Lucene search
+L

3824 matches found

Microsoft KB
Microsoft KB
•added 2022/05/10 12:00 a.m.•47 views

KB5014024: Servicing stack update for Windows 10: May 10, 2022

None None...

6.1AI score
SaveExploits0
Fedora
Fedora
•added 2022/05/07 5:06 a.m.•32 views

[SECURITY] Fedora 36 Update: golang-storj-drpc-0.0.16-5.fc36

Package drpc is a light replacement for gprc...

7.5CVSS1.3AI score0.03931EPSS
SaveExploits0
Prion
Prion
•added 2022/05/05 10:15 p.m.•26 views

Design/Logic Flaw

Rubygems is a package registry used to supply software for the Ruby language ecosystem. Due to a bug in the yank action, it was possible for any RubyGems.org user to remove and replace certain gems even if that user was not authorized to do so. To be vulnerable, a gem needed: one or more dashes i...

6CVSS7.5AI score0.01938EPSS
SaveExploits0References3
CVE
CVE
•added 2022/05/05 10:05 p.m.•110 views

CVE-2022-29176

CVE-2022-29176 affects RubyGems.org via a yank-action bug that allowed an authorized-appearing gem name (containing a dash) to be removed or replaced with a rogue file when the gem was created within 30 days or had no updates for over 100 days. Multiple trusted sources (NVD, Red Hat, CVE list, an...

9.9CVSS7.7AI score0.01938EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/05 12:00 a.m.•11 views

CVE-2022-29176: Missing Authorization

Rubygems is a package registry used to supply software for the Ruby language ecosystem. Due to a bug in the yank action, it was possible for any RubyGems.org user to remove and replace certain gems even if that user was not authorized to do so. To be vulnerable, a gem needed: one or more dashes i...

9.9CVSS7.4AI score0.01938EPSS
SaveExploits0References3
osv_clsa
osv_clsa
•added 2022/05/04 5:25 p.m.•21 views

CLSA-2022-1651685129 Fix CVE(s): CVE-2019-18276

SECURITY UPDATE: privilege gain via setuid - debian/patches/CVE-2019-18276.patch: replace the use of setuid and setgid when possible with setresuid and setresgid, respectively. - CVE-2019-18276...

7.8CVSS7.5AI score0.02608EPSS
SaveExploits5References1
RedhatCVE
RedhatCVE
•added 2022/05/02 4:26 a.m.•118 views

CVE-2022-29800

A time-of-check-time-of-use TOCTOU race condition vulnerability was found in networkd-dispatcher. This flaw exists because there is a specific time between discovering and running the script. This flaw allows an attacker to replace scripts that networkd-dispatcher believes to be owned by root wit...

4.7CVSS3.2AI score0.07162EPSS
SaveExploits2References3
Fedora
Fedora
•added 2022/04/28 5:53 a.m.•32 views

[SECURITY] Fedora 35 Update: golang-storj-drpc-0.0.16-5.fc35

Package drpc is a light replacement for gprc...

7.5CVSS1.3AI score0.03931EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•4 views

PT-2022-29625

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description A potential security issue exists due to a memory leak in the shared policy replacement functionality. The actual impact and likelihood of an attack have not been confirmed. Recommendations F...

5.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•3 views

PT-2022-29280

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description A potential security issue exists due to a leak in shared policy replacement. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

5.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•7 views

PT-2022-30742

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description A potential security issue exists due to a memory leak in the shared policy replacement functionality. The actual impact and likelihood of an attack have not been confirmed. Recommendations F...

5.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•4 views

PT-2022-30245

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.8 through 5.10.110 Description A potential security issue exists due to a memory leak in the shared policy replacement functionality. The actual impact and likelihood of an attack have not been confirmed. Recommendation...

5.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•7 views

PT-2022-30450

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description A potential security issue exists due to a memory leak in the shared policy replacement functionality. The actual impact and likelihood of an attack have not been confirmed. Recommendations F...

5.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•4 views

PT-2022-30578

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description A potential security issue exists due to a memory leak in the shared policy replacement functionality. The actual impact and attack plausibility have not yet been proven. Recommendations For...

5.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•5 views

PT-2022-29951

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description A potential security issue exists due to a memory leak in the shared policy replacement functionality. The actual impact and likelihood of an attack have not been confirmed. Recommendations F...

5.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•5 views

PT-2022-30670

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description A potential security issue exists due to a memory leak in the shared policy replacement functionality. The actual impact and likelihood of an attack have not been confirmed. Recommendations...

5.5AI score
SaveExploits0References1
osv_cve
osv_cve
•added 2022/04/20 4:15 p.m.•18 views

CVE-2021-43986

The setup program for the affected product configures its files and folders with full access, which may allow unauthorized users permission to replace original binaries and achieve privilege escalation...

7CVSS5.8AI score0.00172EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/20 12:00 a.m.•22 views

PT-2022-11966 · Fanuc · Roboguide

Name of the Vulnerable Software and Affected Versions: Affected product affected versions not specified Description: The setup program for the affected product configures its files and folders with full access, which may allow unauthorized users permission to replace original binaries and achieve...

7CVSS6.7AI score0.00172EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/20 12:00 a.m.•4 views

CVE-2021-43986: Improper Access Control

The setup program for the affected product configures its files and folders with full access, which may allow unauthorized users permission to replace original binaries and achieve privilege escalation...

7CVSS7AI score0.00172EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2022/04/19 9:30 p.m.•48 views

Smap - A Drop-In Replacement For Nmap Powered By Shodan.Io

Smap is a replica of Nmap which uses shodan.io's free API for port scanning. It takes same command line arguments as Nmap and produces the same output which makes it a drop-in replacament for Nmap. Features Scans 200 hosts per second Doesn't require any account/api key Vulnerability detection...

7.5AI score
SaveExploits0References2
Rows per page
Query Builder