Lucene search
+L

1523 matches found

Github Security Blog
Github Security Blog
added 2022/08/18 6:55 p.m.31 views

apollo-server-core vulnerable to URL-based XSS attack affecting IE11 on default landing page

Impact The default landing page contained HTML to display a sample curl command which is made visible if the full landing page bundle could not be fetched from Apollo's CDN. The server's URL is directly interpolated into this command inside the browser from window.location.href. On some older...

0.3AI score
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2022/08/16 12:00 a.m.30 views

Apache Airflow 安全漏洞

Apache Airflow is an open source platform for creating, managing and monitoring workflows from the Apache Foundation. The platform is scalable and dynamically monitored, etc. A remote code execution vulnerability exists in versions of Apache Airflow prior to 3.0.0. The vulnerability stems from th...

8.8CVSS8.3AI score0.01814EPSS
SaveExploits0References3
Citrix
Citrix
added 2022/08/11 12:00 a.m.10 views

How to block users from logging in VPN during non-working hours

This article address a configuration sample to block users from logging in VPN during non-working hours...

7AI score
SaveExploits0
OSV
OSV
added 2022/08/10 8:15 p.m.7 views

CVE-2022-35491

TOTOLINK A3002RU V3.0.0-B20220304.1804 has a hardcoded password for root in /etc/shadow.sample...

9.8CVSS5.8AI score0.00815EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/10 8:15 p.m.4 views

CVE-2022-35491

TOTOLINK A3002RU V3.0.0-B20220304.1804 has a hardcoded password for root in /etc/shadow.sample...

9.8CVSS7.3AI score0.00815EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/08/10 12:00 a.m.8 views

TOTOLINK A3002RU 信任管理问题漏洞

TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK A3002RU version V3.0.0-B20220304.1804, which originates from a hard-coded root password in /etc/shadow.sample...

9.8CVSS8.3AI score0.00815EPSS
SaveExploits0References2
OSV
OSV
added 2022/08/04 7:15 p.m.11 views

CVE-2022-34993

Totolink A3600RFirmware V4.1.2cu.5182B20201102 contains a hard code password for root in /etc/shadow.sample...

9.8CVSS5.8AI score0.01016EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2022/08/01 12:00 a.m.11 views

Fedora: Security Advisory for golang-k8s-sample-controller (FEDORA-2022-5038c3236c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
added 2022/07/31 1:37 a.m.21 views

[SECURITY] Fedora 36 Update: golang-k8s-sample-controller-1.22.0-5.fc36

This package implements a simple controller for watching Foo resources as defined with a CustomResourceDefinition CRD...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2022/07/31 12:00 a.m.7 views

Fedora: Security Advisory for golang-k8s-sample-apiserver (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/07/31 12:00 a.m.7 views

Fedora: Security Advisory for golang-k8s-sample-cli-plugin (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
added 2022/07/30 2:00 a.m.17 views

[SECURITY] Fedora 36 Update: golang-k8s-sample-cli-plugin-1.22.0-5.fc36

This package implements a single kubectl plugin for switching the namespace t hat the current KUBECONFIG context points to. In order to remain as indestructive as possible, no existing contexts are modified...

7.2AI score
SaveExploits0
Fedora
Fedora
added 2022/07/30 2:00 a.m.26 views

[SECURITY] Fedora 36 Update: golang-k8s-sample-apiserver-1.22.0-6.fc36

Demonstration of how to use the k8s.io/apiserver library to build a functional API server...

7.2AI score
SaveExploits0
Huntr
Huntr
added 2022/07/22 3:11 a.m.27 views

DOM-based Cross-Site Scripting (XSS) in OpenEMR 7.0.0 and below at White list files

Description We would like to report the vulnerability we found during software testing. The OpenEMR 7.0.0 latest version and below version; Open Source electronic health records and medical practice management application; has DOM-based Cross-Site Scripting XSS vulnerability in the...

4.9CVSS5.5AI score0.00534EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2022/07/18 12:00 a.m.14 views

Fedora: Security Advisory for golang-k8s-sample-apiserver (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
OpenVAS
OpenVAS
added 2022/07/18 12:00 a.m.27 views

Fedora: Security Advisory for golang-k8s-sample-cli-plugin (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS9.1AI score0.04195EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2022/07/18 12:00 a.m.17 views

Fedora: Security Advisory for golang-k8s-sample-controller (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
Fedora
Fedora
added 2022/07/17 1:16 a.m.29 views

[SECURITY] Fedora 35 Update: golang-k8s-sample-controller-1.22.0-4.fc35

This package implements a simple controller for watching Foo resources as defined with a CustomResourceDefinition CRD...

9.3CVSS8.1AI score0.0995EPSS
SaveExploits4
Fedora
Fedora
added 2022/07/17 1:16 a.m.31 views

[SECURITY] Fedora 35 Update: golang-k8s-sample-apiserver-1.22.0-5.fc35

Demonstration of how to use the k8s.io/apiserver library to build a functional API server...

9.3CVSS8AI score0.0995EPSS
SaveExploits4
Fedora
Fedora
added 2022/07/17 1:16 a.m.25 views

[SECURITY] Fedora 35 Update: golang-github-prometheus-tsdb-0.10.0-8.fc35

Package Tsdb implements a time series storage for float64 sample data...

9.3CVSS8.2AI score0.0995EPSS
SaveExploits4
Rows per page
Query Builder