Lucene search
K

4 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/09/13 6:17 a.m.2 views

Malicious code in internallib_v184 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f973437237f984373986f17f6783b8b0c9c0bb4c4967310a24517ac6601a3a4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2019/03/26 6:29 p.m.10 views

CVE-2019-3804

It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash...

7.5CVSS6.7AI score0.04307EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2019/03/26 12:0 a.m.23 views

CVE-2019-3804

It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash...

7.5CVSS7.4AI score0.04307EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2018/11/13 12:0 a.m.2 views

PT-2018-2889 · Red Hat +2 · Cockpit +3

Name of the Vulnerable Software and Affected Versions: Cockpit versions prior to 184 Description: The issue is caused by a buffer overflow in memory due to incorrect use of glib's base64 decode functionality. This can be exploited by a remote attacker using a specially crafted request with an...

7.8CVSS7.5AI score0.04307EPSS
Exploits0References25
Rows per page
Query Builder