Lucene search
+L

426 matches found

Github Security Blog
Github Security Blog
•added 2021/06/08 6:47 p.m.•60 views

Remote Command Execution in reg-keygen-git-hash-plugin

Impact reg-keygen-git-hash-plugin through 0.10.15 allow remote attackers to execute of arbitrary commands. Patches Upgrade to version 0.10.16 or later. For more information If you have any questions or comments about this advisory: - Open an issue in reg-viz/reg-suit...

9.8CVSS7.4AI score0.01941EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2021/06/08 6:47 p.m.•95 views

GHSA-49Q3-8867-5WMP Remote Command Execution in reg-keygen-git-hash-plugin

Impact reg-keygen-git-hash-plugin through 0.10.15 allow remote attackers to execute of arbitrary commands. Patches Upgrade to version 0.10.16 or later. For more information If you have any questions or comments about this advisory: - Open an issue in reg-viz/reg-suit...

8.8CVSS9.7AI score0.01941EPSS
SaveExploits0References5
NVD
NVD
•added 2021/06/08 5:15 p.m.•55 views

CVE-2021-32673

reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve this issue...

9.8CVSS0.01941EPSS
SaveExploits0References4
OSV
OSV
•added 2021/06/08 5:15 p.m.•28 views

CVE-2021-32673

reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve this issue...

9.8CVSS9.6AI score
SaveExploits0References4
Prion
Prion
•added 2021/06/08 5:15 p.m.•22 views

Design/Logic Flaw

reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve this issue...

7.5CVSS9.6AI score0.01941EPSS
SaveExploits0References4Affected Software1
attackerkb
attackerkb
•added 2021/06/08 5:15 p.m.•7 views

CVE-2021-32673

reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve this issue...

9.8CVSS7.2AI score0.01941EPSS
SaveExploits0References5Affected Software1
Mend
Mend
•added 2021/06/08 5:00 p.m.•1 views

CVE-2021-32673

reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve this issue...

9.8CVSS0.01941EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2021/06/08 5:00 p.m.•66 views

CVE-2021-32673 Remote Command Execution in reg-keygen-git-hash-plugin

reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve this issue...

8.8CVSS9.9AI score0.01941EPSS
SaveExploits0References4
CVE
CVE
•added 2021/06/08 5:00 p.m.•66 views

CVE-2021-32673

CVE-2021-32673 affects the reg-keygen-git-hash-plugin (part of reg-suit). The vulnerable versions are up to and including 0.10.15, which allow a remote attacker to execute arbitrary commands. The recommended remediations are to upgrade to version 0.10.16 or later. Multiple connected sources (NVD,...

9.8CVSS9.4AI score0.01941EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2021/06/08 12:00 a.m.•2 views

PT-2021-19847

Name of the Vulnerable Software and Affected Versions reg-keygen-git-hash-plugin versions 0.10.15 and earlier Description The issue allows remote attackers to execute arbitrary commands. Recommendations Upgrade to version 0.10.16 or later to resolve this issue...

9.8CVSS0.01941EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/08 12:00 a.m.•5 views

CVE-2021-32673: Improper Control of Generation of Code

reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve this issue...

9.8CVSS6.2AI score0.01941EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/06/08 12:00 a.m.•41 views

reg-suit 操作系统命令注入漏洞

Reg-viz reg-suit is an open source command line interface for reg-viz. Reg-viz reg-suit suffers from a code injection vulnerability that can be exploited by an attacker to execute arbitrary commands...

9.8CVSS6.2AI score0.01941EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/06/02 12:00 a.m.•2 views

PT-2024-11262

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel, where an access to bytes 4 through 15 of an APIC register may cause undefined behavior. This access in kvm lapic reg read can result in a leak o...

7.1CVSS0.00244EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/04/14 12:00 a.m.•22 views

PT-2024-10832 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A reference leak occurs in the Linux kernel when pm runtime get sync fails. The PM reference count is not expected to be incremented on return in functions cdns i2c master xfer and cdn...

7.8CVSS6.1AI score0.01549EPSS
SaveExploits0References405
CNNVD
CNNVD
•added 2021/03/11 12:00 a.m.•24 views

Dan Bloomberg Leptonica 缓冲区错误漏洞

Dan Bloomberg Leptonica is a Dan Bloomberg open source application. It provides basic image processing and image analysis operations. A security vulnerability exists in Leptonica before 1.80.0, which stems from adaptmap reg.c and adaptmap.c and results in a heap-based buffer overread...

7.5CVSS7.4AI score0.02574EPSS
SaveExploits1References12
OSV
OSV
•added 2020/12/29 9:15 p.m.•16 views

CVE-2020-16268

The MSI installer in 1E Client 4.1.0.267 and 5.0.0.745 allows remote authenticated users and local users to gain elevated privileges via the repair option. This applies to installations that have a TRANSFORM MST with the option to disable the installation of the Nomad module. An attacker may craf...

8.8CVSS7AI score0.01442EPSS
SaveExploits0References1
NVD
NVD
•added 2020/12/29 9:15 p.m.•37 views

CVE-2020-16268

The MSI installer in 1E Client 4.1.0.267 and 5.0.0.745 allows remote authenticated users and local users to gain elevated privileges via the repair option. This applies to installations that have a TRANSFORM MST with the option to disable the installation of the Nomad module. An attacker may craf...

8.8CVSS8.4AI score0.0134EPSS
SaveExploits0References1
Prion
Prion
•added 2020/12/29 9:15 p.m.•25 views

Code injection

The MSI installer in 1E Client 4.1.0.267 and 5.0.0.745 allows remote authenticated users and local users to gain elevated privileges via the repair option. This applies to installations that have a TRANSFORM MST with the option to disable the installation of the Nomad module. An attacker may craf...

6.5CVSS8.3AI score0.01442EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/12/29 8:07 p.m.•40 views

CVE-2020-16268

The MSI installer in 1E Client 4.1.0.267 and 5.0.0.745 allows remote authenticated users and local users to gain elevated privileges via the repair option. This applies to installations that have a TRANSFORM MST with the option to disable the installation of the Nomad module. An attacker may craf...

8.4AI score0.0134EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/29 12:00 a.m.•6 views

CVE-2020-16268: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The MSI installer in 1E Client 4.1.0.267 and 5.0.0.745 allows remote authenticated users and local users to gain elevated privileges via the repair option. This applies to installations that have a TRANSFORM MST with the option to disable the installation of the Nomad module. An attacker may craf...

8.8CVSS5.9AI score0.0134EPSS
SaveExploits0References3
Rows per page
Query Builder