Lucene search
+L

1363 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/07 12:00 a.m.•2 views

CVE-2022-27818: Exposure of Resource to Wrong Sphere

SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname. There can be an information leak or denial of service...

9.1CVSS7.9AI score0.01808EPSS
SaveExploits0References2
CNVD
CNVD
•added 2022/04/07 12:00 a.m.•79 views

SWHKD has unspecified vulnerabilities (CNVD-2022-43218)

SWHKD is a display protocol-independent hotkey daemon made with Rust. A security vulnerability exists in SWHKD, which stems from the insecure use of the /tmp/swhkd.sock pathname. An attacker could exploit the vulnerability to obtain sensitive information or launch a denial-of-service attack...

9.1CVSS2.1AI score0.01808EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/04/01 12:00 a.m.•64 views

SWHKD Denial of Service Vulnerability

SWHKD is a display protocol independent hotkey daemon made in Rust. A denial of service vulnerability exists in SWHKD version 1.1.5, which stems from the insecure use of the /tmp/swhks.pid pathname and can be exploited by an attacker to potentially cause a denial of service...

7.1CVSS6.7AI score0.005EPSS
SaveExploits1References1
OSV
OSV
•added 2022/03/31 12:00 a.m.•22 views

GHSA-8M49-2XJ8-67V9 Data Loss/Denial of Service in SWHKD

SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service. A patch is available on the 1.1.0 branch of the repository...

7.1CVSS6.8AI score0.005EPSS
SaveExploits1References5
GitLab Advisory Database
GitLab Advisory Database
•added 2022/03/31 12:00 a.m.•16 views

Data Loss/Denial of Service in SWHKD

SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service. A patch is available on the 1.1.0 branch of the repository...

7.1CVSS7.1AI score0.005EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2022/03/30 2:15 a.m.•33 views

CVE-2022-27816

SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service...

7.1CVSS0.005EPSS
SaveExploits1References3
Prion
Prion
•added 2022/03/30 2:15 a.m.•14 views

Denial of service

SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service...

3.3CVSS6.8AI score0.005EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
•added 2022/03/30 2:15 a.m.•6 views

CVE-2022-27816

SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service...

7.1CVSS7AI score0.005EPSS
SaveExploits1References4
NVD
NVD
•added 2022/03/30 12:15 a.m.•34 views

CVE-2022-27815

SWHKD 1.1.5 unsafely uses the /tmp/swhkd.pid pathname. There can be an information leak or denial of service...

7.8CVSS0.00514EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/03/30 12:00 a.m.•16 views

SWHKD 后置链接漏洞

SWHKD is a display protocol independent hotkey daemon made in Rust. A denial of service vulnerability exists in SWHKD version 1.1.5, which stems from the insecure use of the /tmp/swhks.pid pathname and can be exploited by an attacker to potentially cause a denial of service...

7.1CVSS5.7AI score0.005EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/30 12:00 a.m.•4 views

CVE-2022-27816: Improper Link Resolution Before File Access

SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service...

7.1CVSS7.3AI score0.005EPSS
SaveExploits1References2
CVE
CVE
•added 2022/03/29 11:21 p.m.•104 views

CVE-2022-27815

Affected software: SWHKD 1.1.5 and older. Vulnerability: Unsafe use of the /tmp/swhkd.pid pathname can lead to information leakage or denial of service. The issue stems from placing the pid file in /tmp, which is world-accessible. Impact (as described): Information disclosure and denial of servic...

7.8CVSS7.4AI score0.00514EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2022/03/29 11:21 p.m.•50 views

CVE-2022-27815

SWHKD 1.1.5 unsafely uses the /tmp/swhkd.pid pathname. There can be an information leak or denial of service...

7.7AI score0.00514EPSS
SaveExploits1References3
OSV
OSV
•added 2022/03/29 11:21 p.m.•27 views

CVE-2022-27815

SWHKD 1.1.5 unsafely uses the /tmp/swhkd.pid pathname. There can be an information leak or denial of service...

7.5AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/29 12:00 a.m.•3 views

CVE-2022-27815: Improper Link Resolution Before File Access

SWHKD 1.1.5 unsafely uses the /tmp/swhkd.pid pathname. There can be an information leak or denial of service...

7.8CVSS7.3AI score0.00514EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/03/29 12:00 a.m.•18 views

SWHKD 后置链接漏洞

SWHKD is a display protocol independent hotkey daemon made in Rust. A security vulnerability exists in SWHKD version 1.1.5, which stems from the insecure use of the /tmp/swhkd.pid pathname, resulting in information disclosure or denial of service...

7.8CVSS7.3AI score0.00514EPSS
SaveExploits1References5
OSV
OSV
•added 2022/03/18 11:15 a.m.•29 views

CVE-2021-22571

A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging process before the files are loaded in BigQuery. We recommend upgrading to version 1.0.3 or above...

5.5CVSS6.3AI score
SaveExploits0References3
NVD
NVD
•added 2022/03/18 11:15 a.m.•40 views

CVE-2021-22571

A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging process before the files are loaded in BigQuery. We recommend upgrading to version 1.0.3 or above...

5.5CVSS0.00204EPSS
SaveExploits0References3
Prion
Prion
•added 2022/03/18 11:15 a.m.•28 views

Design/Logic Flaw

A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging process before the files are loaded in BigQuery. We recommend upgrading to version 1.0.3 or above...

2.1CVSS5.2AI score0.00204EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2022/03/18 11:05 a.m.•42 views

CVE-2021-22571 Information Leak in SA360-webquery-bigquery through read on /tmp

A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging process before the files are loaded in BigQuery. We recommend upgrading to version 1.0.3 or above...

5.5CVSS5.5AI score0.00204EPSS
SaveExploits0References3
Rows per page
Query Builder