Lucene search
+L

6143 matches found

OSV
OSV
•added 2023/03/23 3:15 p.m.•14 views

UBUNTU-CVE-2023-28772

An issue was discovered in the Linux kernel before 5.13.3. lib/seqbuf.c has a seqbufputmemhex buffer overflow...

6.7CVSS7.1AI score0.00709EPSS
SaveExploits0References7
Mend
Mend
•added 2023/03/23 12:00 a.m.•5 views

CVE-2023-28772

An issue was discovered in the Linux kernel before 5.13.3. lib/seqbuf.c has a seqbufputmemhex buffer overflow...

8.4CVSS0.00709EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2023/03/23 12:00 a.m.•46 views

CVE-2023-28772

An issue was discovered in the Linux kernel before 5.13.3. lib/seqbuf.c has a seqbufputmemhex buffer overflow...

6.9AI score0.00709EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/03/23 12:00 a.m.•13 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a buffer overflow vulnerability that originates from a boundary error in lib/seqbuf.c when handling untrusted input. A remote attacker could exploit...

6.7CVSS7.2AI score0.00709EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/23 12:00 a.m.•3 views

CVE-2023-28772: Buffer Copy without Checking Size of Input

An issue was discovered in the Linux kernel before 5.13.3. lib/seqbuf.c has a seqbufputmemhex buffer overflow...

6.7CVSS6.1AI score0.00709EPSS
SaveExploits0References3
Mend
Mend
•added 2023/03/20 4:31 a.m.•2 views

CVE-2015-10096

A vulnerability, which was classified as critical, was found in Zarthus IRC Twitter Announcer Bot up to 1.1.0. This affects the function gettweets of the file lib/twitterbot/plugins/twitterannouncer.rb. The manipulation of the argument tweet leads to command injection. It is possible to initiate...

8.1CVSS0.01778EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/20 12:00 a.m.•3 views

CVE-2015-10096: Improper Neutralization of Special Elements used in a Command

A vulnerability, which was classified as critical, was found in Zarthus IRC Twitter Announcer Bot up to 1.1.0. This affects the function gettweets of the file lib/twitterbot/plugins/twitterannouncer.rb. The manipulation of the argument tweet leads to command injection. It is possible to initiate...

8.1CVSS5AI score0.01778EPSS
SaveExploits0References2
Snyk
Snyk
•added 2023/03/14 8:19 a.m.•5 views

Malicious Package

Overview hoots-lib is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/03/14 8:19 a.m.•6 views

Malicious Package

Overview cp-react-ui-lib is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

9.8CVSS7.1AI score
SaveExploits0References3
Fedora
Fedora
•added 2023/03/14 12:24 a.m.•43 views

[SECURITY] Fedora 38 Update: xine-lib-1.2.13-1.fc38

This package contains the Xine library. It can be used to play back various media, decode multimedia files from local disk drives, and display multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some uncommon formats, too...

8.8CVSS6.7AI score0.01118EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2023/03/14 12:00 a.m.•28 views

Fedora: Security Advisory for xine-lib (FEDORA-2023-a5e10b188a)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS6.8AI score0.01118EPSS
SaveExploits0References2
NVD
NVD
•added 2023/03/10 9:15 p.m.•59 views

CVE-2022-33242

Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD...

7.8CVSS7.9AI score0.00141EPSS
SaveExploits0References1
Prion
Prion
•added 2023/03/10 9:15 p.m.•37 views

Authentication flaw

Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD...

4.3CVSS7.9AI score0.00141EPSS
SaveExploits0References1
Hacker One
Hacker One
•added 2023/03/08 6:10 p.m.•271 views

curl: CVE-2023-27537: HSTS double-free

A double-free vulnerability CVE-2023-27537 existed in libcurl's HSTS HTTP Strict Transport Security implementation due to a lack of exclusion control when processing HSTS with multi-threading. This could lead to a use-after-free UAF issue when other threads access entries. An attacker could explo...

5.9CVSS7.3AI score0.01856EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2023/03/08 12:00 a.m.•35 views

Debian: Security Advisory (DLA-1222-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.2AI score0.73829EPSS
SaveExploits6References3
Tenable Nessus
Tenable Nessus
•added 2023/03/08 12:00 a.m.•19 views

EulerOS 2.0 SP9 : emacs (EulerOS-SA-2023-1465)

According to the versions of the emacs package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c us...

7.8CVSS7.5AI score0.0066EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2023/03/08 12:00 a.m.•43 views

Debian: Security Advisory (DLA-303-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.3AI score0.9986EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/07 12:00 a.m.•4 views

CVE-2022-33242: Improper Authentication

Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD...

7.8CVSS6AI score0.00141EPSS
SaveExploits0References3
Mend
Mend
•added 2023/03/06 2:31 p.m.•5 views

CVE-2015-10094

A vulnerability was found in Fastly Plugin up to 0.97 on WordPress. It has been rated as problematic. Affected by this issue is the function post of the file lib/api.php. The manipulation of the argument url leads to cross site scripting. The attack may be launched remotely. Upgrading to version...

6.1CVSS0.00545EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/03/06 12:00 a.m.•20 views

PT-2023-10273 · Fastly · Fastly Plugin

Name of the Vulnerable Software and Affected Versions: Fastly Plugin versions up to 0.97 Description: A vulnerability was found in the Fastly Plugin, which has been rated as problematic. The issue affects the function post of the file lib/api.php. The manipulation of the url argument leads to...

6.1CVSS4.1AI score0.00545EPSS
SaveExploits0References8
Rows per page
Query Builder