Lucene search
+L

32 matches found

NVD
NVD
•added 2026/09/18 9:17 p.m.•16 views

CVE-2026-61670

microsandbox is an easy, fast, local-first microVM runtime and library. Prior to 0.5.10, sdk/rust/lib/runtime/spawn.rs serializes NetworkConfig secret values into the --network-config argument and passes per-sandbox secrets through repeated --env arguments accepted by crates/cli/lib/sandboxcmd.rs...

6.5CVSS0.00115EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•3 views

CVE-2026-61670: Invocation of Process Using Visible Sensitive Information

microsandbox is an easy, fast, local-first microVM runtime and library. Prior to 0.5.10, sdk/rust/lib/runtime/spawn.rs serializes NetworkConfig secret values into the --network-config argument and passes per-sandbox secrets through repeated --env arguments accepted by crates/cli/lib/sandboxcmd.rs...

6.5CVSS6.2AI score0.00115EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/07 9:42 a.m.•18 views

CVE-1999-0377

Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections to network services...

5CVSS7AI score0.01874EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/03 5:21 p.m.•14 views

CLSA-2024-1733246466 Fix CVE(s): CVE-2024-48991

SECURITY UPDATE: Race condition allows local attackers to execute arbitrary code as root - debian/patches/CVE-2024-48991.patch: Prevent race condition on /proc/$PID/exec evaluation by synchronizing $exe with the initial value from Proc:ProcessTable - CVE-2024-48991...

7.8CVSS7.5AI score0.06018EPSS
SaveExploits2References1
Github Security Blog
Github Security Blog
•added 2023/01/26 11:51 p.m.•46 views

xaviershay-dm-rails Gem for Ruby exposes sensitive information via the process table

xaviershay-dm-rails Gem for Ruby contains a flaw in the execute function in /datamapper/dm-rails/blob/master/lib/dm-rails/storage.rb. The issue is due to the function exposing sensitive information via the process table. This may allow a local attack to gain access to MySQL credential information...

5.5CVSS3.6AI score0.00369EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2023/01/26 11:51 p.m.•59 views

GHSA-88P8-4VV5-82J7 xaviershay-dm-rails Gem for Ruby exposes sensitive information via the process table

xaviershay-dm-rails Gem for Ruby contains a flaw in the execute function in /datamapper/dm-rails/blob/master/lib/dm-rails/storage.rb. The issue is due to the function exposing sensitive information via the process table. This may allow a local attack to gain access to MySQL credential information...

5.5CVSS5.2AI score0.00369EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2022/05/14 3:44 a.m.•25 views

Echor Ruby Gem credentials can be stolen via process table monitoring

The performrequest function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to steal the login credentials by watching the process table...

7.8CVSS6.6AI score0.00344EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2022/05/14 3:44 a.m.•39 views

GHSA-J4GX-P3X5-M987 Echor Ruby Gem credentials can be stolen via process table monitoring

The performrequest function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to steal the login credentials by watching the process table...

7.8CVSS7.4AI score0.00344EPSS
SaveExploits0References3
Prion
Prion
•added 2018/02/02 9:29 p.m.•18 views

Denial of service

The performrequest function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to steal the login credentials by watching the process table...

2.1CVSS6.8AI score0.00344EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2018/02/02 9:00 p.m.•50 views

CVE-2014-1835

CVE-2014-1835 affects the echor Ruby Gem (version 0.1.6) with a vulnerable perform_request implementation in /lib/echor/backplane.rb. This local-information-disclosure flaw allows an unprivileged local user to monitor the process table and obtain plaintext login credentials. The CVSS data in the ...

7.8CVSS7.4AI score0.00344EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2018/02/02 9:00 p.m.•32 views

CVE-2014-1835

The performrequest function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to steal the login credentials by watching the process table...

7.5AI score0.00344EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/02/02 12:00 a.m.•4 views

PT-2018-4177

Name of the Vulnerable Software and Affected Versions echor version 0.1.6 Description The issue allows local users to steal login credentials by monitoring the process table, specifically through the perform request function in the /lib/echor/backplane.rb file. Recommendations For version 0.1.6,...

7.8CVSS0.00344EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/02 12:00 a.m.•1 views

CVE-2014-1835: Undefined Security Weakness

The performrequest function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to steal the login credentials by watching the process table...

7.8CVSS7.3AI score0.00344EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2015/02/22 12:00 a.m.•27 views

xaviershay-dm-rails 0.10.3.8 MySQL Credential Disclosure

Title: xaviershay-dm-rails v0.10.3.8 mysql credential exposure Author: Larry W. Cashdollar, @larry0 Date: 2015-02-17 Download Site: https://rubygems.org/gems/xaviershay-dm-rails Vendor: Martin Gamsjaeger, Dan Kubb Vendor Notified: 2015-02-17 Vendor Contact: notreal at rhnh.net Description: This g...

7.4AI score
SaveExploits0
RubySec
RubySec
•added 2015/02/17 12:00 a.m.•20 views

xaviershay-dm-rails Gem for Ruby exposes sensitive information via the process table

xaviershay-dm-rails Gem for Ruby contains a flaw in the execute function in /datamapper/dm-rails/blob/master/lib/dm-rails/storage.rb. The issue is due to the function exposing sensitive information via the process table. This may allow a local attack to gain access to MySQL credential information...

5.5CVSS3.6AI score0.00369EPSS
SaveExploits1References1
RubySec
RubySec
•added 2014/06/30 12:00 a.m.•21 views

lawn-login Gem for Ruby /lib/lawn.rb Process Table Local Plaintext Password Disclosure

lawn-login Gem for Ruby contains a flaw in /lib/lawn.rb that is due to the application exposing password information in plaintext in the process table. This may allow a local attacker to gain access to password information...

7.8CVSS6.8AI score0.00522EPSS
SaveExploits1References1
RubySec
RubySec
•added 2014/06/30 12:00 a.m.•23 views

backup-agoddard Gem for Ruby /lib/backup/cli/utility.rb Process Table Local Plaintext Password Disclosure

backup-agoddard Gem for Ruby contains a flaw in /lib/backup/cli/utility.rb that is due to the application exposing password information in plaintext in the process table. This may allow a local attacker to gain access to password information...

7.8CVSS6.8AI score0.00512EPSS
SaveExploits1References1
RubySec
RubySec
•added 2014/06/30 12:00 a.m.•60 views

cap-strap Gem for Ruby Process Table Local Plaintext Credential Disclosure

cap-strap Gem for Ruby contains a flaw that is due to the application exposing credential information in plaintext in the process table listing. This may allow a local attacker to gain access to credential information...

7.8CVSS6.6AI score0.00522EPSS
SaveExploits1References1
RubySec
RubySec
•added 2014/06/30 12:00 a.m.•33 views

lean-ruport Gem for Ruby /test/tc_database.rb Process Table Local Plaintext MySQL Password Disclosure

lean-ruport Gem for Ruby contains a flaw in /test/tcdatabase.rb that is due to the application exposing MySQL password information in plaintext in the process table. This may allow a local attacker to gain access to MySQL password information...

7.8CVSS6.8AI score0.00522EPSS
SaveExploits1References1
RubySec
RubySec
•added 2014/06/30 12:00 a.m.•24 views

lynx Gem for Ruby command/basic.rb Process Table Local Plaintext Password Disclosure

lynx Gem for Ruby contains a flaw in command/basic.rb that is due to the application exposing password information in plaintext in the process table. This may allow a local attacker to gain access to password information...

7.8CVSS6.8AI score0.00522EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder