Lucene search
+L

1551 matches found

NVD
NVD
added 2024/03/07 9:15 p.m.24 views

CVE-2024-2044

pgAdmin = 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. If the server is running on Windows, an unauthenticated attacker can load and deserialize remote pickle objects and gain code execution. If the server is running on...

9.9CVSS9.8AI score0.79465EPSS
SaveExploits4References3
Prion
Prion
added 2024/03/07 9:15 p.m.26 views

Path traversal

pgAdmin = 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. If the server is running on Windows, an unauthenticated attacker can load and deserialize remote pickle objects and gain code execution. If the server is running on...

6.5CVSS9.7AI score0.79465EPSS
SaveExploits4References2
Vulnrichment
Vulnrichment
added 2024/03/07 8:48 p.m.29 views

CVE-2024-2044 Unsafe Deserialisation and Remote Code Execution by an Authenticated user in pgAdmin 4

pgAdmin = 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. If the server is running on Windows, an unauthenticated attacker can load and deserialize remote pickle objects and gain code execution. If the server is running on...

9.9CVSS7.5AI score0.79465EPSS
SaveExploits4References3
Cvelist
Cvelist
added 2024/03/07 8:48 p.m.70 views

CVE-2024-2044 Unsafe Deserialisation and Remote Code Execution by an Authenticated user in pgAdmin 4

pgAdmin = 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. If the server is running on Windows, an unauthenticated attacker can load and deserialize remote pickle objects and gain code execution. If the server is running on...

9.9CVSS9.9AI score0.79465EPSS
SaveExploits4References3
OSV
OSV
added 2024/03/07 8:48 p.m.6 views

CVE-2024-2044 Unsafe Deserialisation and Remote Code Execution by an Authenticated user in pgAdmin 4

pgAdmin = 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. If the server is running on Windows, an unauthenticated attacker can load and deserialize remote pickle objects and gain code execution. If the server is running on...

9.9CVSS6.1AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/03/05 12:00 a.m.13 views

PT-2024-20916 · Rt-Thread · Rt-Thread

Name of the Vulnerable Software and Affected Versions: RT-Thread versions through 5.0.2 Description: A stack buffer overflow occurs in the libc/posix/ipc/mqueue.c file. Recommendations: For RT-Thread versions through 5.0.2, at the moment, there is no information about a newer version that contain...

8.4CVSS7.5AI score0.00323EPSS
SaveExploits0References9
Prion
Prion
added 2024/02/15 6:15 a.m.16 views

Memory corruption

An issue was discovered in Wind River VxWorks 7 22.09 and 23.03. If a VxWorks task or POSIX thread that uses OpenSSL exits, limited per-task memory is not freed, resulting in a memory leak...

7.2AI score0.00487EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2024/01/25 11:15 a.m.57 views

Moderate: Red Hat Security Advisory: libcap security update

An update for libcap is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.8CVSS6.7AI score0.00579EPSS
SaveExploits1References2
Microsoft CVE
Microsoft CVE
added 2024/01/21 8:00 a.m.13 views

It was discovered that when exec'ing from a non-leader thread armed POSIX CPU timers would be left on a list but freed leading to a use-after-free.

...

7.8CVSS6.8AI score0.01284EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:00 a.m.39 views

EulerOS 2.0 SP10 : grpc (EulerOS-SA-2023-3214)

According to the versions of the grpc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms ex. Linux allows an attacker to cause...

7.5CVSS7.5AI score0.00666EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:00 a.m.39 views

EulerOS 2.0 SP11 : grpc (EulerOS-SA-2023-3271)

According to the versions of the grpc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms ex. Linux allows an attacker to cause...

7.5CVSS7.5AI score0.00666EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:00 a.m.62 views

EulerOS 2.0 SP10 : grpc (EulerOS-SA-2023-3179)

According to the versions of the grpc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms ex. Linux allows an attacker to cause...

7.5CVSS7.5AI score0.00666EPSS
SaveExploits0References2
Rockylinux
Rockylinux
added 2024/01/12 7:56 p.m.21 views

libcap bug fix update

An update is available for libcap. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Libcap is a library for getting and setting POSIX.1e formerly POSIX 6 draft 15...

7.3AI score
SaveExploits0
NVD
NVD
added 2024/01/08 6:15 p.m.27 views

CVE-2022-2585

It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free...

7.8CVSS6.2AI score0.01284EPSS
SaveExploits3References7
OSV
OSV
added 2024/01/08 6:15 p.m.29 views

AZL-33498 CVE-2022-2585 affecting package kernel for versions less than 5.15.153.1-1

It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free...

7.8CVSS6.4AI score0.01284EPSS
SaveExploits3References1
Prion
Prion
added 2024/01/08 6:15 p.m.27 views

Design/Logic Flaw

It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free...

4.3CVSS6.8AI score0.01284EPSS
SaveExploits3References7Affected Software2
Cvelist
Cvelist
added 2024/01/08 5:38 p.m.72 views

CVE-2022-2585

It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free...

5.3CVSS7.8AI score0.01284EPSS
SaveExploits3References7
Vulnrichment
Vulnrichment
added 2024/01/08 5:38 p.m.20 views

CVE-2022-2585

It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free...

5.3CVSS7.1AI score0.01284EPSS
SaveExploits3References7
OSV
OSV
added 2024/01/08 5:38 p.m.11 views

CVE-2022-2585

It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free...

5.3CVSS7.4AI score
SaveExploits0References10
Debian CVE
Debian CVE
added 2024/01/08 5:38 p.m.100 views

CVE-2022-2585

It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free...

7.8CVSS6.7AI score0.01284EPSS
SaveExploits3
Rows per page
Query Builder