Lucene search
+L

5507 matches found

Openbugbounty
Openbugbounty
added 2022/02/11 5:01 p.m.18 views

futurama.thrill.to Cross Site Scripting vulnerability OBB-2369023

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| futurama.thrill.to ---|--- Open Bug...

6.3AI score
SaveExploits0
CNVD
CNVD
added 2022/02/11 12:00 a.m.91 views

Gitea Cross-Site Scripting Vulnerability (CNVD-2022-11525)

A cross-site scripting vulnerability exists in Gitea, a Go-based lightweight git service developed by the Gitea community. The vulnerability stems from a mirror setting in the product wiki/issue link that does not effectively handle special characters in the input data. An attacker could execute...

6.1CVSS3AI score0.00777EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/02/11 12:00 a.m.14 views

PT-2022-6487 · Git +2 · Git +2

Name of the Vulnerable Software and Affected Versions: Git versions through 2.35.1 Description: The issue is related to the disclosure of information in the error data area of the distributed version control system Git. This could present a security risk if information-disclosure auditing process...

9CVSS7.7AI score0.29234EPSS
SaveExploits33References45
CNNVD
CNNVD
added 2022/02/11 12:00 a.m.25 views

Git 安全漏洞

Git is a free, open source distributed version control system. Git has a security vulnerability that stems from the fact that the --mirror documentation for Git up to 2.35.1 makes no mention of the availability of deleted content, a.k.a. the "GitBleed" problem. This could pose a security risk if...

7.5CVSS7.8AI score0.02645EPSS
SaveExploits1References4
CVE
CVE
added 2022/02/11 12:00 a.m.205 views

CVE-2022-24975

Technical details about CVE-2022-24975 are not publicly provided in the supplied documents. No vendor/product/version specifics or fixes are described here. Monitor for updates from official advisories.

7.5CVSS7.5AI score0.02645EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2022/02/08 12:00 a.m.24 views

Gitea 跨站脚本漏洞

A cross-site scripting vulnerability exists in Gitea, a Go-based lightweight git service developed by the Gitea community. The vulnerability stems from a mirror setting in the product wiki/issue link that does not effectively handle special characters in the input data. An attacker could execute...

6.1CVSS5.3AI score0.00777EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
added 2022/02/06 4:03 p.m.17 views

mfis.nsw.edu.au Cross Site Scripting vulnerability OBB-2359228

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| mfis.nsw.edu.au ---|--- Open Bug Bounty...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2022/02/02 4:14 p.m.19 views

All Vulnerabilities for bartowcountyga.gov Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| bartowcountyga.gov ---|--- Open Bug...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2022/02/01 9:22 a.m.20 views

opportunities.hackney.gov.uk Cross Site Scripting vulnerability OBB-2353820

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| opportunities.hackney.gov.uk ---|--- Op...

6.2AI score
SaveExploits0
OSV
OSV
added 2022/01/25 8:15 p.m.31 views

CVE-2021-4145

A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The self pointer is dereferenced in mirrorwaitonconflicts without ensuring that it's not NULL. A malicious unprivileged user within the guest could use this flaw to crash the QEMU process on t...

6.5CVSS6.7AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2022/01/25 8:15 p.m.10 views

CVE-2021-4145

A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The self pointer is dereferenced in mirrorwaitonconflicts without ensuring that it's not NULL. A malicious unprivileged user within the guest could use this flaw to crash the QEMU process on t...

6.5CVSS6.6AI score0.0039EPSS
SaveExploits0References5
OSV
OSV
added 2022/01/25 8:15 p.m.3 views

DEBIAN-CVE-2021-4145

A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The self pointer is dereferenced in mirrorwaitonconflicts without ensuring that it's not NULL. A malicious unprivileged user within the guest could use this flaw to crash the QEMU process on t...

6.5CVSS6.5AI score0.0039EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/25 8:15 p.m.10 views

AZL-8347 CVE-2021-4145 affecting package qemu for versions less than 6.2.0-2

A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The self pointer is dereferenced in mirrorwaitonconflicts without ensuring that it's not NULL. A malicious unprivileged user within the guest could use this flaw to crash the QEMU process on t...

6.5CVSS6.7AI score0.0039EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2022/01/25 8:15 p.m.40 views

CVE-2021-4145

A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The self pointer is dereferenced in mirrorwaitonconflicts without ensuring that it's not NULL. A malicious unprivileged user within the guest could use this flaw to crash the QEMU process on t...

6.5CVSS2.1AI score0.0039EPSS
SaveExploits0
Prion
Prion
added 2022/01/25 8:15 p.m.22 views

Null pointer dereference

A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The self pointer is dereferenced in mirrorwaitonconflicts without ensuring that it's not NULL. A malicious unprivileged user within the guest could use this flaw to crash the QEMU process on t...

4.9CVSS6.1AI score0.0039EPSS
SaveExploits0References4Affected Software2
Debian CVE
Debian CVE
added 2022/01/25 7:11 p.m.36 views

CVE-2021-4145

A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The self pointer is dereferenced in mirrorwaitonconflicts without ensuring that it's not NULL. A malicious unprivileged user within the guest could use this flaw to crash the QEMU process on t...

6.5CVSS6.2AI score0.0039EPSS
SaveExploits0
Cvelist
Cvelist
added 2022/01/25 7:11 p.m.42 views

CVE-2021-4145

A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The self pointer is dereferenced in mirrorwaitonconflicts without ensuring that it's not NULL. A malicious unprivileged user within the guest could use this flaw to crash the QEMU process on t...

6.8AI score0.0039EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/01/25 12:00 a.m.17 views

PT-2022-11409 · Qemu +5 · Qemu +5

Name of the Vulnerable Software and Affected Versions: QEMU versions prior to 6.2.0 Description: A NULL pointer dereference issue was found in the block mirror layer of QEMU. The self pointer is dereferenced in mirror wait on conflicts without ensuring that it's not NULL. A malicious unprivileged...

8.2CVSS6.2AI score0.04794EPSS
SaveExploits8References276
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:00 a.m.12 views

The vulnerability of the NTFS file system driver for the FUSE NTFS-3G module, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the NTFS file system driver for the FUSE NTFS-3G module is related to errors during the correction of differences between the MFT and MFTMirror. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause servic...

7.8CVSS6.6AI score0.00488EPSS
SaveExploits0References11Affected Software5
ATTACKERKB
ATTACKERKB
added 2022/01/13 9:15 p.m.8 views

CVE-2022-21682

Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. flatpak-builder applies finish-args last in the build. At this point the build directory will have the full access that is specified in the...

7.7CVSS6.8AI score0.01679EPSS
SaveExploits0References10Affected Software1
Rows per page
Query Builder