Lucene search
+L

195 matches found

OpenVAS
OpenVAS
added 2023/11/20 12:0 a.m.23 views

Fedora: Security Advisory for podman-tui (FEDORA-2023-e359fd31d2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.05623EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/11/19 12:0 a.m.35 views

Fedora 38 : podman-tui (2023-e359fd31d2)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-e359fd31d2 advisory. podman-tui v0.12.0 + security fix for CVE-2023-39325 and CVE-2022-41717 and CVE-2022-41723 Tenable has extracted the preceding description block...

7.5CVSS7.2AI score0.05623EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2023/11/19 12:0 a.m.26 views

Fedora 39 : podman-tui (2023-327346caa5)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-327346caa5 advisory. podman-tui v0.12.0 + security fix for CVE-2023-39325 and CVE-2022-41717 and CVE-2022-41723 Tenable has extracted the preceding description block...

7.5CVSS7.2AI score0.05623EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2023/11/19 12:0 a.m.32 views

Fedora 37 : podman-tui (2023-a5a5542890)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-a5a5542890 advisory. podman-tui v0.12.0 + security fix for CVE-2023-39325 and CVE-2022-41717 and CVE-2022-41723 Tenable has extracted the preceding description block...

7.5CVSS7.2AI score0.05623EPSS
SaveExploits0References4
vulnersOsv
vulnersOsv
added 2023/08/07 12:0 p.m.5 views

RustLibrary (>=0.1.0 <=0.2.0), RustyBox (=0.1.0) +411 more potentially affected by unknown CVE via tui (>=0.10.0 <=0.9.5)

tui CARGO version =0.10.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.2, =0.1.6, =0.1.0, =0.1.0, =0.0.9, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0049...

5.7AI score
SaveExploits0
NVD
NVD
added 2023/08/04 5:15 p.m.41 views

CVE-2023-38688

twitch-tui provides Twitch chat in a terminal. Prior to version 2.4.1, the connection is not using TLS for communication. In the configuration of the irc connection, the software disables TLS, which makes all communication to Twitch IRC servers unencrypted. As a result, communication, including...

7.5CVSS7.5AI score0.00427EPSS
SaveExploits0References3
Prion
Prion
added 2023/08/04 5:15 p.m.24 views

Design/Logic Flaw

twitch-tui provides Twitch chat in a terminal. Prior to version 2.4.1, the connection is not using TLS for communication. In the configuration of the irc connection, the software disables TLS, which makes all communication to Twitch IRC servers unencrypted. As a result, communication, including...

5CVSS7.4AI score0.00427EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/08/04 4:18 p.m.45 views

CVE-2023-38688 twitch-tui's connection is not encrypted

twitch-tui provides Twitch chat in a terminal. Prior to version 2.4.1, the connection is not using TLS for communication. In the configuration of the irc connection, the software disables TLS, which makes all communication to Twitch IRC servers unencrypted. As a result, communication, including...

7.5CVSS7.7AI score0.00427EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/08/04 4:18 p.m.15 views

CVE-2023-38688 twitch-tui's connection is not encrypted

twitch-tui provides Twitch chat in a terminal. Prior to version 2.4.1, the connection is not using TLS for communication. In the configuration of the irc connection, the software disables TLS, which makes all communication to Twitch IRC servers unencrypted. As a result, communication, including...

7.5CVSS7.5AI score0.00427EPSS
SaveExploits0References3
CVE
CVE
added 2023/08/04 4:18 p.m.75 views

CVE-2023-38688

CVE-2023-38688 affects twitch-tui prior to version 2.4.1, where the IRC connection was configured to disable TLS, leaving Twitch IRC traffic unencrypted. The root cause is the absence of encryption in the IRC channel setup, which can expose sensitive data such as authentication tokens to sniffing...

7.5CVSS7.4AI score0.00427EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/08/04 4:18 p.m.37 views

CVE-2023-38688 twitch-tui's connection is not encrypted

twitch-tui provides Twitch chat in a terminal. Prior to version 2.4.1, the connection is not using TLS for communication. In the configuration of the irc connection, the software disables TLS, which makes all communication to Twitch IRC servers unencrypted. As a result, communication, including...

7.5CVSS7.3AI score0.00427EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/08/04 12:0 a.m.6 views

twitch-tui security vulnerability

twitch-tui is a terminal chat application from the individual developers at Xithrius. A security vulnerability exists in twitch-tui that stems from the fact that the software disables TLS in the configuration of irc connections, which results in all communication with the Twitch IRC server being...

7.5CVSS6.8AI score0.00427EPSS
SaveExploits0References4
OSV
OSV
added 2023/07/31 10:2 p.m.79 views

GHSA-779W-XVPM-78JX twitch-tui's connection is not encrypted

Summary The connection is not using TLS for communication Details In the configuration of the irc connection, you are disabling tls which makes all communication to twitch irc servers unencrypted. PoC You can verify by using tcpdump/wireshark that traffic is unencrypted. Impact Communication can ...

7.5CVSS7.5AI score0.00427EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2023/07/31 10:2 p.m.22 views

twitch-tui's connection is not encrypted

Summary The connection is not using TLS for communication Details In the configuration of the irc connection, you are disabling tls which makes all communication to twitch irc servers unencrypted. PoC You can verify by using tcpdump/wireshark that traffic is unencrypted. Impact Communication can ...

7.5CVSS6.9AI score0.00427EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/31 12:0 a.m.6 views

PT-2023-26552 · Unknown · Twitch-Tui

Name of the Vulnerable Software and Affected Versions: twitch-tui versions prior to 2.4.1 Description: The issue arises from the software's configuration of the IRC connection, which disables TLS, resulting in unencrypted communication to Twitch IRC servers. This allows communication, including...

7.5CVSS7.4AI score0.00427EPSS
SaveExploits0References8
OSV
OSV
added 2023/05/04 9:15 p.m.5 views

CVE-2023-21509

Out-of-bounds Write vulnerability while processing BCTUICMDUPDATESCREEN in bctui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code...

7.8CVSS7.3AI score0.0019EPSS
SaveExploits0References1
OSV
OSV
added 2023/05/04 9:15 p.m.6 views

CVE-2023-21507

Out-of-bounds Read vulnerability while processing BCTUICMDSENDRESOURCEDATAARRAY command in bctui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to read arbitrary memory...

5.5CVSS6.2AI score0.00171EPSS
SaveExploits0References1
NVD
NVD
added 2023/05/04 9:15 p.m.20 views

CVE-2023-21499

Out-of-bounds write vulnerability in TACommunicationmposencryptpin in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code...

8.2CVSS8.3AI score0.0019EPSS
SaveExploits0References1
NVD
NVD
added 2023/05/04 9:15 p.m.18 views

CVE-2023-21500

Double free validation vulnerability in setPinPadImages in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the trustlet memory...

6CVSS5.9AI score0.00171EPSS
SaveExploits0References1
NVD
NVD
added 2023/05/04 9:15 p.m.21 views

CVE-2023-21497

Use of externally-controlled format string vulnerability in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the memory address...

7.8CVSS5.5AI score0.00179EPSS
SaveExploits0References1
Rows per page
Query Builder