Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-2518

Malicious code in bioql PyPI...

6.8CVSS6.7AI score0.00271EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2022/05/13 1:48 a.m.23 views

Withdrawn Advisory: Pulp Improper Path Parsing

Withdrawn Advisory This advisory has been withdrawn because the package pulpcore deals with pulp 3 only. This advisory concerns pulp 2, which is not in a supported ecosystem. Original Description pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a...

6.8CVSS6.9AI score0.00271EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2022/05/13 1:48 a.m.26 views

GHSA-574P-6FW4-4HW8 Withdrawn Advisory: Pulp Improper Path Parsing

Withdrawn Advisory This advisory has been withdrawn because the package pulpcore deals with pulp 3 only. This advisory concerns pulp 2, which is not in a supported ecosystem. Original Description pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a...

6.5CVSS6.6AI score0.00271EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2019/05/14 1:35 p.m.116 views

Moderate: Red Hat Security Advisory: Satellite 6.5 Release

Red Hat Satellite 6.5 for RHEL 7 is now available containing security fixes, bug fixes, and enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.8CVSS6.7AI score0.01184EPSS
Exploits2References470
Prion
Prion
added 2018/08/15 5:29 p.m.24 views

Design/Logic Flaw

pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to locations accessible to the 'apache' user. This may lead to overwrite of published content on other iso repositories...

4CVSS6.5AI score0.00271EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2018/08/15 5:0 p.m.68 views

CVE-2018-10917

CVE-2018-10917 concerns Pulp (version 2.16.x and possibly older) with an improper path parsing vulnerability. A malicious user or malicious ISO feed repository could write to locations accessible to the apache user, potentially overwriting published content in other ISO repositories. Public recor...

6.8CVSS6.4AI score0.00271EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2018/08/15 5:0 p.m.19 views

CVE-2018-10917

pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to locations accessible to the 'apache' user. This may lead to overwrite of published content on other iso repositories...

6.8CVSS6.6AI score0.00271EPSS
Exploits0References2
Rows per page
Query Builder