Lucene search
+L

870 matches found

Fedora
Fedora
added 2022/11/10 10:36 p.m.32 views

[SECURITY] Fedora 37 Update: python-joblib-1.2.0-1.fc37

Joblib is a set of tools to provide lightweight pipelining in Python. In particular, joblib offers: transparent disk-caching of the output values and lazy re-evaluation memorize pattern easy simple parallel computing logging and tracing of the execution...

9.8CVSS2.6AI score0.02094EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2022/10/31 12:0 a.m.51 views

GLSA-202210-24 : FreeRDP: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-24 FreeRDP: Multiple Vulnerabilities - FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gateway connections /gt:rpc fai...

9.8CVSS6.6AI score0.02752EPSS
SaveExploits1References10
OSV
OSV
added 2022/10/26 11:4 a.m.4 views

OESA-2022-2018 freerdp security update

FreeRDP is a client implementation of the Remote Desktop Protocol RDP that follows Microsoft's open specifications. This package provides the client applications xfreerdp and wlfreerdp. Security Fixes: FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when...

7.5CVSS7.1AI score0.01069EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/10/20 12:0 a.m.10 views

The vulnerability of the RDP client FreeRDP, related to the use of an uninitialized resource, allows a hacker to gain access to read, modify, or delete data.

The vulnerability of the RDP client FreeRDP relates to the use of an uninitialized resource during the processing of the /parallel command-line parameter. Exploiting this vulnerability can allow a remote attacker to gain read, modify, or delete access to data...

5CVSS6.5AI score0.00884EPSS
SaveExploits0References12Affected Software5
Veracode
Veracode
added 2022/10/19 7:55 a.m.32 views

Sensitive Information Disclosure

libfreerdp.so is vulnerable to Sensitive Information Disclosure. The vulnerability is due to uninitialized data being sent to the server the client is currently connected to when using /parallel command line switch, which in specific conditions may result in sensitive information disclosure...

7.5CVSS7.3AI score0.00884EPSS
SaveExploits0References12Affected Software1
OSV
OSV
added 2022/10/14 11:4 a.m.8 views

OESA-2022-1990 python-joblib security update

Joblib is a set of tools to provide lightweight pipelining in Python. Security Fixes: The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement.CVE-2022-21797...

9.8CVSS7.3AI score0.02094EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2022/10/14 6:29 a.m.42 views

CVE-2022-39282

A vulnerability was found in FreeRDP where clients on UNIX systems using /parallel command line switch might read uninitialized data and send it to the client's server. The vulnerability allows a remote attacker to gain access to sensitive information. Mitigation Workaround: Do not use parallel...

7.5CVSS7.6AI score0.00884EPSS
SaveExploits0References4
OSV
OSV
added 2022/10/12 11:15 p.m.4 views

DEBIAN-CVE-2022-39282

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

7.5CVSS6.2AI score0.00884EPSS
SaveExploits0References1
Prion
Prion
added 2022/10/12 11:15 p.m.28 views

Double free

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

5CVSS7.4AI score0.00884EPSS
SaveExploits0References7Affected Software2
OSV
OSV
added 2022/10/12 11:15 p.m.6 views

UBUNTU-CVE-2022-39282

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

7.5CVSS6.7AI score0.00884EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2022/10/12 12:0 a.m.33 views

CVE-2022-39282 RDP client: Read of uninitialized memory with parallel port redirection

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

3.5CVSS7.7AI score0.00884EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2022/10/12 12:0 a.m.30 views

PT-2022-5111 · Freerdp +9 · Freerdp +9

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.8.1 Description: The issue is related to the use of uninitialized data when processing the /parallel command line switch in FreeRDP based clients on Unix systems. This could allow a remote attacker to read, modify,...

9.8CVSS6.4AI score0.0372EPSS
SaveExploits16References192
CNNVD
CNNVD
added 2022/10/12 12:0 a.m.8 views

FreeRDP 安全漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A security vulnerability exists in FreeRDP versions prior to 2.8.1, which stems from the fact that a FreeRDP-based client on a unix system using the /parallel command line switch may read...

7.5CVSS6.4AI score0.00884EPSS
SaveExploits0References13
Vulnrichment
Vulnrichment
added 2022/10/12 12:0 a.m.7 views

CVE-2022-39282 RDP client: Read of uninitialized memory with parallel port redirection

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

3.5CVSS6.7AI score0.00884EPSS
SaveExploits0References7
OSV
OSV
added 2022/10/12 12:0 a.m.30 views

CVE-2022-39282 RDP client: Read of uninitialized memory with parallel port redirection

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

3.5CVSS6.2AI score
SaveExploits0References10
Fedora
Fedora
added 2022/10/08 5:34 p.m.29 views

[SECURITY] Fedora 36 Update: python-joblib-1.2.0-1.fc36

Joblib is a set of tools to provide lightweight pipelining in Python. In particular, joblib offers: transparent disk-caching of the output values and lazy re-evaluation memorize pattern easy simple parallel computing logging and tracing of the execution...

9.8CVSS2.6AI score0.02094EPSS
SaveExploits1
Openbugbounty
Openbugbounty
added 2022/09/28 12:39 p.m.19 views

parallel-schallplatten.de Cross Site Scripting vulnerability OBB-2961776

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
OSV
OSV
added 2022/09/26 5:15 a.m.3 views

DEBIAN-CVE-2022-21797

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

9.8CVSS7.3AI score0.02094EPSS
SaveExploits1References1
NVD
NVD
added 2022/09/26 5:15 a.m.30 views

CVE-2022-21797

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

9.8CVSS0.02094EPSS
SaveExploits1References9
OSV
OSV
added 2022/09/26 5:15 a.m.7 views

UBUNTU-CVE-2022-21797

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

9.8CVSS6.7AI score0.02094EPSS
SaveExploits1References6
Rows per page
Query Builder