Lucene search
+L

4131 matches found

osv-gsd
osv-gsd
•added 2023/01/17 6:48 p.m.•19 views

GSD-2023-1001170 drm/mediatek: Modify dpi power on/off sequence.

drm/mediatek: Modify dpi power on/off sequence. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

7.2AI score
SaveExploits0
osv-gsd
osv-gsd
•added 2023/01/17 3:57 p.m.•14 views

GSD-2023-1000060 ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event

ALSA: seq: Fix function prototype mismatch in sndseqexpandvarevent This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.13 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/01/17 12:00 a.m.•2 views

PT-2023-33850

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to the drm/mediatek component, specifically concerning the modification of the DPI power on/off sequence. The actual impact and potential for attack have not been proven...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/01/17 12:00 a.m.•2 views

PT-2023-34247

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to the drm/mediatek component, specifically concerning the modification of the DPI power on/off sequence. The actual impact and potential for attack have not been proven...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/01/17 12:00 a.m.•2 views

PT-2023-34550

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the drm/mediatek component, specifically concerning the modification of the dpi power on/off sequence. The actual impact and potential for attack have not been proven...

5.8AI score
SaveExploits0References1
NVD
NVD
•added 2023/01/13 8:15 p.m.•30 views

CVE-2015-10040

A vulnerability was found in gitlearn. It has been declared as problematic. This vulnerability affects the function getGrade/getOutOf of the file scripts/config.sh of the component Escape Sequence Handler. The manipulation leads to injection. The attack can be initiated remotely. The patch is...

6.5CVSS6.3AI score0.00778EPSS
SaveExploits1References4
Prion
Prion
•added 2023/01/13 8:15 p.m.•27 views

Design/Logic Flaw

A vulnerability was found in gitlearn. It has been declared as problematic. This vulnerability affects the function getGrade/getOutOf of the file scripts/config.sh of the component Escape Sequence Handler. The manipulation leads to injection. The attack can be initiated remotely. The patch is...

4CVSS7.9AI score0.00778EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2023/01/13 7:22 p.m.•36 views

CVE-2015-10040 gitlearn Escape Sequence config.sh getOutOf injection

A vulnerability was found in gitlearn. It has been declared as problematic. This vulnerability affects the function getGrade/getOutOf of the file scripts/config.sh of the component Escape Sequence Handler. The manipulation leads to injection. The attack can be initiated remotely. The patch is...

5.5CVSS7AI score0.00778EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2023/01/13 7:22 p.m.•39 views

CVE-2015-10040 gitlearn Escape Sequence config.sh getOutOf injection

A vulnerability was found in gitlearn. It has been declared as problematic. This vulnerability affects the function getGrade/getOutOf of the file scripts/config.sh of the component Escape Sequence Handler. The manipulation leads to injection. The attack can be initiated remotely. The patch is...

5.5CVSS7.5AI score0.00778EPSS
SaveExploits1References4
Mend
Mend
•added 2023/01/13 7:22 p.m.•3 views

CVE-2015-10040

A vulnerability was found in gitlearn. It has been declared as problematic. This vulnerability affects the function getGrade/getOutOf of the file scripts/config.sh of the component Escape Sequence Handler. The manipulation leads to injection. The attack can be initiated remotely. The patch is...

6.5CVSS0.00778EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/01/13 12:00 a.m.•15 views

PT-2023-10219 · Gitlearn · Gitlearn

Name of the Vulnerable Software and Affected Versions: gitlearn affected versions not specified Description: A vulnerability was found in the function getGrade/getOutOf of the file scripts/config.sh of the component Escape Sequence Handler. This issue leads to injection and can be initiated...

6.5CVSS5.9AI score0.00778EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/01/13 12:00 a.m.•17 views

gitlearn 注入漏洞

gitlearn is an open source learning management system by Mike Izbicki, a personal developer. gitlearn suffers from an injection vulnerability that originates in the getGrade/getOutOf function of the file scripts/config.sh of the component Escape Sequence Handler, which is manipulated to cause...

6.5CVSS5.8AI score0.00778EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/13 12:00 a.m.•5 views

CVE-2015-10040: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A vulnerability was found in gitlearn. It has been declared as problematic. This vulnerability affects the function getGrade/getOutOf of the file scripts/config.sh of the component Escape Sequence Handler. The manipulation leads to injection. The attack can be initiated remotely. The patch is...

6.5CVSS5.2AI score0.00778EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/01/05 12:00 a.m.•20 views

GPAC MP4Box 安全漏洞

GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, etc. A security vulnerability exists in GPAC MP4Box version 2.1-DEV-rev593-g007bf61a0, which stems from...

7.8CVSS8AI score0.0032EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2023/01/03 11:30 a.m.•98 views

PXEThief - Set Of Tooling That Can Extract Passwords From The Operating System Deployment Functionality In Microsoft Endpoint Configuration Manager

PXEThief is a set of tooling that implements attack paths discussed at the DEF CON 30 talk Pulling Passwords out of Configuration Manager https://forum.defcon.org/node/241925 against the Operating System Deployment functionality in Microsoft Endpoint Configuration Manager or ConfigMgr, still...

7.2AI score
SaveExploits0References2
GithubExploit
GithubExploit
•added 2023/01/03 9:49 a.m.•322 views

Exploit for Cross-Site Request Forgery (CSRF) in Filebrowser

CVE-2021-46398 - Lalie ARNOUD, Gaspard ANDRIEU In this reposi...

8.8CVSS9.3AI score0.06663EPSS
SaveExploits6
F5 Networks
F5 Networks
•added 2022/12/31 1:23 a.m.•52 views

K64571774: BIG-IP virtual server TCP sequence numbers vulnerability CVE-2020-5947

Security Advisory Description On specific BIG-IP platforms, attackers may be able to obtain TCP sequence numbers from the BIG-IP system that can be reused in future connections with the same source and destination port and IP numbers. CVE-2020-5947 Impact Attackers may be able to spoof TCP packet...

4.3CVSS4.8AI score0.00697EPSS
SaveExploits0Affected Software14
Positive Technologies
Positive Technologies
•added 2022/12/26 12:00 a.m.•20 views

PT-2025-37631

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue within the block, bfq subsystem, specifically related to bfqq in the bfq exit icq bfqq function. The commit 64dc8c732f5c addresses this b...

7.8CVSS6.3AI score0.00169EPSS
SaveExploits0
NVD
NVD
•added 2022/12/22 8:15 p.m.•28 views

CVE-2022-34476

ASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the parser accepting malformed ASN.1. This vulnerability affects Firefox 102...

9.8CVSS0.00692EPSS
SaveExploits0References2
OSV
OSV
•added 2022/12/22 8:15 p.m.•11 views

CVE-2022-34476

ASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the parser accepting malformed ASN.1. This vulnerability affects Firefox 102...

9.8CVSS7.4AI score0.00692EPSS
SaveExploits0References2
Rows per page
Query Builder