Lucene search
+L

3124 matches found

osv_cve
osv_cve
•added 2020/08/21 6:15 p.m.•24 views

CVE-2020-15147

Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to...

8.5CVSS8.7AI score
SaveExploits0References3
NVD
NVD
•added 2020/08/21 6:15 p.m.•35 views

CVE-2020-15147

Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to...

8.5CVSS8.7AI score0.02614EPSS
SaveExploits0References3
PyPA
PyPA
•added 2020/08/21 6:15 p.m.•17 views

PYSEC-2020-266

Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to...

8.5CVSS7.5AI score0.02614EPSS
SaveExploits0References3Affected Software1
osv_pysec
osv_pysec
•added 2020/08/21 6:15 p.m.•18 views

PYSEC-2020-266

Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to...

8.5CVSS5.8AI score0.02614EPSS
SaveExploits0References3
Prion
Prion
•added 2020/08/21 6:15 p.m.•26 views

Remote code execution

Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to...

6CVSS8.5AI score0.02614EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2020/08/21 5:15 p.m.•5 views

CVE-2020-15147

Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to...

9CVSS0.02614EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2020/08/21 5:15 p.m.•52 views

CVE-2020-15147 Remote Code Execution in Red Discord Bot

Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to...

8.5CVSS8.7AI score0.02614EPSS
SaveExploits0References3
CVE
CVE
•added 2020/08/21 5:15 p.m.•110 views

CVE-2020-15147

CVE-2020-15147 affects Red Discord Bot prior to versions 3.3.12 and 3.4, where the Streams module is vulnerable to remote code execution via crafted going-live messages. The underlying issue allows an attacker (Discord user) to inject code into the Streams going-live message, enabling destructive...

8.5CVSS8.6AI score0.02614EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2020/08/21 5:03 p.m.•175 views

Remote Code Execution in Red Discord Bot

Impact A RCE exploit has been discovered in the Streams module: this exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to perform destructive actions and/or access...

8.5CVSS2.2AI score0.02614EPSS
SaveExploits0References6Affected Software1
osv_ghsa
osv_ghsa
•added 2020/08/21 5:03 p.m.•81 views

GHSA-7257-96VG-QF6X Remote Code Execution in Red Discord Bot

Impact A RCE exploit has been discovered in the Streams module: this exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to perform destructive actions and/or access...

8.5CVSS8.5AI score0.02614EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/21 12:00 a.m.•7 views

CVE-2020-15147: Improper Control of Generation of Code

Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to...

8.5CVSS5.8AI score0.02614EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/08/21 12:00 a.m.•5 views

PT-2020-14226

Name of the Vulnerable Software and Affected Versions Red Discord Bot versions prior to 3.3.12 and 3.4 Description The issue allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message, potentially leading to destructive actions...

8.5CVSS0.02614EPSS
SaveExploits0References9
CNVD
CNVD
•added 2020/08/17 12:00 a.m.•18 views

IBM Event Streams Authorization Issues Vulnerability

IBM Event Streams is a set of event streaming platform based on Apache Kafka project from IBM, USA. The platform is mainly used for Apache Kafka deployment, authentication and encrypted communication and other functions. An authorization issue vulnerability exists in the schema registry in IBM...

8.8CVSS7AI score0.01291EPSS
SaveExploits0References1
NVD
NVD
•added 2020/08/14 1:15 p.m.•25 views

CVE-2020-4662

IBM Event Streams 10.0.0 could allow an authenticated user to perform tasks to a schema due to improper authentication validation. IBM X-Force ID: 186233...

8.8CVSS6.9AI score0.01291EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2020/08/14 1:15 p.m.•17 views

CVE-2020-4662

IBM Event Streams 10.0.0 could allow an authenticated user to perform tasks to a schema due to improper authentication validation. IBM X-Force ID: 186233...

8.8CVSS5.8AI score0.01291EPSS
SaveExploits0References2
Prion
Prion
•added 2020/08/14 1:15 p.m.•24 views

Authentication flaw

IBM Event Streams 10.0.0 could allow an authenticated user to perform tasks to a schema due to improper authentication validation. IBM X-Force ID: 186233...

6.5CVSS8.2AI score0.01291EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2020/08/14 12:40 p.m.•54 views

CVE-2020-4662

Summary : IBM Event Streams 10.0.0 schema registry contains a vulnerability due to improper authentication validation that could allow an authenticated user to perform tasks on a schema (create, edit, delete) without proper authorization. Impact : unauthorized schema operations; CVSSv3 base 8.8 (...

8.8CVSS8.3AI score0.01291EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/08/14 12:40 p.m.•40 views

CVE-2020-4662

IBM Event Streams 10.0.0 could allow an authenticated user to perform tasks to a schema due to improper authentication validation. IBM X-Force ID: 186233...

6.5CVSS8.3AI score0.01291EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/08/14 12:00 a.m.•6 views

PT-2020-18193

Name of the Vulnerable Software and Affected Versions IBM Event Streams version 10.0.0 Description The issue is related to improper authentication validation, which could allow an authenticated user to perform tasks on a schema. Recommendations For IBM Event Streams version 10.0.0, update to a...

8.8CVSS0.01291EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/14 12:00 a.m.•9 views

CVE-2020-4662: Improper Authentication

IBM Event Streams 10.0.0 could allow an authenticated user to perform tasks to a schema due to improper authentication validation. IBM X-Force ID: 186233...

8.8CVSS5.8AI score0.01291EPSS
SaveExploits0References2
Rows per page
Query Builder