Lucene search
+L

12 matches found

BDU FSTEC
BDU FSTEC
•added 2026/09/30 12:00 a.m.•7 views

Linux Kernel mac80211 Stack Heap Buffer Overflow DoS

The vulnerability of the function ieee80211invokefastrx in the module net/mac80211/rx.c, part of the mac80211 stack in the Linux operating system, is related to the control element that is called in a multi-threaded context with a non-final static element or member. Exploiting this vulnerability...

8.8CVSS7AI score0.00237EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/07/07 12:00 a.m.•33 views

Linux kernel Pageattr Component DoS

The vulnerability of the pageattr.c component in the Linux operating system’s kernel is related to the use of blocking code in a single-threaded, non-blocking context. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.1CVSS6.5AI score0.00211EPSS
SaveExploits0References11Affected Software4
CNVD
CNVD
•added 2023/11/15 12:00 a.m.•84 views

Unsynchronized Access to Shared Data Vulnerability in Multiple Siemens Products in a Multi-Threaded Context

The SCALANCE M-800, MUM-800 and S615 and the RUGGEDCOM RM1224 are industrial routers.The SCALANCE W products are wireless communication devices for connecting industrial components, such as Programmable Logic Controllers PLCs or Human Machine Interfaces HMIs, that comply with the IEEE 802.11...

8.8CVSS7AI score0.00666EPSS
SaveExploits0References1
Prion
Prion
•added 2023/08/23 9:15 p.m.•32 views

Design/Logic Flaw

shescape is simple shell escape library for JavaScript. This may impact users that use Shescape on Windows in a threaded context. The vulnerability can result in Shescape escaping or quoting for the wrong shell, thus allowing attackers to bypass protections depending on the combination of expecte...

5CVSS8.6AI score0.00675EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2023/08/23 8:20 p.m.•14 views

CVE-2023-40185 Shescape on Windows escaping may be bypassed in threaded context

shescape is simple shell escape library for JavaScript. This may impact users that use Shescape on Windows in a threaded context. The vulnerability can result in Shescape escaping or quoting for the wrong shell, thus allowing attackers to bypass protections depending on the combination of expecte...

6.5CVSS6.8AI score0.00675EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2023/08/23 8:20 p.m.•62 views

CVE-2023-40185 Shescape on Windows escaping may be bypassed in threaded context

shescape is simple shell escape library for JavaScript. This may impact users that use Shescape on Windows in a threaded context. The vulnerability can result in Shescape escaping or quoting for the wrong shell, thus allowing attackers to bypass protections depending on the combination of expecte...

6.5CVSS8.8AI score0.00675EPSS
SaveExploits1References4
CVE
CVE
•added 2023/08/23 8:20 p.m.•94 views

CVE-2023-40185

CVE-2023-40185 affects the JavaScript library shescape. In Windows threaded contexts, shescape may escape or quote for the wrong shell, potentially bypassing protections intended for shell commands. The issue has been patched in version 1.7.4. Public references from multiple sources (GitHub advis...

8.6CVSS7.4AI score0.00675EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2023/08/23 8:20 p.m.•6 views

CVE-2023-40185

shescape is simple shell escape library for JavaScript. This may impact users that use Shescape on Windows in a threaded context. The vulnerability can result in Shescape escaping or quoting for the wrong shell, thus allowing attackers to bypass protections depending on the combination of expecte...

8.6CVSS0.00675EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/23 12:00 a.m.•8 views

CVE-2023-40185: Improper Neutralization of Escape, Meta, or Control Sequences

shescape is simple shell escape library for JavaScript. This may impact users that use Shescape on Windows in a threaded context. The vulnerability can result in Shescape escaping or quoting for the wrong shell, thus allowing attackers to bypass protections depending on the combination of expecte...

8.6CVSS7.6AI score0.00675EPSS
SaveExploits1References2
osv_ghsa
osv_ghsa
•added 2023/08/22 6:00 p.m.•104 views

GHSA-J55R-787P-M549 Shescape on Windows escaping may be bypassed in threaded context

Impact This may impact users that use Shescape on Windows in a threaded context e.g. using Worker threads. The vulnerability can result in Shescape escaping or quoting for the wrong shell, thus allowing attackers to bypass protections depending on the combination of expected and used shell. This...

8.6CVSS7.4AI score0.00675EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2023/08/22 12:00 a.m.•18 views

PT-2023-27313 · Shescape · Shescape

Name of the Vulnerable Software and Affected Versions: Shescape versions prior to 1.7.4 Description: The issue affects users of Shescape on Windows in a threaded context, allowing attackers to bypass protections by exploiting Shescape's failure to correctly escape for the expected shell. This can...

8.6CVSS8.5AI score0.00675EPSS
SaveExploits1References9
CNVD
CNVD
•added 2021/11/16 12:00 a.m.•32 views

Dell PowerScale OneFS Denial of Service Vulnerability

Dell PowerScale OneFS is the PowerScale OneFS operating system that provides horizontal scaling NAS. A security vulnerability exists in Dell PowerScale OneFS that stems from Dell PowerScale OneFS containing asynchronous access to shared data in the context of multi-threaded SMB CA processing. An...

6.5CVSS6.7AI score0.00832EPSS
SaveExploits0References1
Rows per page
Query Builder