Lucene search
+L

3408 matches found

OSV
OSV
•added 2024/07/05 7:15 a.m.•15 views

UBUNTU-CVE-2024-39481

In the Linux kernel, the following vulnerability has been resolved: media: mc: Fix graph walk in mediapipelinestart The graph walk tries to follow all links, even if they are not between pads. This causes a crash with, e.g. a MEDIALNKFLANCILLARYLINK link. Fix this by allowing the walk to proceed...

7.8CVSS5.8AI score0.00222EPSS
SaveExploits0References14
Vulnrichment
Vulnrichment
•added 2024/07/05 6:55 a.m.•31 views

CVE-2024-39481 media: mc: Fix graph walk in media_pipeline_start

In the Linux kernel, the following vulnerability has been resolved: media: mc: Fix graph walk in mediapipelinestart The graph walk tries to follow all links, even if they are not between pads. This causes a crash with, e.g. a MEDIALNKFLANCILLARYLINK link. Fix this by allowing the walk to proceed...

6.8AI score0.00222EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2024/07/05 6:55 a.m.•27 views

CVE-2024-39481

In the Linux kernel, the following vulnerability has been resolved: media: mc: Fix graph walk in mediapipelinestart The graph walk tries to follow all links, even if they are not between pads. This causes a crash with, e.g. a MEDIALNKFLANCILLARYLINK link. Fix this by allowing the walk to proceed...

7.8CVSS5AI score0.00222EPSS
SaveExploits0
CNNVD
CNNVD
•added 2024/07/05 12:00 a.m.•19 views

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from a graph traversal occurring in mediapipelinestart, which causes the program to crash...

5.5CVSS6.5AI score0.00222EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/05 12:00 a.m.•3 views

CVE-2024-39481: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: mc: Fix graph walk in mediapipelinestart The graph walk tries to follow all links, even if they are not between pads. This causes a crash with, e.g. a MEDIALNKFLANCILLARYLINK link. Fix this by allowing the walk to proceed...

7.8CVSS5.9AI score0.00222EPSS
SaveExploits0References9
OSV
OSV
•added 2024/06/25 1:34 p.m.•9 views

MAL-2024-5032 Malicious code in datagraph (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSV
OSV
•added 2024/06/25 12:41 p.m.•19 views

MAL-2024-2294 Malicious code in ember-nf-graph-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ebe095668166c2fe0cab161db6eabfe48bbed4b707808733ac6315734dc651b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 12:41 p.m.•10 views

Malicious code in ember-nf-graph-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ebe095668166c2fe0cab161db6eabfe48bbed4b707808733ac6315734dc651b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2024/06/25 12:00 a.m.•23 views

CraftCMS Security Vulnerability

CraftCMS is a content management system from CraftCMS, Inc. A security vulnerability exists in CraftCMS version v3.7.31 and earlier versions. An attacker exploited the vulnerability to perform a SQL injection attack via a GraphQL API endpoint...

9.8CVSS7.8AI score0.53242EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2024/06/12 8:14 a.m.•321 views

Exploit for Improper Access Control in Apache Hugegraph

Remote Code Execution vulnerability in Apache HugeGraph Server...

9.8CVSS10AI score0.9921EPSS
SaveExploits13
OSV
OSV
•added 2024/06/10 3:15 p.m.•9 views

CVE-2024-35307

Argument Injection Leading to Remote Code Execution in Realtime Graph Extension, allowing unauthenticated attackers to execute arbitrary code on the server. This issue affects Pandora FMS: from 700 through 777...

9.8CVSS8.7AI score
SaveExploits0References1
NVD
NVD
•added 2024/06/10 3:15 p.m.•63 views

CVE-2024-35307

Argument Injection Leading to Remote Code Execution in Realtime Graph Extension, allowing unauthenticated attackers to execute arbitrary code on the server. This issue affects Pandora FMS: from 700 through 777...

9.8CVSS0.00913EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/10 2:33 p.m.•23 views

CVE-2024-35307 Argument Injection Leading to Remote Code Execution in Realtime Graph Extension

Argument Injection Leading to Remote Code Execution in Realtime Graph Extension, allowing unauthenticated attackers to execute arbitrary code on the server. This issue affects Pandora FMS: from 700 through 777...

9.4CVSS8.7AI score0.00913EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/10 2:33 p.m.•53 views

CVE-2024-35307 Argument Injection Leading to Remote Code Execution in Realtime Graph Extension

Argument Injection Leading to Remote Code Execution in Realtime Graph Extension, allowing unauthenticated attackers to execute arbitrary code on the server. This issue affects Pandora FMS: from 700 through 777...

9.4CVSS0.00913EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/10 12:00 a.m.•6 views

PT-2024-26425

Name of the Vulnerable Software and Affected Versions Pandora FMS versions 700 through 776 Description The issue allows unauthenticated attackers to execute arbitrary code on the server through Argument Injection Leading to Remote Code Execution in the Realtime Graph Extension. Recommendations Fo...

9.8CVSS6.6AI score0.00913EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/10 12:00 a.m.•18 views

CVE-2024-35307: Improper Neutralization of Argument Delimiters in a Command

Argument Injection Leading to Remote Code Execution in Realtime Graph Extension, allowing unauthenticated attackers to execute arbitrary code on the server. This issue affects Pandora FMS: from 700 through 777...

9.8CVSS6.5AI score0.00913EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/06/07 12:00 a.m.•22 views

The vulnerability of the Apache HugeGraph graph database server, related to the ability to bypass the authentication process, allows attackers to execute arbitrary code.

The vulnerability of the Apache HugeGraph graph database server relates to the bypassing of the authentication process. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code...

10CVSS8.4AI score0.9921EPSS
SaveExploits13References5Affected Software1
Patchstack
Patchstack
•added 2024/06/06 7:04 a.m.•20 views

WordPress Open Graph plugin <= 1.11.2 - Unauthenticated Sensitive Information Exposure vulnerability

Unauthenticated Sensitive Information Exposure vulnerability discovered by Krzysztof Zając in WordPress Plugin Open Graph versions = 1.11.2...

5.3CVSS6.9AI score0.00452EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2024/06/06 4:15 a.m.•10 views

CVE-2024-5615

The Open Graph plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.11.2 via the 'opengraphdefaultdescription' function. This makes it possible for unauthenticated attackers to extract sensitive data including partial content of...

5.3CVSS5.9AI score0.00452EPSS
SaveExploits0References4
OSV
OSV
•added 2024/06/06 4:15 a.m.•14 views

CVE-2024-5615

The Open Graph plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.11.2 via the 'opengraphdefaultdescription' function. This makes it possible for unauthenticated attackers to extract sensitive data including partial content of...

5.3CVSS5.8AI score0.00452EPSS
SaveExploits0References3
Rows per page
Query Builder