Lucene search
+L

339 matches found

OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.28 views

SUSE: Security Advisory (SUSE-SU-2015:2172-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3CVSS7.2AI score0.00506EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2021/05/07 3:54 p.m.49 views

Server-Side Request Forgery in Spinnaker Orca

The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery SSRF, which allows an attacker to send requests on behalf of Spinnaker potentially leading to sensitive data disclosure...

7.5CVSS7.2AI score0.01349EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2021/05/07 3:54 p.m.43 views

GHSA-4FCW-PQ4R-F4Q7 Server-Side Request Forgery in Spinnaker Orca

The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery SSRF, which allows an attacker to send requests on behalf of Spinnaker potentially leading to sensitive data disclosure...

7.5CVSS7.4AI score0.01349EPSS
SaveExploits0References4
Fedora
Fedora
added 2021/03/20 12:21 a.m.62 views

[SECURITY] Fedora 34 Update: orca-40~rc-1.fc34

Orca is a screen reader that provides access to the graphical desktop via user-customizable combinations of speech and/or braille. Orca works with applications and toolkits that support the assistive technology service provider interface AT-SPI, e.g. the GNOME desktop...

5.5CVSS2.2AI score0.00639EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2021/03/20 12:0 a.m.25 views

Fedora: Security Advisory for orca (FEDORA-2021-303f6623fa)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.2AI score
SaveExploits0References2
OSV
OSV
added 2020/12/11 3:15 a.m.4 views

CVE-2020-9301

Nolan Ray from Apple Information Security identified a security vulnerability in Spinnaker, all versions prior to version 1.23.4, 1.22.4 or 1.21.5. The vulnerability exists within the handling of SpEL expressions that allows an attacker to read and write arbitrary files within the orca container...

8.8CVSS5.9AI score0.01504EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/11 3:15 a.m.29 views

CVE-2020-9301

Nolan Ray from Apple Information Security identified a security vulnerability in Spinnaker, all versions prior to version 1.23.4, 1.22.4 or 1.21.5. The vulnerability exists within the handling of SpEL expressions that allows an attacker to read and write arbitrary files within the orca container...

8.8CVSS8.1AI score0.01504EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/12/11 2:10 a.m.33 views

CVE-2020-9301

Nolan Ray from Apple Information Security identified a security vulnerability in Spinnaker, all versions prior to version 1.23.4, 1.22.4 or 1.21.5. The vulnerability exists within the handling of SpEL expressions that allows an attacker to read and write arbitrary files within the orca container...

8.1AI score0.01504EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2020/12/10 12:0 a.m.10 views

Netflix Spinnaker Code Issue Vulnerability

Netflix Spinnaker is a continuous delivery platform from the American company Netflix. The platform serves as a cloud platform deployment tool that supports Google, Microsoft, Pivotal, and other cloud platforms, providing out-of-the-box cluster management and deployment capabilities. Netflix...

8.8CVSS7.5AI score0.01504EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
added 2020/10/31 7:54 p.m.17 views

russianorca.org Cross Site Scripting vulnerability OBB-1471343

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
CNVD
CNVD
added 2019/12/30 12:0 a.m.7 views

Orca Input Validation Error Vulnerability

Orca is a command line application for generating static images for interactive drawing. An input validation error vulnerability exists in Orca. An attacker could exploit the vulnerability to execute code...

7.3CVSS7.2AI score0.00506EPSS
SaveExploits0References1
NVD
NVD
added 2019/12/11 2:15 p.m.34 views

CVE-2013-4245

Orca has arbitrary code execution due to insecure Python module load...

7.3CVSS7.5AI score0.00506EPSS
SaveExploits0References4
Prion
Prion
added 2019/12/11 2:15 p.m.18 views

Code injection

Orca has arbitrary code execution due to insecure Python module load...

4.4CVSS8AI score0.00506EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2019/12/11 2:15 p.m.23 views

CVE-2013-4245

Orca has arbitrary code execution due to insecure Python module load...

7.3CVSS7.6AI score0.00506EPSS
SaveExploits0References1
OSV
OSV
added 2019/12/11 2:15 p.m.5 views

UBUNTU-CVE-2013-4245

Orca has arbitrary code execution due to insecure Python module load...

7.3CVSS7.7AI score0.00506EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2019/12/11 1:30 p.m.48 views

CVE-2013-4245

Removed by vendor...

7.3CVSS7.4AI score0.00506EPSS
SaveExploits0
Cvelist
Cvelist
added 2019/12/11 1:30 p.m.34 views

CVE-2013-4245

Orca has arbitrary code execution due to insecure Python module load...

7.5AI score0.00506EPSS
SaveExploits0References4
CVE
CVE
added 2019/12/11 1:30 p.m.70 views

CVE-2013-4245

CVE-2013-4245 : The vulnerability affects the Orca application and is caused by insecure Python module load, resulting in arbitrary code execution. The NVD entry lists a local attack vector with medium complexity in CVSS v2, and high impact on confidentiality, integrity, and availability in CVSS ...

7.3CVSS7.5AI score0.00506EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2019/08/02 1:15 p.m.2 views

DEBIAN-CVE-2014-8184

A vulnerability was found in liblouis, versions 2.5.x before 2.5.4. A stack-based buffer overflow was found in findTable in liblouis. An attacker could create a malicious file that would cause applications that use liblouis such as Orca to crash, or potentially execute arbitrary code when opened...

7.8CVSS8.7AI score0.01549EPSS
SaveExploits0References1
Prion
Prion
added 2019/08/02 1:15 p.m.14 views

Stack overflow

A vulnerability was found in liblouis, versions 2.5.x before 2.5.4. A stack-based buffer overflow was found in findTable in liblouis. An attacker could create a malicious file that would cause applications that use liblouis such as Orca to crash, or potentially execute arbitrary code when opened...

6.8CVSS8.1AI score0.01549EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder