Lucene search
+L

1075 matches found

Cvelist
Cvelist
•added 2022/10/12 12:00 a.m.•47 views

CVE-2022-39282 RDP client: Read of uninitialized memory with parallel port redirection

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

3.5CVSS7.7AI score0.01095EPSS
SaveExploits0References7
Mend
Mend
•added 2022/10/12 12:00 a.m.•3 views

CVE-2022-39282

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using "/parallel" command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

7.5CVSS0.01095EPSS
SaveExploits0References15
CNNVD
CNNVD
•added 2022/10/12 12:00 a.m.•13 views

FreeRDP 安全漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A security vulnerability exists in FreeRDP versions prior to 2.8.1, which stems from the fact that a FreeRDP-based client on a unix system using the /parallel command line switch may read...

7.5CVSS6.4AI score0.01095EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/12 12:00 a.m.•3 views

CVE-2022-39282: Use of Uninitialized Resource

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

7.5CVSS6.5AI score0.01095EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/10/12 12:00 a.m.•14 views

CVE-2022-39282 RDP client: Read of uninitialized memory with parallel port redirection

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

3.5CVSS6.7AI score0.01095EPSS
SaveExploits0References7
Fedora
Fedora
•added 2022/10/08 5:34 p.m.•36 views

[SECURITY] Fedora 36 Update: python-joblib-1.2.0-1.fc36

Joblib is a set of tools to provide lightweight pipelining in Python. In particular, joblib offers: transparent disk-caching of the output values and lazy re-evaluation memorize pattern easy simple parallel computing logging and tracing of the execution...

9.8CVSS2.6AI score0.02627EPSS
SaveExploits1
Openbugbounty
Openbugbounty
•added 2022/09/28 12:39 p.m.•22 views

parallel-schallplatten.de Cross Site Scripting vulnerability OBB-2961776

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
osv_debian
osv_debian
•added 2022/09/26 5:15 a.m.•9 views

DEBIAN-CVE-2022-21797

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

9.8CVSS7.3AI score0.02627EPSS
SaveExploits1References1
NVD
NVD
•added 2022/09/26 5:15 a.m.•35 views

CVE-2022-21797

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

9.8CVSS0.02627EPSS
SaveExploits1References9
osv_ubuntu
osv_ubuntu
•added 2022/09/26 5:15 a.m.•18 views

UBUNTU-CVE-2022-21797

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

9.8CVSS6.7AI score0.02627EPSS
SaveExploits1References6
PyPA
PyPA
•added 2022/09/26 5:15 a.m.•14 views

PYSEC-2022-288

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

9.8CVSS5.5AI score0.02627EPSS
SaveExploits1References5Affected Software1
osv_pysec
osv_pysec
•added 2022/09/26 5:15 a.m.•71 views

PYSEC-2022-288

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

9.8CVSS4.7AI score0.02627EPSS
SaveExploits1References5
CVE
CVE
•added 2022/09/26 5:05 a.m.•245 views

CVE-2022-21797

CVE-2022-21797 affects joblib: versions 0 up to 1.1.x are vulnerable to arbitrary code execution via the pre_dispatch flag in Parallel(), caused by an eval() statement. Severity is high/critical per sources; impact is arbitrary code execution. Remediation: upgrade to joblib 1.2.0 or later (e.g., ...

9.8CVSS8.4AI score0.02627EPSS
SaveExploits1References9Affected Software1
Mend
Mend
•added 2022/09/26 5:05 a.m.•3 views

CVE-2022-21797

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

9.8CVSS0.02627EPSS
SaveExploits1References19
Vulnrichment
Vulnrichment
•added 2022/09/26 5:05 a.m.•20 views

CVE-2022-21797 Arbitrary Code Execution

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

7.3CVSS7.1AI score0.02627EPSS
SaveExploits1References9
Debian CVE
Debian CVE
•added 2022/09/26 5:05 a.m.•55 views

CVE-2022-21797

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

9.8CVSS7.2AI score0.02627EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2022/09/26 5:05 a.m.•183 views

CVE-2022-21797

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

9.8CVSS8.5AI score0.02627EPSS
SaveExploits1
attackerkb
attackerkb
•added 2022/09/26 5:00 a.m.•12 views

CVE-2022-21797

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

9.8CVSS6.8AI score0.02627EPSS
SaveExploits1References12
CNNVD
CNNVD
•added 2022/09/26 12:00 a.m.•91 views

joblib 安全漏洞

joblib is joblib open source set of tools to provide lightweight pipelining in Python. Joblib package versions prior to 1.2.0 has a security vulnerability , the vulnerability stems from its Parallel class in the predispatch flag allows an attacker to achieve arbitrary code execution through eval...

9.8CVSS7.8AI score0.02627EPSS
SaveExploits1References13
UbuntuCve
UbuntuCve
•added 2022/09/26 12:00 a.m.•65 views

CVE-2022-21797

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

9.8CVSS6.8AI score0.02627EPSS
SaveExploits1References5
Rows per page
Query Builder