

CVE-2024-24275: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the global search function...

9.6CVSS5.9AI score0.00869EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/03/05 12:00 a.m.•50 views

CVE-2024-24275

Cross Site Scripting vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the global search function...

5.9AI score0.00869EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/03/05 12:00 a.m.•24 views

Grouptime Teamwire Client Security Vulnerability

Grouptime Teamwire Client is an enterprise messaging client application from Grouptime, Germany. A security vulnerability exists in the Teamwire Windows desktop client versions v.2.0.1 through v.2.4.0. A remote attacker could exploit the vulnerability to obtain sensitive information via a special...

9.6CVSS5.8AI score0.00869EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/03/05 12:00 a.m.•21 views

PT-2024-22149 · Deno · Deno

Name of the Vulnerable Software and Affected Versions: Deno versions 1.35.1 through 1.36.2 Description: A vulnerability in Deno's Node.js compatibility runtime allows for cross-session data contamination during simultaneous asynchronous reads from Node.js streams sourced from sockets or files. Th...

8.3CVSS6.3AI score0.00722EPSS
SaveExploits1References8
NVD
NVD
•added 2024/03/04 6:15 p.m.•42 views

CVE-2021-47083

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: fix global-out-of-bounds issue When eint virtual eint number is greater than gpio number, it maybe produce 'desceintn' size globle-out-of-bounds issue...

7.1CVSS7.4AI score0.00229EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2024/03/04 6:15 p.m.•20 views

CVE-2021-47083

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: fix global-out-of-bounds issue When eint virtual eint number is greater than gpio number, it maybe produce 'desceintn' size globle-out-of-bounds issue...

7.1CVSS6AI score0.00229EPSS
SaveExploits0References4
Prion
Prion
•added 2024/03/04 6:15 p.m.•23 views

Design/Logic Flaw

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: fix global-out-of-bounds issue When eint virtual eint number is greater than gpio number, it maybe produce 'desceintn' size globle-out-of-bounds issue...

7.4AI score0.00229EPSS
SaveExploits0References4
CVE
CVE
•added 2024/03/04 6:06 p.m.•124 views

CVE-2021-47083

CVE-2021-47083 affects the Linux kernel’s pinctrl Mediatek code: when the eint virtual EINT number exceeds the GPIO count, it can trigger a global-out-of-bounds write to desc[eint_n]. The issue was fixed in the mediatek pinctrl path (pinctrl: mediatek: fix global-out-of-bounds issue). No exploit ...

7.1CVSS6AI score0.00229EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/04 6:06 p.m.•22 views

CVE-2021-47083 pinctrl: mediatek: fix global-out-of-bounds issue

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: fix global-out-of-bounds issue When eint virtual eint number is greater than gpio number, it maybe produce 'desceintn' size globle-out-of-bounds issue...

7.1CVSS6AI score0.00229EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/03/04 6:06 p.m.•53 views

CVE-2021-47083 pinctrl: mediatek: fix global-out-of-bounds issue

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: fix global-out-of-bounds issue When eint virtual eint number is greater than gpio number, it maybe produce 'desceintn' size globle-out-of-bounds issue...

7.1CVSS7.6AI score0.00229EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2024/03/04 12:00 a.m.•55 views

openSUSE: Security Advisory for libxml2 (SUSE-SU-2023:3699-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.7AI score0.01079EPSS
SaveExploits1References2
Rows per page
Query Builder