Lucene search
+L

1119 matches found

Github Security Blog
Github Security Blog
added 2024/11/14 6:09 p.m.13 views

zlib-rs stack overflow during decompression with malicious input

A denial of service vulnerability was found in zlib-rs, triggered by specially constructed input. This input causes a stack overflow, resulting in the process using zlib-rs to crash. Impact Due to the way LLVM handles the zlib-rs codebase, tail calls were not guaranteed. This caused certain input...

7.6AI score
SaveExploits0References3Affected Software3
OSV
OSV
added 2024/11/14 6:09 p.m.10 views

GHSA-J3PX-Q95C-9683 zlib-rs stack overflow during decompression with malicious input

A denial of service vulnerability was found in zlib-rs, triggered by specially constructed input. This input causes a stack overflow, resulting in the process using zlib-rs to crash. Impact Due to the way LLVM handles the zlib-rs codebase, tail calls were not guaranteed. This caused certain input...

5.3CVSS7.6AI score
SaveExploits0References3
vulnersOsv
vulnersOsv
added 2024/11/14 6:09 p.m.6 views

flate2 (>=1.0.29, <=1.0.34), libz-rs-sys (>=0.0.1, <=0.3.1) +1 more potentially affected by unknown CVE via zlib-rs (>=0.0.1, <=0.3.1)

zlib-rs CARGO version =0.0.1, =1.0.29, =0.0.1, =0.3.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:GHSA-J3PX-Q95C-9683...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
added 2024/11/14 6:09 p.m.3 views

flate2 (>=1.0.29, <=1.0.34), libz-rs-sys-cdylib (>=0.3.0, <=0.3.1) potentially affected by unknown CVE via libz-rs-sys (>=0.1.1, <=0.3.1)

libz-rs-sys CARGO version =0.1.1, =1.0.29, =0.3.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:GHSA-J3PX-Q95C-9683...

5.4AI score
SaveExploits0
OSV
OSV
added 2024/11/14 12:00 p.m.12 views

RUSTSEC-2024-0401 Denial of service because of stack overflow with malicious decompression input

A denial of service vulnerability was found in zlib-rs, triggered by specially constructed input. This input causes a stack overflow, resulting in the process using zlib-rs to crash. Impact Due to the way LLVM handles the zlib-rs codebase, tail calls were not guaranteed. This caused certain input...

5.3CVSS5.7AI score
SaveExploits0References3
vulnersOsv
vulnersOsv
added 2024/11/14 12:00 p.m.4 views

flate2 (>=1.0.29, <=1.0.34), libz-rs-sys (>=0.0.1, <=0.3.1) +1 more potentially affected by unknown CVE via zlib-rs (>=0.0.1, <=0.3.1)

zlib-rs CARGO version =0.0.1, =1.0.29, =0.0.1, =0.3.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0401...

5.4AI score
SaveExploits0
RustSec
RustSec
added 2024/11/14 12:00 p.m.9 views

Denial of service because of stack overflow with malicious decompression input

A denial of service vulnerability was found in zlib-rs, triggered by specially constructed input. This input causes a stack overflow, resulting in the process using zlib-rs to crash. Impact Due to the way LLVM handles the zlib-rs codebase, tail calls were not guaranteed. This caused certain input...

5.7AI score
SaveExploits0Affected Software1
OSV
OSV
added 2024/10/17 6:15 p.m.6 views

CVE-2024-49219

Incorrect Privilege Assignment vulnerability in themexpo RS-Members allows Privilege Escalation.This issue affects RS-Members: from n/a through 1.0.3...

8.8CVSS5.8AI score0.00421EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/17 6:15 p.m.49 views

CVE-2024-49219

Incorrect Privilege Assignment vulnerability in themexpo RS-Members rs-members allows Privilege Escalation.This issue affects RS-Members: from n/a through = 1.0.3...

8.8CVSS0.00421EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/17 5:41 p.m.33 views

CVE-2024-49219 WordPress RS-Members plugin <= 1.0.3 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in themexpo RS-Members rs-members allows Privilege Escalation.This issue affects RS-Members: from n/a through = 1.0.3...

8.8CVSS0.00421EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/17 5:41 p.m.20 views

CVE-2024-49219 WordPress RS-Members plugin <= 1.0.3 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in themexpo RS-Members rs-members allows Privilege Escalation.This issue affects RS-Members: from n/a through = 1.0.3...

8.8CVSS5.1AI score0.00421EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/17 5:41 p.m.69 views

CVE-2024-49219

CVE-2024-49219 concerns the WordPress plugin RS-Members (the Expo Themexpo RS‑Members). The vulnerability is described as an Incorrect Privilege Assignment leading to Privilege Escalation . Affected version range: RS‑Members up to 1.0.3 (n/a through 1.0.3). Public sources (WordPress ecosystem fee...

8.8CVSS5.9AI score0.00421EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/17 12:00 a.m.15 views

PT-2024-33355 · Themexpo · Themexpo Rs-Members

Name of the Vulnerable Software and Affected Versions: themexpo RS-Members versions 1.0.3 and earlier Description: The issue is related to an Incorrect Privilege Assignment vulnerability, which allows Privilege Escalation in themexpo RS-Members. Recommendations: For themexpo RS-Members versions...

8.8CVSS6.9AI score0.00421EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/10/17 12:00 a.m.9 views

WordPress plugin RS-Members 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS6.6AI score0.00421EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/16 1:16 p.m.5 views

Malicious code in rs-downloaders (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2024/10/16 1:16 p.m.10 views

MAL-2024-9808 Malicious code in rs-downloaders (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/16 1:16 p.m.3 views

Malicious code in rs-downloader (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2024/10/16 1:16 p.m.4 views

MAL-2024-9807 Malicious code in rs-downloader (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSV
OSV
added 2024/10/15 5:33 p.m.17 views

GHSA-FMJ7-7GFW-64PG Agent Dart is missing certificate verification checks

Certificate verification in lib/agent/certificate.dart has been found to contain two issues: - During the delegation verification in checkDelegation function the canisterranges aren't verified. The impact of not checking the canisterranges is that a subnet can sign canister responses in behalf of...

7.6CVSS6.4AI score0.00368EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2024/10/14 10:55 a.m.9 views

WordPress RS-Members plugin <= 1.0.3 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin RS-Members versions = 1.0.3...

8.8CVSS7AI score0.00421EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder