Lucene search
+L

1091 matches found

OSV
OSV
•added 2022/02/17 4:22 a.m.•20 views

CVE-2022-24953

The CryptGPG extension before 1.6.7 for PHP does not prevent additional options in GPG calls, which presents a risk for certain environments and GPG versions...

5.3AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/02/17 12:00 a.m.•10 views

PT-2022-17010 · Php · Crypt Gpg

Name of the Vulnerable Software and Affected Versions: Crypt GPG extension for PHP versions prior to 1.6.7 Description: The issue concerns the Crypt GPG extension for PHP, where it fails to prevent additional options in GPG calls. This poses a risk for certain environments and GPG versions...

5.3CVSS5.1AI score0.0085EPSS
SaveExploits0References10
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•29 views

Mageia: Security Advisory (MGASA-2020-0363)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS7.1AI score0.00538EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•32 views

Mageia: Security Advisory (MGASA-2013-0303)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS8.8AI score0.0503EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2022/01/09 11:30 a.m.•24 views

RCLocals - Linux Startup Analyzer

Inspired by 'Autoruns' from Sysinternals, RCLocals analyzes all Linux startup possibilities to find backdoors, also performs process integrity verification, scan for DLL injected processes and much more Things covered: ·List GPG keys trusted by the system ·Installed Packages ·File integrity...

7.2AI score
SaveExploits0References5
GithubExploit
GithubExploit
•added 2021/12/21 10:14 p.m.•669 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4j-CVE-2021-44228 detector scanner playbook !CIhttps:/...

10CVSS9.1AI score0.99999EPSS
SaveExploits379
OSV
OSV
•added 2021/11/05 4:55 p.m.•11 views

SUSE-SU-2021:3621-1 Security update for SUSE Manager Server 4.1

This update fixes the following issues: grafana-formula: - Version 0.4.2 Add SSH blackbox status check panel to clients dashboard Migrate deprecated panels in clients dashboard prometheus-formula: - Version 0.3.4 Fix opening Prometheus ports on proxy - Version 0.3.3 Add Prometheus targets...

7.5CVSS7.7AI score0.03514EPSS
SaveExploits0References23
BDU FSTEC
BDU FSTEC
•added 2021/10/20 12:00 a.m.•13 views

The vulnerability of the gpg2 utility arises from writing beyond the allocated memory space, allowing a perpetrator to cause a service failure.

The vulnerability of the gpg2 utility arises from writing beyond the allocated memory. Exploiting this vulnerability can allow an attacker to cause a service failure upon processing a certificate file that is specially crafted...

4CVSS5.5AI score
SaveExploits0Affected Software2
OSV
OSV
•added 2021/10/12 4:06 p.m.•30 views

GHSA-3R3G-G73X-G593 coreos-installer improperly verifies GPG signature when decompressing gzipped artifact

Impact coreos-installer fails to correctly verify GPG signatures when decompressing gzip-compressed artifacts. This allows bypass of signature verification in cases where coreos-installer decompresses a downloaded OS image, allowing an attacker who can modify the OS image to compromise a...

7.8CVSS7.3AI score0.00519EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2021/10/12 4:06 p.m.•34 views

coreos-installer improperly verifies GPG signature when decompressing gzipped artifact

Impact coreos-installer fails to correctly verify GPG signatures when decompressing gzip-compressed artifacts. This allows bypass of signature verification in cases where coreos-installer decompresses a downloaded OS image, allowing an attacker who can modify the OS image to compromise a...

7.8CVSS0.6AI score0.00519EPSS
SaveExploits0References7Affected Software1
OPENSUSE Linux
OPENSUSE Linux
•added 2021/07/16 12:00 a.m.•58 views

Security update for claws-mail (moderate)

openSUSE Security Update: Security update for claws-mail Announcement ID: openSUSE-SU-2021:1045-1 Rating: moderate References: 1174457 Cross-References: CVE-2020-15917 CVSS scores: CVE-2020-15917 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 openSUSE...

9.8CVSS7.5AI score0.02614EPSS
SaveExploits0References1
OSV
OSV
•added 2021/07/15 10:06 p.m.•8 views

OPENSUSE-SU-2021:1045-1 Security update for claws-mail

This update for claws-mail fixes the following issues: Update to 3.18.0 Support for the OAuth2 authorisation protocol has been added for IMAP, POP and SMTP using custom, user-generated client IDs. OAuth2 preferences are found in the Account Preferences on the Receive page for POP: Authenticate...

9.8CVSS7.6AI score0.02614EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•28 views

SUSE: Security Advisory (SUSE-SU-2018:2690-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.8AI score0.02247EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•19 views

SUSE: Security Advisory (SUSE-SU-2013:1577-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8CVSS8.9AI score0.0503EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•25 views

SUSE: Security Advisory (SUSE-SU-2013:1578-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8CVSS8.9AI score0.0503EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•22 views

SUSE: Security Advisory (SUSE-SU-2021:0109-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4CVSS4AI score0.00331EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•10 views

SUSE: Security Advisory (SUSE-SU-2013:1061-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8CVSS6.5AI score0.02912EPSS
SaveExploits1References2
OSV
OSV
•added 2021/05/18 3:29 p.m.•53 views

GHSA-M6WG-2MWG-4RFQ GPGME Go wrapper contains Use After Free

The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification...

7.5CVSS7.8AI score0.05071EPSS
SaveExploits1References15
Github Security Blog
Github Security Blog
•added 2021/05/18 3:29 p.m.•36 views

GPGME Go wrapper contains Use After Free

The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification...

7.5CVSS7.9AI score0.05071EPSS
SaveExploits1References15Affected Software1
Veeam
Veeam
•added 2021/04/21 12:00 a.m.•34 views

GPG error: The following signatures were invalid: KEYEXPIRED

End-of-Life Product Nutanix Mine with Veeam reached End-of-Life on 2026-04-30. As of this date, all support services for this product are unavailable. For more information, see the Nutanix EOL Announcement Bulletin - Nutanix Mine, released 2025-04-30. Challenge For the products of specific versio...

5.6AI score
SaveExploits0Affected Software3
Rows per page
Query Builder