Lucene search
K

32 matches found

OSV
OSV
added 2026/04/22 6:31 p.m.2 views

GHSA-53GR-WMF4-8HH3 uutils coreutils's User Interface (UI) Misrepresents Critical Information

The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleadi...

3.3CVSS5.8AI score0.00014EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/04/22 4:8 p.m.25 views

CVE-2026-35371 uutils coreutils id Misleading Identity Reporting in Pretty Print Mode

The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleadi...

3.3CVSS0.00014EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/04/22 4:8 p.m.1 views

CVE-2026-35371 uutils coreutils id Misleading Identity Reporting in Pretty Print Mode

The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleadi...

3.3CVSS5.8AI score0.00014EPSS
Exploits1References1
CNNVD
CNNVD
added 2026/04/22 12:0 a.m.3 views

uutils coreutils 安全漏洞

uutils coreutils is a cross-platform core command-line toolset developed by Uutils. There is a security vulnerability in uutils coreutils, which stems from incorrect behavior when the real UID and the effective UID differ. This could lead to automated scripts or system administrators making...

3.3CVSS5.8AI score0.00014EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/04/09 12:0 a.m.2 views

PT-2026-31663

Laravel Passport provides OAuth2 server support to Laravel. From 13.0.0 to before 13.7.1, there is an Authentication Bypass for client credentials tokens. the league/oauth2-server library sets the JWT sub claim to the client identifier since there's no user. The token guard then passes this value...

7.1CVSS5.8AI score0.00074EPSS
Exploits1References6
Snyk
Snyk
added 2026/02/02 11:50 p.m.1 views

Improper Ownership Management

Overview Affected versions of this package are vulnerable to Improper Ownership Management in the AuthManager process. An attacker can cause the association of a temporary account's username and IP address with a real username in AbuseLog by creating a permanent account from a temporary account...

3CVSS5.4AI score0.00017EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-10309

Malware in sbrugna...

8.8CVSS7.6AI score0.01387EPSS
Exploits0References2
Akamai Blog
Akamai Blog
added 2023/01/26 2:0 p.m.19 views

Beyond CWV: 11 More Performance Metrics to Monitor, Part 3 of 5

Learn the differences between synthetic tests and real user monitoring, and discover 11 web performance metrics beyond the Core Web Vitals — and how to use them...

7AI score
Exploits0
Akamai Blog
Akamai Blog
added 2022/12/13 2:0 p.m.14 views

Measuring User Experience with Real User Data

Use data from real users to improve the user experience UX of your site or app, and draw on real behavior and outcomes for effective UX decision-making...

3.2AI score
Exploits0
ATTACKERKB
ATTACKERKB
added 2022/03/10 5:46 p.m.3 views

CVE-2022-24399

The SAP Focused Run Real User Monitoring - versions 200, 300, REST service does not sufficiently sanitize the input name of the file using multipart/form-data, resulting in Cross-Site Scripting XSS vulnerability...

6.1CVSS6.3AI score0.00815EPSS
Exploits2References5Affected Software1
OSV
OSV
added 2022/03/10 5:46 p.m.0 views

CVE-2022-24399

The SAP Focused Run Real User Monitoring - versions 200, 300, REST service does not sufficiently sanitize the input name of the file using multipart/form-data, resulting in Cross-Site Scripting XSS vulnerability...

6.1CVSS6.3AI score
Exploits0References4
Prion
Prion
added 2022/03/10 5:46 p.m.8 views

Cross site scripting

The SAP Focused Run Real User Monitoring - versions 200, 300, REST service does not sufficiently sanitize the input name of the file using multipart/form-data, resulting in Cross-Site Scripting XSS vulnerability...

4.3CVSS5.9AI score0.00815EPSS
Exploits2References4Affected Software1
Positive Technologies
Positive Technologies
added 2022/03/08 12:0 a.m.2 views

PT-2022-16674 · Sap · Sap Focused Run

Name of the Vulnerable Software and Affected Versions: SAP Focused Run Real User Monitoring versions 200, 300 Description: The issue is related to a Cross-Site Scripting XSS vulnerability. It occurs because the REST service does not sufficiently sanitize the input name of the file using...

6.1CVSS5.9AI score0.00815EPSS
Exploits2References6
Akamai Blog
Akamai Blog
added 2021/05/20 2:0 p.m.188 views

Better Real User Monitoring with BoomerangJS and Akamai mPulse

In this blog, we'll walk through a few different snippet insertion methods and available optimizations. Akamai's real user monitoring RUM solution, mPulse, uses a bit of JavaScript code an mPulse snippet and the BoomerangJS library to collect performance data from a user's Web browser. However, t...

7.2AI score
Exploits0
Akamai Blog
Akamai Blog
added 2021/05/12 2:0 p.m.45 views

Visualize and Analyze Bots with Real User Monitoring

You interact with more than just customers on your website. Bots make up a disproportionate amount of traffic, which can skew human behavior analysis data -- and cause you to make the wrong business decisions. In fact, one Akamai customer with 30% of total traffic from bots noticed a huge gap in...

7.3AI score
Exploits0
Akamai Blog
Akamai Blog
added 2021/05/12 1:0 p.m.14 views

Visualize and Analyze Bots With Real User Monitoring

...

2AI score
Exploits0
Akamai Blog
Akamai Blog
added 2020/12/07 2:0 p.m.84 views

Add Security Events to Your Monitoring Tools

Real-time monitoring is important in every organization because it enables stakeholders to understand what is happening at any given time and react quickly. There are a lot of systems and devices we can and should monitor using tools such as application performance monitoring, digital performance...

0.4AI score
Exploits0
OSV
OSV
added 2020/11/11 4:15 a.m.1 views

CVE-2020-16126

An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing untrusted users to send signals to AccountService, thus stopping it from handling D-Bus messages in a timely fashion...

3.3CVSS6.4AI score0.01989EPSS
Exploits2References1
Akamai Blog
Akamai Blog
added 2020/10/13 10:0 p.m.41 views

Akamai and Snyk Partnership Creates a Powerful Combination for In-Browser Script Protection

A web experience begins with the sum of the code you created. But it also includes all the code the user is put in contact with when loading your website. This means the attack surface to monitor for web application software threats is not just your code repositories, but the sum of the assets re...

1.1AI score
Exploits0
Akamai Blog
Akamai Blog
added 2020/10/12 4:0 a.m.18 views

Timers, Metrics, and Dimensions: What's New for mPulse in 2020

The October 2020 release marks the culmination of a large number of updates to mPulse, Akamai's real user monitoring RUM solution:...

2.7AI score
Exploits0
Rows per page
Query Builder