Lucene search
+L

800 matches found

Github Security Blog
Github Security Blog
•added 2024/02/15 3:34 p.m.•70 views

Helm dependency management path traversal

A Helm contributor discovered a path traversal vulnerability when Helm saves a chart including at download time. Impact When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected...

6.4CVSS7AI score0.00572EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2024/02/15 5:07 a.m.•60 views

CVE-2022-23089 Out of bound read in elf_note_prpsinfo()

When dumping core and saving process information, procgetargv might return an sbuf which have a sbuflen of 0 or -1, which is not properly handled. An out-of-bound read can happen when user constructs a specially crafted psstring, which in turn can cause the kernel to crash...

6.5AI score0.00176EPSS
SaveExploits0References2
Prion
Prion
•added 2024/02/09 6:15 p.m.•63 views

Design/Logic Flaw

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected...

6.5CVSS7.4AI score0.83719EPSS
SaveExploits6References2Affected Software1
Veracode
Veracode
•added 2024/01/31 7:31 a.m.•27 views

Denial Of Service (DoS)

Craft CMS is vulnerable to Denial Of Service DoS. The vulnerability is due to improper input validation within the Feed-Me Name and Feed-Me URL fields while saving a feed using an Asset element type with no volume selected. This issue can be exploited by an attacker to perform a DoS...

7.5CVSS6.7AI score0.01073EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2024/01/16 4:15 p.m.•22 views

CVE-2021-24151

The WP Editor WordPress plugin before 1.2.7 did not sanitise or validate its setting fields leading to an authenticated admin+ blind SQL injection issue via an arbitrary parameter when making a request to save the settings...

7.2CVSS5.9AI score0.00771EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2023/12/27 12:00 a.m.•10 views

PT-2025-32442

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: This issue resolves a timeout error occurring in the Bluetooth btnxpuart driver during power save stress testing. The problem arises when the power save mechanism activates UART break...

7.1CVSS5.9AI score0.00162EPSS
SaveExploits0
Code423n4
Code423n4
•added 2023/12/20 12:00 a.m.•37 views

Some tokens may revert when zero value transfers are made

Lines of code 356, 371, 145, 272, 252, 116, 445, 374, 506, 488https://github.com/Tapioca-DAO/tap-token-audit/blob/59749be5bc2286f0bdbf59d7ddc258ddafd49a9f/contracts/options/TapiocaOptionBroker...

6.9AI score
SaveExploits0
Code423n4
Code423n4
•added 2023/12/19 12:00 a.m.•26 views

Some tokens may revert when zero value transfers are made

Lines of code 356, 371, 145, 272, 252, 116, 445, 374, 506, 488https://github.com/Tapioca-DAO/tap-token-audit/blob/59749be5bc2286f0bdbf59d7ddc258ddafd49a9f/contracts/options/TapiocaOptionBroker...

6.9AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2023/12/15 6:17 a.m.•21 views

WordPress plugin "MW WP Form" vulnerable to arbitrary file upload

Overview WordPress plugin "MW WP Form" provided by Web Consultation Office Co., Ltd can create a mail form using shortcode. MW WP Form contains a vulnerability that may allow an attacker to upload arbitrary files CVE-2023-6316, CWE-434. Impact When the "Saving inquiry data in database" option in...

9.8CVSS7.7AI score0.01436EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2023/12/14 12:00 a.m.•19 views

Emlog security vulnerabilities

emlog is a PHP and MySQL based CMS builder. Emlog Pro v2.1.14 version of a cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the component /admin/article.php?activesavedraft, which can be exploited by an attacker...

6.1CVSS6.2AI score0.00475EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2023/12/12 11:30 a.m.•52 views

NetProbe - Network Probe

NetProbe is a tool you can use to scan for devices on your network. The program sends ARP requests to any IP address on your network and lists the IP addresses, MAC addresses, manufacturers, and device models of the responding devices. Features Scan for devices on a specified IP address or subnet...

7.3AI score
SaveExploits0References2
Code423n4
Code423n4
•added 2023/12/12 12:00 a.m.•145 views

Some tokens may revert when zero value transfers are made

Lines of code 356, 371, 145, 272, 252, 116, 445, 374, 506, 488https://github.com/Tapioca-DAO/tap-token-audit/blob/59749be5bc2286f0bdbf59d7ddc258ddafd49a9f/contracts/options/TapiocaOptionBroker...

6.9AI score
SaveExploits0
CNVD
CNVD
•added 2023/11/22 12:00 a.m.•18 views

OpenHarmony has an unspecified vulnerability (CNVD-2023-91547)

OpenHarmony is a kind of hongmeng operating system open source project. A security vulnerability exists in OpenHarmony prior to version v3.2.2, which can be exploited by an attacker to read and write arbitrary files via improper privilege saving...

8.4CVSS6.9AI score0.00191EPSS
SaveExploits0References1
Redos
Redos
•added 2023/11/21 12:00 a.m.•29 views

ROS-20231121-03

OpenSearch software package vulnerability related to improper permission saving. Exploitation exploitation of the vulnerability could allow an attacker to affect data integrity...

5.4CVSS6.9AI score0.00487EPSS
SaveExploits0
CNNVD
CNNVD
•added 2023/11/20 12:00 a.m.•19 views

OpenHarmony security vulnerabilities

OpenHarmony is a kind of hongmeng operating system open source project. A security vulnerability exists in OpenHarmony prior to version v3.2.2, which can be exploited by an attacker to read and write arbitrary files via improper privilege saving...

8.4CVSS6.9AI score0.00191EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
•added 2023/10/26 12:00 a.m.•36 views

October 26, 2023—KB5031445 (OS Build 19045.3636) Preview

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2023/10/10 7:00 a.m.•652 views

October 10, 2023—KB5031362 (OS Build 14393.6351) - EXPIRED

None None...

9.8CVSS6.9AI score0.99999EPSS
SaveExploits21
Microsoft KB
Microsoft KB
•added 2023/10/10 7:00 a.m.•161 views

October 10, 2023—KB5031377 (OS Build 10240.20232) - EXPIRED

None None...

9.8CVSS6.9AI score0.99999EPSS
SaveExploits21
Microsoft KB
Microsoft KB
•added 2023/10/10 7:00 a.m.•341 views

October 10, 2023—KB5031364 (OS Build 20348.2031)

None None...

9.8CVSS6.9AI score0.99999EPSS
SaveExploits22
Microsoft KB
Microsoft KB
•added 2023/10/10 7:00 a.m.•63 views

October 10, 2023—KB5031411 (Security-only update)

None None...

9.8CVSS6.8AI score0.20318EPSS
SaveExploits0
Rows per page
Query Builder