Lucene search
+L

866 matches found

SUSE Linux
SUSE Linux
•added 2025/02/03 5:03 p.m.•14 views

Security update for ignition

This update for ignition fixes the following issues: CVE-2023-45288: Fixed unclosed connections when receiving too many headers in golang.org/x/net/http2 bsc1236518 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

6.9CVSS7.4AI score0.91969EPSS
SaveExploits1References4
SUSE Linux
SUSE Linux
•added 2025/02/01 3:34 a.m.•14 views

Security update for ignition

This update for ignition fixes the following issues: CVE-2023-45288: Fixed unclosed connections when receiving too many headers in golang.org/x/net/http2 bsc1236518 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

6.9CVSS7.3AI score0.91969EPSS
SaveExploits1References4
OSV
OSV
•added 2025/02/01 3:34 a.m.•9 views

SUSE-SU-2025:0318-1 Security update for ignition

This update for ignition fixes the following issues: CVE-2023-45288: Fixed unclosed connections when receiving too many headers in golang.org/x/net/http2 bsc1236518...

7.5CVSS7.8AI score0.91969EPSS
SaveExploits1References3
SUSE Linux
SUSE Linux
•added 2025/01/31 2:04 a.m.•13 views

Security update for ignition

This update for ignition fixes the following issues: CVE-2023-45288: Fixed unclosed connections when receiving too many headers in golang.org/x/net/http2 bsc1236518 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

6.9CVSS7.3AI score0.91969EPSS
SaveExploits1References4
OSV
OSV
•added 2025/01/31 2:04 a.m.•9 views

SUSE-SU-2025:0306-1 Security update for ignition

This update for ignition fixes the following issues: CVE-2023-45288: Fixed unclosed connections when receiving too many headers in golang.org/x/net/http2 bsc1236518...

7.5CVSS8.1AI score0.91969EPSS
SaveExploits1References3
SUSE Linux
SUSE Linux
•added 2025/01/30 2:33 p.m.•12 views

Security update for ignition

This update for ignition fixes the following issues: CVE-2023-45288: Fixed unclosed connections when receiving too many headers in golang.org/x/net/http2 bsc1236518 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

6.9CVSS7.1AI score0.91969EPSS
SaveExploits1References4
SUSE Linux
SUSE Linux
•added 2025/01/30 9:56 a.m.•10 views

Security update for ignition

This update for ignition fixes the following issues: CVE-2023-45288: Fixed unclosed connections when receiving too many headers in golang.org/x/net/http2 bsc1236518 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

6.9CVSS7.3AI score0.91969EPSS
SaveExploits1References4
OSV
OSV
•added 2025/01/30 9:56 a.m.•21 views

SUSE-SU-2025:0295-1 Security update for ignition

This update for ignition fixes the following issues: CVE-2023-45288: Fixed unclosed connections when receiving too many headers in golang.org/x/net/http2 bsc1236518...

7.5CVSS7.8AI score0.91969EPSS
SaveExploits1References3
OSV
OSV
•added 2025/01/22 5:01 p.m.•26 views

DRUPAL-CONTRIB-2025-007

This module enables you to render error pages using the Ignition package. The module disables certain Drupal core code and does not perform sufficient filtering, allowing HTML to be injected in certain situations leading to a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated...

6.1CVSS6.1AI score0.00257EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/22 12:00 a.m.•16 views

Drupal Ignition by Thrive Themes module < 1.0.4 - Unauthenticated Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS vulnerability discovered by Dieter Holvoet in WordPress Theme Ignition by Thrive Themes versions 1.0.4...

6.1CVSS6.1AI score0.00257EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2025/01/22 12:00 a.m.•7 views

Drupal Ignition by Thrive Themes module < 1.0.4 - Unauthenticated Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS vulnerability discovered by Dieter Holvoet in WordPress Module Ignition Error Pages versions 1.0.4...

6.1CVSS5.9AI score0.00257EPSS
SaveExploits0References1Affected Software1
Drupal
Drupal
•added 2025/01/22 12:00 a.m.•33 views

Ignition Error Pages - Critical - Cross Site Scripting - SA-CONTRIB-2025-007

This module enables you to render error pages using the Ignition package. The module disables certain Drupal core code and does not perform sufficient filtering, allowing HTML to be injected in certain situations leading to a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated...

6.1CVSS6.2AI score0.00257EPSS
SaveExploits0References8
OSV
OSV
•added 2024/09/16 8:17 a.m.•14 views

RHSA-2022:8126 Red Hat Security Advisory: ignition security, bug fix, and enhancement update

Bulletin has no description...

7.5CVSS6.5AI score0.01298EPSS
SaveExploits0References12
OSV
OSV
•added 2024/08/21 3:11 p.m.•27 views

GO-2022-0451 Ignition config accessible to unprivileged software on VMware in github.com/coreos/ignition

Ignition config accessible to unprivileged software on VMware in github.com/coreos/ignition...

6.5CVSS6.4AI score0.01298EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2024/07/29 12:00 a.m.•40 views

Facade Ignition < 2.5.2 Remote Code Execution

Facade Ignition is a customizable error page for Laravel applications running on Laravel 5.5 up to Laravel 8. It is the default error page for all Laravel 6 applications. Facade Ignition versions prior to 2.5.2 is is affected by a vulnerability allowing an unauthenticated attacker to obtain Remot...

9.8CVSS7.6AI score0.99943EPSS
SaveExploits39References3
GithubExploit
GithubExploit
•added 2024/05/19 9:25 p.m.•928 views

Exploit for CVE-2021-3129

CVE-2021-3129 Unauthenticated RCE in Laravel Ignition via F...

9.8CVSS8.2AI score0.99943EPSS
SaveExploits39
OSV
OSV
•added 2024/05/10 11:06 a.m.•7 views

OESA-2024-1529 ignition security update

Ignition is a utility used to manipulate systems during the initramfs. This includes partitioning disks, formatting partitions, writing files regular files, systemd units, etc., and configuring users. On first boot, Ignition reads its configuration from a source of truth remote URL, network...

7.5CVSS6.7AI score0.04561EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/05/07 12:00 a.m.•18 views

The vulnerability of the ModuleInvoke class in SCADA systems of Inductive Automation Ignition allows a perpetrator to execute arbitrary code.

The vulnerability of the ModuleInvoke class in the SCADA system of Inductive Automation Ignition involves the restoration of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the SYSTEM context...

9CVSS8.1AI score0.55031EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2024/05/03 3:16 a.m.•21 views

CVE-2023-50233

Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in...

8.8CVSS6.2AI score0.02081EPSS
SaveExploits0References2
OSV
OSV
•added 2024/05/03 3:16 a.m.•20 views

CVE-2023-50232

Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the...

8.8CVSS6.2AI score0.01386EPSS
SaveExploits0References2
Rows per page
Query Builder