Lucene search
+L

1269 matches found

Github Security Blog
Github Security Blog
•added 2022/05/05 12:29 a.m.•62 views

Features file injection vulnerability

File injection vulnerability in Ruby gem Features 0.3.0 allows remote attackers to inject malicious html in the /tmp directory...

5.4CVSS3.9AI score0.0081EPSS
SaveExploits1References5Affected Software1
Github Security Blog
Github Security Blog
•added 2022/05/01 2:00 a.m.•34 views

Cheetah Path Search Order Hijacking

Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/...

7.2CVSS7.5AI score0.00437EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2022/05/01 2:00 a.m.•37 views

GHSA-VXF2-7RC3-PXMX Cheetah Path Search Order Hijacking

Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/...

7.2CVSS7AI score0.00437EPSS
SaveExploits0References3
OSV
OSV
•added 2022/04/23 12:40 a.m.•67 views

GHSA-V5C9-98F7-2H54 Hadoop symlink vulnerability

Hadoop 1.0.3 contains a symlink vulnerability as a result of storing pid files in the shared /tmp directory by default...

7.5CVSS7.4AI score0.02671EPSS
SaveExploits2References5
OSV
OSV
•added 2022/04/12 8:15 p.m.•10 views

AZL-9357 CVE-2022-27378 affecting package mariadb for versions less than 10.6.8-1

An issue in the component Createtmptable::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...

7.5CVSS7.2AI score0.02406EPSS
SaveExploits1References1
OSV
OSV
•added 2022/04/12 8:15 p.m.•12 views

UBUNTU-CVE-2022-27378

An issue in the component Createtmptable::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...

7.5CVSS7.2AI score0.02406EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/04/07 1:35 a.m.•44 views

CVE-2022-27818

SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname. There can be an information leak or denial of service...

9.3AI score0.01808EPSS
SaveExploits0References3
OSV
OSV
•added 2022/04/07 1:35 a.m.•22 views

CVE-2022-27818

SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname. There can be an information leak or denial of service...

9AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/07 12:00 a.m.•1 views

CVE-2022-27818: Exposure of Resource to Wrong Sphere

SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname. There can be an information leak or denial of service...

9.1CVSS7.9AI score0.01808EPSS
SaveExploits0References2
CNVD
CNVD
•added 2022/04/07 12:00 a.m.•78 views

SWHKD has unspecified vulnerabilities (CNVD-2022-43218)

SWHKD is a display protocol-independent hotkey daemon made with Rust. A security vulnerability exists in SWHKD, which stems from the insecure use of the /tmp/swhkd.sock pathname. An attacker could exploit the vulnerability to obtain sensitive information or launch a denial-of-service attack...

9.1CVSS2.1AI score0.01808EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/04/01 12:00 a.m.•57 views

SWHKD Denial of Service Vulnerability

SWHKD is a display protocol independent hotkey daemon made in Rust. A denial of service vulnerability exists in SWHKD version 1.1.5, which stems from the insecure use of the /tmp/swhks.pid pathname and can be exploited by an attacker to potentially cause a denial of service...

7.1CVSS6.7AI score0.005EPSS
SaveExploits1References1
OSV
OSV
•added 2022/03/31 12:00 a.m.•22 views

GHSA-8M49-2XJ8-67V9 Data Loss/Denial of Service in SWHKD

SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service. A patch is available on the 1.1.0 branch of the repository...

7.1CVSS6.8AI score0.005EPSS
SaveExploits1References5
GitLab Advisory Database
GitLab Advisory Database
•added 2022/03/31 12:00 a.m.•13 views

Data Loss/Denial of Service in SWHKD

SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service. A patch is available on the 1.1.0 branch of the repository...

7.1CVSS7.1AI score0.005EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2022/03/30 2:15 a.m.•30 views

CVE-2022-27816

SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service...

7.1CVSS0.005EPSS
SaveExploits1References3
Prion
Prion
•added 2022/03/30 2:15 a.m.•14 views

Denial of service

SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service...

3.3CVSS6.8AI score0.005EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
•added 2022/03/30 2:15 a.m.•5 views

CVE-2022-27816

SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service...

7.1CVSS7AI score0.005EPSS
SaveExploits1References4
NVD
NVD
•added 2022/03/30 12:15 a.m.•31 views

CVE-2022-27815

SWHKD 1.1.5 unsafely uses the /tmp/swhkd.pid pathname. There can be an information leak or denial of service...

7.8CVSS0.00514EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/03/30 12:00 a.m.•12 views

SWHKD 后置链接漏洞

SWHKD is a display protocol independent hotkey daemon made in Rust. A denial of service vulnerability exists in SWHKD version 1.1.5, which stems from the insecure use of the /tmp/swhks.pid pathname and can be exploited by an attacker to potentially cause a denial of service...

7.1CVSS5.7AI score0.005EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/30 12:00 a.m.•2 views

CVE-2022-27816: Improper Link Resolution Before File Access

SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service...

7.1CVSS7.3AI score0.005EPSS
SaveExploits1References2
CVE
CVE
•added 2022/03/29 11:21 p.m.•102 views

CVE-2022-27815

Affected software: SWHKD 1.1.5 and older. Vulnerability: Unsafe use of the /tmp/swhkd.pid pathname can lead to information leakage or denial of service. The issue stems from placing the pid file in /tmp, which is world-accessible. Impact (as described): Information disclosure and denial of servic...

7.8CVSS7.4AI score0.00514EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder