Lucene search
+L

2518 matches found

RedHat Linux
RedHat Linux
added 2022/08/02 10:9 a.m.8 views

mariadb: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr

MariaDB through 10.5.9 allows an application crash in subselectpostjoinaggr for a NULL value of aggr...

5.5CVSS7.4AI score0.004EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2022/07/28 4:6 p.m.5 views

mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements

MariaDB through 10.5.13 allows a hamaria::extra application crash via certain SELECT statements...

5.5CVSS7.4AI score0.00403EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2022/07/28 4:6 p.m.15 views

mariadb: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures...

5.5CVSS7.4AI score0.004EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2022/07/28 4:6 p.m.7 views

mariadb: server crash in Item_field::fix_outer_field for INSERT SELECT

MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Itemfield::fixouterfield...

7.5CVSS7.3AI score0.0137EPSS
SaveExploits1References4
OSV
OSV
added 2022/07/22 10:4 a.m.8 views

MAL-2022-7313 Malicious code in yahoo-react-popup-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e505b7871307d7dfdf3bef0c52da5103e1b0e20b4fa2c34749183d4e29a55be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Veracode
Veracode
added 2022/07/11 4:23 p.m.22 views

Remote Code Execution

snipe/snipe-it is vulnerable to remote code execution. The vulnerability exists in the Select User function under the People Menu component which allows an attacker with admin privileges to inject remote code to a user via maliciously crafted pdf files...

4.8CVSS6AI score0.0065EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2022/07/08 12:0 a.m.24 views

GHSA-XWQX-X38C-CW95 Snipe-IT 6.0.2 vulnerable to Cross-site Scripting

An arbitrary file upload vulnerability in the Select User function under the People Menu component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...

4.8CVSS5.5AI score0.0065EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2022/07/08 12:0 a.m.31 views

Snipe-IT 6.0.2 vulnerable to Cross-site Scripting

An arbitrary file upload vulnerability in the Select User function under the People Menu component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...

4.8CVSS6.3AI score0.0065EPSS
SaveExploits1References3Affected Software1
Citrix
Citrix
added 2022/07/08 12:0 a.m.22 views

Login schema unable to be configured and the SELECT button grayed out

When configuring nFactor authentication, user is unable to select login schema xml in GUI page. The "SELECT" button is greyed out. Like below screenshot...

7AI score
SaveExploits0
OSV
OSV
added 2022/07/07 11:15 p.m.16 views

CVE-2022-32061

An arbitrary file upload vulnerability in the Select User function under the People Menu component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...

4.8CVSS5.7AI score
SaveExploits0References1
NVD
NVD
added 2022/07/07 11:15 p.m.17 views

CVE-2022-32061

An arbitrary file upload vulnerability in the Select User function under the People Menu component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...

4.8CVSS0.0065EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/07/07 11:15 p.m.2 views

CVE-2022-32061

An arbitrary file upload vulnerability in the Select User function under the People Menu component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...

4.8CVSS5.7AI score0.0065EPSS
SaveExploits1References2
Prion
Prion
added 2022/07/07 11:15 p.m.15 views

Design/Logic Flaw

An arbitrary file upload vulnerability in the Select User function under the People Menu component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...

3.5CVSS5.6AI score0.0065EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/07/07 10:12 p.m.29 views

CVE-2022-32061

An arbitrary file upload vulnerability in the Select User function under the People Menu component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...

5.9AI score0.0065EPSS
SaveExploits1References1
CVE
CVE
added 2022/07/07 10:12 p.m.90 views

CVE-2022-32061

CVE-2022-32061 affects Snipe-IT v6.0.2: the vulnerability is an arbitrary file upload in the Select User function under the People Menu component, enabling an attacker to execute arbitrary code via a crafted file. The connected sources confirm the affected product and the basic impact but do not ...

4.8CVSS5.6AI score0.0065EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2022/07/01 8:15 p.m.4 views

ALPINE-CVE-2022-32084

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component subselect...

7.5CVSS7.3AI score0.01999EPSS
SaveExploits1References1
OSV
OSV
added 2022/07/01 8:15 p.m.5 views

UBUNTU-CVE-2022-32084

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component subselect...

7.5CVSS7.1AI score0.01999EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/07/01 12:0 a.m.5 views

MariaDB 安全漏洞

MariaDB is a free and open source database management system from the Mariadb Foundation and a version of the MySQL branch that uses the Maria storage engine.MariaDB has a security vulnerability that stems from a segmentation error found through the component stselectlexunit::excludelevel. No...

7.5CVSS5.3AI score0.01943EPSS
SaveExploits1References10
Github Security Blog
Github Security Blog
added 2022/06/29 10:8 p.m.40 views

Miscompilation of `i8x16.swizzle` and `select` with v128 inputs

Impact Wasmtime's implementation of the SIMD proposal for WebAssembly on x8664 contained two distinct bugs in the instruction lowerings implemented in Cranelift. The aarch64 implementation of the simd proposal is not affected. The bugs were presented in the i8x16.swizzle and select WebAssembly...

6.8CVSS5.9AI score0.01625EPSS
SaveExploits0References9Affected Software2
OSV
OSV
added 2022/06/29 10:8 p.m.95 views

GHSA-JQWC-C49R-4W2X Miscompilation of `i8x16.swizzle` and `select` with v128 inputs

Impact Wasmtime's implementation of the SIMD proposal for WebAssembly on x8664 contained two distinct bugs in the instruction lowerings implemented in Cranelift. The aarch64 implementation of the simd proposal is not affected. The bugs were presented in the i8x16.swizzle and select WebAssembly...

4.8CVSS5.6AI score0.01625EPSS
SaveExploits0References9
Rows per page
Query Builder