Lucene search
+L

12012 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:24 p.m.8 views

Malicious code in Be.Vlaaոdеren.Basisrеgisters.ProjectiоnHandling.SqlStreamStore (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:24 p.m.7 views

Malicious code in Be.Vlaаnderen.Basisregisters.AggregateSoսrce.Testing.SqlStreamStore.Micrоsоft (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:24 p.m.7 views

Malicious code in Be.Vlaаոdеren.Basisrеgisters.BlobStore (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:23 p.m.9 views

Malicious code in Bе.Vlaanderen.Basisrеgisters.DataDog.Tracing.SqlStreamStore (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:23 p.m.7 views

Malicious code in Bе.Vlaanԁeren.Basisrеgisters.DataDоg.Tracing.SqlStreamStore (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:23 p.m.6 views

Malicious code in Bе.Vlaaոderen.Basіsregisters.CommandHandling.SqlStreаmStore (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:23 p.m.6 views

Malicious code in Bе.Vlaаոderen.Basisregisters.AggrеgateSource.Testing.SqlStreamStore (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2024/06/25 1:18 p.m.6 views

MAL-2024-3805 Malicious code in use-sync-external-store-shim (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:18 p.m.11 views

Malicious code in use-sync-external-store-shim (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0References1
OSV
OSV
added 2024/06/25 12:20 p.m.7 views

MAL-2024-2013 Malicious code in @ikea-aoa/component-store-selector (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:20 p.m.10 views

Malicious code in @ikea-aoa/component-store-selector (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Cvelist
Cvelist
added 2024/06/24 5:36 p.m.55 views

CVE-2023-49793 Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Zip files uploaded to the server endpoint of CodeChecker store are not properly sanitized. An attacker, using a path traversal attack, can load and display files on the machine o...

6.5CVSS0.0073EPSS
SaveExploits1References2
OSV
OSV
added 2024/06/24 4:18 p.m.33 views

GHSA-H26W-R4M5-8RRF CodeChecker has a Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`

Summary ZIP files uploaded to the server-side endpoint handling a CodeChecker store are not properly sanitized. An attacker can exercise a path traversal to make the CodeChecker server load and display files from an arbitrary location on the server machine. Details Target The vulnerable endpoint ...

6.5CVSS6.5AI score0.0073EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2024/06/24 4:18 p.m.36 views

CodeChecker has a Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`

Summary ZIP files uploaded to the server-side endpoint handling a CodeChecker store are not properly sanitized. An attacker can exercise a path traversal to make the CodeChecker server load and display files from an arbitrary location on the server machine. Details Target The vulnerable endpoint ...

6.5CVSS6.7AI score0.0073EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2024/06/24 12:00 a.m.10 views

CodeChecker Path Traversal Vulnerability

Codechecker is an analysis tool, defect database and viewer extension for Clang Static Analyzer and Clang Tidy. A security vulnerability exists in CodeChecker versions prior to 6.23, which stems from Zip files uploaded to the CodeChecker store server endpoint that are not properly cleaned...

6.5CVSS6.8AI score0.0073EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
added 2024/06/22 4:08 a.m.8 views

SUSE CVE-2022-48760

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix hang in usbkillurb by adding memory barriers The syzbot fuzzer has identified a bug in which processes hang waiting for usbkillurb to return. It turns out the issue is not unlinking the URB; that works just fine...

5.5CVSS6.5AI score0.00186EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
added 2024/06/22 3:34 a.m.9 views

SUSE CVE-2024-38591

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix deadlock on SRQ async events. xalock for SRQ table may be required in AEQ. Use xastoreirq/ xaeraseirq to avoid deadlock...

4.7CVSS6.5AI score0.00173EPSS
SaveExploits0References13
Cvelist
Cvelist
added 2024/06/21 10:18 a.m.37 views

CVE-2024-36489 tls: fix missing memory barrier in tls_init

In the Linux kernel, the following vulnerability has been resolved: tls: fix missing memory barrier in tlsinit In tlsinit, a write memory barrier is missing, and store-store reordering may cause NULL dereference in tlssetsockopt,getsockopt. CPU0 CPU1 ----- ----- // In tlsinit // In tlsctxcreate c...

0.00255EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2024/06/21 12:00 a.m.17 views

(Pwn2Own) Samsung Galaxy S23 Galaxy Store Deeplink Permissive List of Allowed Inputs Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S23 smartphones. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS7.2AI score
SaveExploits0
OSV
OSV
added 2024/06/20 12:15 p.m.7 views

DEBIAN-CVE-2022-48760

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix hang in usbkillurb by adding memory barriers The syzbot fuzzer has identified a bug in which processes hang waiting for usbkillurb to return. It turns out the issue is not unlinking the URB; that works just fine...

7.1CVSS5.5AI score0.00186EPSS
SaveExploits0References1
Rows per page
Query Builder