Lucene search
+L

759 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:45 p.m.7 views

Malicious code in access-lint (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:21 p.m.8 views

Malicious code in @mosfe/beam-lint-config (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2024/06/25 12:21 p.m.10 views

MAL-2024-1818 Malicious code in @mosfe/beam-lint-config (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:19 p.m.6 views

Malicious code in @fdfe/eslint-rule-svg-rrggbbaa-check (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/03/24 2:46 p.m.8 views

Malicious code in odyssey-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b408f794010d1926bb9841d26fd28c91c97d8f11d71acea664c92ccb5a06a54 The OpenSSF Package Analysis project identified 'odyssey-lint-staged' @ 9.9.5 npm as malicious. It is considered malicious because: - The packag...

7.1AI score
SaveExploits0
OSV
OSV
added 2024/03/24 2:46 p.m.14 views

MAL-2024-1145 Malicious code in odyssey-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b408f794010d1926bb9841d26fd28c91c97d8f11d71acea664c92ccb5a06a54 The OpenSSF Package Analysis project identified 'odyssey-lint-staged' @ 9.9.5 npm as malicious. It is considered malicious because: - The packag...

7.3AI score
SaveExploits0
OSV
OSV
added 2024/03/06 11:17 a.m.24 views

BIT-GITLAB-2021-39935

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Unauthorized external users could perform Server Side Requests via the CI Lint API...

7.5CVSS7.3AI score0.35649EPSS
SaveExploits0References5
Chainguard
Chainguard
added 2024/03/05 11:15 p.m.93 views

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane, kine, kube-state-metrics-fips, mc, aactl, grype, pgpool2exporter-fips, helm, kubernetes-csi-livenessprobe-fips, fulcio-fips, prometheus-alertmanager, terraform-provider-sendgrid, prometheus-redis-exporter, gotenberg, dynamic-localpv-provisioner, caddy,...

7.5CVSS6.7AI score0.01262EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2023/03/28 12:18 a.m.10 views

rubygem-rack: crafted requests can cause shell escape sequences

A flaw was found in ruby gem-rack. This flaw allows a malicious actor to craft requests that can cause shell escape sequences to be written to the terminal via rack's Lint middleware and CommonLogger middleware. This issue can leverage these escape sequences to execute commands in the victim's...

10CVSS6.8AI score0.01884EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2022/12/05 10:15 p.m.8 views

CVE-2022-30123

A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...

10CVSS6.7AI score0.01884EPSS
SaveExploits0References5
OSV
OSV
added 2022/12/05 10:15 p.m.4 views

DEBIAN-CVE-2022-30123

A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...

10CVSS6.7AI score0.01884EPSS
SaveExploits0References1
OSV
OSV
added 2022/12/05 10:15 p.m.10 views

UBUNTU-CVE-2022-30123

A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...

10CVSS6.7AI score0.01884EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2022/12/05 10:15 p.m.46 views

CVE-2022-30123

A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...

10CVSS6.7AI score0.01884EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2022/12/05 12:00 a.m.44 views

CVE-2022-30123

A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...

9.7AI score0.01884EPSS
SaveExploits0References4
OSV
OSV
added 2022/12/05 12:00 a.m.48 views

CVE-2022-30123

A sequence injection vulnerability exists in Rack 2.0.9.1, 2.1.4.1 and 2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack...

9.5AI score
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2022/11/02 4:34 p.m.16 views

rubygem-rack: crafted requests can cause shell escape sequences

A flaw was found in ruby gem-rack. This flaw allows a malicious actor to craft requests that can cause shell escape sequences to be written to the terminal via rack's Lint middleware and CommonLogger middleware. This issue can leverage these escape sequences to execute commands in the victim's...

10CVSS6.8AI score0.01884EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2022/08/01 12:00 a.m.6 views

Fedora: Security Advisory for golang-x-lint (FEDORA-2022-5038c3236c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
added 2022/07/31 1:37 a.m.14 views

[SECURITY] Fedora 36 Update: golang-x-lint-0-17.20210123git83fdc39.fc36

Golint is a linter for Go source code...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2022/07/18 12:00 a.m.23 views

Fedora: Security Advisory for golang-github-golangci-lint-1 (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
BDU FSTEC
BDU FSTEC
added 2022/07/08 12:00 a.m.24 views

The vulnerability of the modular interface between web servers and web applications in Rack, related to improper neutralization of special elements used in operating system commands, allows attackers to execute arbitrary shell commands on the target system.

The vulnerability of the modular interface between web servers and Rack web applications is related to improper input validation during data processing, as transmitted through the intermediate software Rack Lint and CommonLogger. Exploiting this vulnerability allows a remote attacker to send...

10CVSS7.1AI score0.01884EPSS
SaveExploits0References11Affected Software10
Rows per page
Query Builder