Lucene search
+L

868 matches found

NVD
NVD
added 2022/08/29 3:15 p.m.17 views

CVE-2022-1117

A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression may not correctly detect the runtime linker. The consequence is that the pattern detection for applications launched by the run time linker...

8.4CVSS0.00325EPSS
SaveExploits0References4
OSV
OSV
added 2022/08/29 3:15 p.m.12 views

AZL-10863 CVE-2022-1117 affecting package fapolicyd for versions less than 1.3.2-1

A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression may not correctly detect the runtime linker. The consequence is that the pattern detection for applications launched by the run time linker...

8.4CVSS5.7AI score0.00325EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/29 3:15 p.m.8 views

CVE-2022-1117

A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression may not correctly detect the runtime linker. The consequence is that the pattern detection for applications launched by the run time linker...

8.4CVSS7.5AI score0.00325EPSS
SaveExploits0References7
Prion
Prion
added 2022/08/29 3:15 p.m.19 views

Design/Logic Flaw

A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression may not correctly detect the runtime linker. The consequence is that the pattern detection for applications launched by the run time linker...

4.6CVSS8.1AI score0.00325EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2022/08/29 2:03 p.m.29 views

CVE-2022-1117

A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression may not correctly detect the runtime linker. The consequence is that the pattern detection for applications launched by the run time linker...

8.5AI score0.00325EPSS
SaveExploits0References4
OSV
OSV
added 2022/08/29 2:03 p.m.30 views

CVE-2022-1117

A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression may not correctly detect the runtime linker. The consequence is that the pattern detection for applications launched by the run time linker...

6.7AI score
SaveExploits0References6
CVE
CVE
added 2022/08/29 2:03 p.m.201 views

CVE-2022-1117

CVE-2022-1117 affects fapolicyd. The root cause is an assumption in how glibc names the runtime linker, where a build-time regular expression may fail to detect the runtime linker, causing the pattern check for applications launched by ld.so to miss detections and potentially allow execution. Aff...

8.4CVSS8.1AI score0.00325EPSS
SaveExploits0References4Affected Software1
Gentoo Linux
Gentoo Linux
added 2022/08/14 12:00 a.m.119 views

GNU C Library: Multiple Vulnerabilities

Background The GNU C library is the standard C library used by Gentoo Linux systems. It provides programs with basic facilities and interfaces to system calls. ld.so is the dynamic linker which prepares dynamically linked programs for execution by resolving runtime dependencies and related...

9.8CVSS2.9AI score0.04729EPSS
SaveExploits4
OSV
OSV
added 2022/07/12 2:15 p.m.9 views

CVE-2022-30754

Implicit Intent hijacking vulnerability in AppLinker prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of AppLinker...

7.8CVSS5.8AI score0.00134EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/06/22 12:00 a.m.48 views

WordPress Cross-Linker plugin cross-site request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. versions of the WordPress Cross-Linker plugin prior to 3.0.1.9 are vulnerable to cross-site reque...

6.5CVSS2.2AI score0.00524EPSS
SaveExploits1References1
OSV
OSV
added 2022/06/20 11:15 a.m.11 views

CVE-2022-1826

The Cross-Linker WordPress plugin through 3.0.1.9 does not have CSRF check in place when creating Cross-Links, which could allow attackers to make a logged in admin perform such action via a CSRF attack...

6.5CVSS5.8AI score0.00524EPSS
SaveExploits1References1
NVD
NVD
added 2022/06/20 11:15 a.m.18 views

CVE-2022-1826

The Cross-Linker WordPress plugin through 3.0.1.9 does not have CSRF check in place when creating Cross-Links, which could allow attackers to make a logged in admin perform such action via a CSRF attack...

6.5CVSS0.00524EPSS
SaveExploits1References1
Prion
Prion
added 2022/06/20 11:15 a.m.27 views

Cross site request forgery (csrf)

The Cross-Linker WordPress plugin through 3.0.1.9 does not have CSRF check in place when creating Cross-Links, which could allow attackers to make a logged in admin perform such action via a CSRF attack...

4.3CVSS6.4AI score0.00524EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/06/20 10:26 a.m.78 views

CVE-2022-1826

The CVE-2022-1826 entry concerns the WordPress Cross-Linker plugin (versions up to 3.0.1.9). The vulnerability is a missing CSRF check when creating Cross-Links, which could allow an attacker to induce a logged-in administrator to perform arbitrary link creation via a CSRF attack. Root cause: abs...

6.5CVSS6.3AI score0.00524EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/06/20 10:26 a.m.30 views

CVE-2022-1826 Cross-Linker <= 3.0.1.9 - Arbitrary Cross-Link Creation via CSRF

The Cross-Linker WordPress plugin through 3.0.1.9 does not have CSRF check in place when creating Cross-Links, which could allow attackers to make a logged in admin perform such action via a CSRF attack...

6.6AI score0.00524EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/06/20 12:00 a.m.8 views

WordPress plugin Cross-Linker 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. versions of the WordPress Cross-Linker plugin prior to 3.0.1.9 are vulnerable to cross-site reque...

6.5CVSS5.6AI score0.00524EPSS
SaveExploits1References2
Veracode
Veracode
added 2022/06/03 2:40 p.m.28 views

Remote Code Execution

fapolicyd is vulnerable to remote code execution. The build script misdetects the run time linker due to the improper naming conventions which causes the ldso pattern matcher to not work correctly, resulting in remote code execution vulnerability...

8.4CVSS8.8AI score0.00325EPSS
SaveExploits0References8Affected Software1
RedHat Linux
RedHat Linux
added 2022/05/31 12:20 p.m.12 views

fapolicyd: fapolicyd wrongly prepares ld.so path

A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression may not correctly detect the runtime linker. The consequence is that the pattern detection for applications launched by the run time linker...

8.4CVSS5.7AI score0.00325EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2022/05/10 2:02 p.m.10 views

fapolicyd: fapolicyd wrongly prepares ld.so path

A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression may not correctly detect the runtime linker. The consequence is that the pattern detection for applications launched by the run time linker...

8.4CVSS5.7AI score0.00325EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2022/05/03 2:05 p.m.43 views

CVE-2022-1117

A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression may not correctly detect the runtime linker. The consequence is that the pattern detection for applications launched by the run time linker...

8.4CVSS5.2AI score0.00325EPSS
SaveExploits0References3
Rows per page
Query Builder