Lucene search
+L

3675 matches found

Code423n4
Code423n4
added 2022/07/17 12:0 a.m.13 views

limits_.sum is not increased yet when performing limit check. Collateral may exceed the limit.

Lines of code Vulnerability details Impact limits.sum is not increased yet when performing limit check. Collateral may exceed the limit. There is a limit on how much collateral can be concurrently put at auction, but it is a soft limit. If the limit has been surpassed, no more vaults of that...

6.8AI score
SaveExploits0
Rapid7 Blog
Rapid7 Blog
added 2022/07/12 6:20 p.m.16 views

The Forecast Is Flipped: Flipping L&D to Ensure Continuous Growth

At Rapid7, we staunchly believe that our people are central to upholding our mission and embodying our core values to ultimately drive our customers into a more secure future. For this reason, Rapid7 works tediously to ensure that our Moose have ample opportunities to learn and grow in their...

7AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2022/06/30 9:7 p.m.79 views

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

7.8CVSS6.7AI score0.05524EPSS
SaveExploits2References3
Rockylinux
Rockylinux
added 2022/06/28 10:52 a.m.62 views

kernel security and bug fix update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

7.8CVSS7.7AI score0.05524EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2022/06/15 12:0 a.m.46 views

EulerOS 2.0 SP9 : nss (EulerOS-SA-2022-1871)

According to the versions of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Improper refcounting of soft token session objects could cause a use-after-free and crash likely limited to a denial of service. This vulnerability...

8.8CVSS8AI score0.01501EPSS
SaveExploits0References2
OSV
OSV
added 2022/05/24 5:26 p.m.26 views

GHSA-C7W7-9C85-4QXV OpenStack Nova Live migration fails to update persistent domain XML

An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a soft reboot of an instance that has previously undergone live migration, a user may gain access to destination host devices that share the same paths ...

8.7CVSS8.2AI score0.01729EPSS
SaveExploits1References11
Github Security Blog
Github Security Blog
added 2022/05/24 5:26 p.m.37 views

OpenStack Nova Live migration fails to update persistent domain XML

An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a soft reboot of an instance that has previously undergone live migration, a user may gain access to destination host devices that share the same paths ...

8.3CVSS6.8AI score0.01729EPSS
SaveExploits1References11Affected Software1
OSV
OSV
added 2022/05/17 7:57 p.m.40 views

GHSA-237Q-6HJP-PCHQ JBoss KeyCloak is vulnerable to soft token deletion via CSRF

JBoss KeyCloak is vulnerable to soft token deletion via CSRF. This issue is fixed in Keycloak 1.0.2.Final...

4.3CVSS4.3AI score0.00456EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2022/05/17 7:57 p.m.31 views

JBoss KeyCloak is vulnerable to soft token deletion via CSRF

JBoss KeyCloak is vulnerable to soft token deletion via CSRF. This issue is fixed in Keycloak 1.0.2.Final...

4.3CVSS4.8AI score0.00456EPSS
SaveExploits0References8Affected Software1
Rockylinux
Rockylinux
added 2022/05/17 7:9 a.m.19 views

new packages: openal-soft

An update is available for openal-soft. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

2.2AI score
SaveExploits0
zdt
zdt
added 2022/05/17 12:0 a.m.183 views

T-Soft E-Commerce 4 - (UrunAdi) Stored Cross-Site Scripting Vulnerability

Exploit Title: T-Soft E-Commerce 4 - 'UrunAdi' Stored Cross-Site Scripting XSS Exploit Author: Alperen Ergel alpernae IG/TW Web Site: https://alperenae.gitbook.io/ Software Homepage: https://www.tsoft.com.tr/ Version : v4 Tested on: Kali Linux Category: WebApp Google Dork: N/A CVE :N/A Descriptio...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2022/05/17 12:0 a.m.183 views

T-Soft E-Commerce 4 Cross Site Scripting

Exploit Title: T-Soft E-Commerce 4 - 'UrunAdi' Stored Cross-Site Scripting XSS Exploit Author: Alperen Ergel alpernae IG/TW Web Site: https://alperenae.gitbook.io/ Software Homepage: https://www.tsoft.com.tr/ Version : v4 Tested on: Kali Linux Category: WebApp Google Dork: N/A Date: 2022-05-10 CV...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2022/05/17 12:0 a.m.210 views

T-Soft E-Commerce 4 - 'UrunAdi' Stored Cross-Site Scripting (XSS)

Exploit Title: T-Soft E-Commerce 4 - 'UrunAdi' Stored Cross-Site Scripting XSS Exploit Author: Alperen Ergel alpernae IG/TW Web Site: https://alperenae.gitbook.io/ Software Homepage: https://www.tsoft.com.tr/ Version : v4 Tested on: Kali Linux Category: WebApp Google Dork: N/A Date: 2022-05-10 CV...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2022/05/17 12:0 a.m.220 views

T-Soft E-Commerce 4 SQL Injection

Exploit Title: T-Soft E-Commerce 4 - SQLi Authenticated Exploit Author: Alperen Ergel Contact: @alpernae IG/TW Software Homepage: https://www.tsoft.com.tr/ Version : v4 Tested on: Kali Linux Category: WebApp Google Dork: N/A CVE: 2022-28132 Date: 18.02.2022 Description Step-1: Login as Admin or...

SaveExploits0
Sick AG
Sick AG
added 2022/05/16 10:0 a.m.16 views

Vulnerability in SICK Flexi Soft Designer & Safety Designer

A deserialization vulnerability in a .NET framework class used by both SICK Flexi Soft Designer and SICK Safety Designer allows an attacker to create malicious project files...

8.6CVSS7AI score0.00352EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/05/02 12:0 a.m.56 views

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2022-006 (ALASKERNEL-5.4-2022-006)

The version of kernel installed on the remote host is prior to 5.4.141-67.229. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-006 advisory. A flaw was found in the Linux kernel. This flaw allows attackers to cause a denial of service soft lockup b...

9.8CVSS6.5AI score0.01497EPSS
SaveExploits4References66
NVD
NVD
added 2022/04/29 5:15 p.m.19 views

CVE-2022-1402

ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read condition...

7.8CVSS0.00824EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/29 5:15 p.m.6 views

CVE-2022-1402

ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read condition...

7.1CVSS7.1AI score0.00824EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/29 5:15 p.m.4 views

CVE-2022-1403

ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds write condition...

7.8CVSS5.8AI score0.00824EPSS
SaveExploits0References1
NVD
NVD
added 2022/04/29 5:15 p.m.27 views

CVE-2022-1403

ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds write condition...

7.8CVSS0.00824EPSS
SaveExploits0References1
Rows per page
Query Builder