Lucene search
+L

1520 matches found

Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•3 views

PT-2022-30559

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.188 Description A potential double free issue was discovered in the mac80211 component related to mesh join functionality. The actual impact and attack plausibility of this issue have not yet been proven...

5.8AI score
SaveExploits0References1
OSV
OSV
•added 2022/04/20 6:25 p.m.•16 views

CVE-2022-24864 Malicious Javascript injection in OriginProtocol/origin-website

Origin Protocol is a blockchain based project. The Origin Protocol project website allows for malicious users to inject malicious Javascript via a POST request to /presale/join. User-controlled data is passed with no sanitization to SendGrid and injected into an email that is delivered to the...

4.1CVSS6.8AI score0.00655EPSS
SaveExploits0References5
Mend
Mend
•added 2022/04/20 6:25 p.m.•2 views

CVE-2022-24864

Origin Protocol is a blockchain based project. The Origin Protocol project website allows for malicious users to inject malicious Javascript via a POST request to "/presale/join". User-controlled data is passed with no sanitization to SendGrid and injected into an email that is delivered to the...

5.4CVSS0.00655EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/20 12:00 a.m.•6 views

CVE-2022-24864: Improper Neutralization of Input During Web Page Generation

Origin Protocol is a blockchain based project. The Origin Protocol project website allows for malicious users to inject malicious Javascript via a POST request to /presale/join. User-controlled data is passed with no sanitization to SendGrid and injected into an email that is delivered to the...

5.4CVSS6AI score0.00655EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/04/20 12:00 a.m.•18 views

Origin Protocol 跨站脚本漏洞

Origin Protocol is an ethereum-based platform from US-based Origin that aims to bring irreplaceable tokens NFT and decentralized finance DeFi to the masses. A security vulnerability exists in Origin Protocol that allows an attacker to inject malicious Javascript code into /presale/join via a POST...

5.4CVSS5.9AI score0.00655EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/04/20 12:00 a.m.•5 views

PT-2022-16938

Name of the Vulnerable Software and Affected Versions Origin Protocol affected versions not specified Description The Origin Protocol project website is susceptible to malicious Javascript injection via a POST request to "/presale/join". User-controlled data is passed without sanitization to...

5.4CVSS5.8AI score0.00655EPSS
SaveExploits0References7
OSV
OSV
•added 2022/04/12 8:15 p.m.•5 views

DEBIAN-CVE-2022-27385

An issue in the component Usedtablesandconstcache::usedtablesandconstcachejoin of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...

7.5CVSS8AI score0.01644EPSS
SaveExploits1References1
OSV
OSV
•added 2022/04/12 8:15 p.m.•12 views

UBUNTU-CVE-2022-27385

An issue in the component Usedtablesandconstcache::usedtablesandconstcachejoin of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...

7.5CVSS7.2AI score0.01644EPSS
SaveExploits1References3
Microsoft KB
Microsoft KB
•added 2022/04/12 8:00 a.m.•133 views

April 12, 2022—KB5012666 (Security-only update)

None None...

10CVSS7AI score0.90961EPSS
SaveExploits24
OSV
OSV
•added 2022/03/23 8:38 p.m.•18 views

CLSA-2022-1648067906 Fix of CVE: CVE-2020-25717

CVE-2020-25717: Fix username map script regression rhbz2046174 - Fix possible segfault while joining a domain rhbz2046160...

8.5CVSS5.8AI score0.01625EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2022/03/22 12:30 p.m.•17 views

mariadb: crash in Used_tables_and_const_cache::used_tables_and_const_cache_join

A flaw was found in MariaDB. An issue in the component, Usedtablesandconstcache::usedtablesandconstcachejoin, of the MariaDB Server v10.7 allows attackers to cause a denial of service DoS via specially crafted SQL statements, impacting availability...

7.5CVSS7.4AI score0.01644EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2022/03/22 10:23 a.m.•12 views

mariadb: crash in Used_tables_and_const_cache::used_tables_and_const_cache_join

A flaw was found in MariaDB. An issue in the component, Usedtablesandconstcache::usedtablesandconstcachejoin, of the MariaDB Server v10.7 allows attackers to cause a denial of service DoS via specially crafted SQL statements, impacting availability...

7.5CVSS7.4AI score0.01644EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/03/10 12:00 a.m.•2 views

PT-2025-8218

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential double free issue in the Linux kernel's mac80211 module has been identified. This issue occurs when rejoining a mesh network, potentially causing memory corruption and kernel...

7.8CVSS0.00259EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/02/07 12:00 a.m.•9 views

PT-2022-3307

Name of the Vulnerable Software and Affected Versions Firejail versions 0.9.68 Description A Privilege Context Switching issue was discovered in join.c in Firejail. By crafting a bogus Firejail container that is accepted by the Firejail setuid-root program as a join target, a local attacker can...

7.8CVSS6.8AI score0.0039EPSS
SaveExploits0References51
OSV
OSV
•added 2022/02/01 2:15 a.m.•7 views

ALPINE-CVE-2021-46664

MariaDB through 10.5.9 allows an application crash in subselectpostjoinaggr for a NULL value of aggr...

5.5CVSS6.9AI score0.004EPSS
SaveExploits1References1
AlmaLinux
AlmaLinux
•added 2022/01/31 3:40 p.m.•75 views

Critical: samba security and bug fix update

Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fixes: samba: Out-of-bounds heap read/write vulnerability in VF...

9CVSS9.1AI score0.73589EPSS
SaveExploits1References1
Openbugbounty
Openbugbounty
•added 2022/01/03 6:23 p.m.•11 views

join-power.com Cross Site Scripting vulnerability OBB-2321779

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/01/01 12:00 a.m.•20 views

PT-2025-8237

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue has been identified in the Linux kernel, specifically in the rtw joinbss event prehandle function. This occurs when two threads attempt to access the same lock,...

5.5CVSS5.8AI score0.0017EPSS
SaveExploits0References19
OSV
OSV
•added 2021/12/23 12:00 a.m.•20 views

OSV-2021-1741 Stack-buffer-overflow in line_join_points

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42796 Crash type: Stack-buffer-overflow WRITE 4 Crash state: linejoinpoints strokeaddcompat gxstrokepathonly...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/12/23 12:00 a.m.•2 views

PT-2021-27974

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash. Technical details include a crash type of Stack-buffer-overflow WRITE 4, and the crash state involve...

5.8AI score
SaveExploits0References2
Rows per page
Query Builder