Lucene search
K

36 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.4 views

Malicious code in test-mlw2-scone-swaly (npm)

The package test-mlw2-scone-swaly was found to contain malicious code...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.4 views

Malicious code in test-mlw2-scone-tikka (npm)

The package test-mlw2-scone-tikka was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-36188 Malicious code in test-mlw2-scone-swaly (npm)

The package test-mlw2-scone-swaly was found to contain malicious code...

7.2AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-36189 Malicious code in test-mlw2-scone-tikka (npm)

The package test-mlw2-scone-tikka was found to contain malicious code...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 8:54 a.m.2 views

CVE-2024-29971

Scontain SCONE 5.8.0 has an interface vulnerability that leads to state corruption via injected signals...

9.8CVSS7.1AI score0.00439EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:21 a.m.7 views

CVE-2022-46486

A lack of pointer-validation logic in the sconedispatch component of SCONE before v5.8.0 for Intel SGX allows attackers to access sensitive information...

5.5CVSS6.8AI score0.00335EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:0 p.m.7 views

CVE-2022-46487

Improper initialization of x87 and SSE floating-point configuration registers in the sconeentry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution integrity of floating-point operations in an enclave or access sensitive information via side-channel...

7.8CVSS6.4AI score0.00596EPSS
Exploits1References1
OSV
OSV
added 2025/01/10 4:15 p.m.3 views

CVE-2024-29971

Scontain SCONE 5.8.0 has an interface vulnerability that leads to state corruption via injected signals...

9.8CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2025/01/10 4:15 p.m.9 views

CVE-2024-29971

Scontain SCONE 5.8.0 has an interface vulnerability that leads to state corruption via injected signals...

9.8CVSS0.00439EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/01/10 12:0 a.m.5 views

CVE-2024-29971

Scontain SCONE 5.8.0 has an interface vulnerability that leads to state corruption via injected signals...

9.7AI score0.00439EPSS
Exploits0References2
CVE
CVE
added 2025/01/10 12:0 a.m.43 views

CVE-2024-29971

CVE-2024-29971 concerns Scontain SCONE 5.8.0, described across multiple sources as an interface vulnerability that leads to state corruption via injected signals. The CVE entry notes a critical impact (CVSS v3.1: 9.8, Confidentiality/Integrity/Availability all high) with network attack vector and...

9.8CVSS7.3AI score0.00439EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/12/30 3:15 a.m.1 views

CVE-2022-46486

A lack of pointer-validation logic in the sconedispatch component of SCONE before v5.8.0 for Intel SGX allows attackers to access sensitive information...

5.5CVSS6.1AI score0.00335EPSS
Exploits1References4
OSV
OSV
added 2023/12/30 3:15 a.m.1 views

CVE-2022-46487

Improper initialization of x87 and SSE floating-point configuration registers in the sconeentry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution integrity of floating-point operations in an enclave or access sensitive information via side-channel...

7.8CVSS7.4AI score0.00596EPSS
Exploits1References6
OSV
OSV
added 2023/12/30 3:15 a.m.2 views

CVE-2022-46486

A lack of pointer-validation logic in the sconedispatch component of SCONE before v5.8.0 for Intel SGX allows attackers to access sensitive information...

5.5CVSS5.8AI score0.00335EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2023/12/30 3:15 a.m.2 views

CVE-2023-38023

An issue was discovered in SCONE Confidential Computing Platform before 5.8.0 for Intel SGX. Lack of pointer-alignment logic in sconedispatch and other entry functions allows a local attacker to access unauthorized information, aka an "AEPIC Leak."...

5.5CVSS6.1AI score0.00223EPSS
Exploits0References8
OSV
OSV
added 2023/12/30 3:15 a.m.2 views

CVE-2023-38023

An issue was discovered in SCONE Confidential Computing Platform before 5.8.0 for Intel SGX. Lack of pointer-alignment logic in sconedispatch and other entry functions allows a local attacker to access unauthorized information, aka an "AEPIC Leak."...

5.5CVSS5.8AI score0.00223EPSS
Exploits0References7
NVD
NVD
added 2023/12/30 3:15 a.m.21 views

CVE-2022-46486

A lack of pointer-validation logic in the sconedispatch component of SCONE before v5.8.0 for Intel SGX allows attackers to access sensitive information...

5.5CVSS0.00335EPSS
Exploits1References3
NVD
NVD
added 2023/12/30 3:15 a.m.17 views

CVE-2022-46487

Improper initialization of x87 and SSE floating-point configuration registers in the sconeentry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution integrity of floating-point operations in an enclave or access sensitive information via side-channel...

7.8CVSS0.00596EPSS
Exploits1References6
NVD
NVD
added 2023/12/30 3:15 a.m.15 views

CVE-2023-38023

An issue was discovered in SCONE Confidential Computing Platform before 5.8.0 for Intel SGX. Lack of pointer-alignment logic in sconedispatch and other entry functions allows a local attacker to access unauthorized information, aka an "AEPIC Leak."...

5.5CVSS0.00223EPSS
Exploits0References7
Prion
Prion
added 2023/12/30 3:15 a.m.17 views

Design/Logic Flaw

An issue was discovered in SCONE Confidential Computing Platform before 5.8.0 for Intel SGX. Lack of pointer-alignment logic in sconedispatch and other entry functions allows a local attacker to access unauthorized information, aka an "AEPIC Leak."...

1.7CVSS6.9AI score0.00223EPSS
Exploits0References7Affected Software1
Rows per page
Query Builder