Lucene search
+L

9779 matches found

Github Security Blog
Github Security Blog
•added 2024/06/27 2:49 a.m.•7 views

Malware in world-id-onchain-starter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Malwarebytes
Malwarebytes
•added 2024/06/26 10:55 a.m.•36 views

Malwarebytes Premium Security stops 100% of malware during AV Lab test

Malwarebytes Premium Security has maintained its long-running, perfect record in protecting users against online threats by blocking 100% of the malware samples deployed in the AV Lab Cybersecurity Foundation’s “Advanced In-The-Wild Malware Test.” For its performance in the May 2024 evaluation,...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 12:45 p.m.•4 views

Malicious code in havas-worldwide (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
osv_usn
osv_usn
•added 2024/06/24 10:11 a.m.•22 views

USN-6844-1 cups vulnerability

Rory McNamara discovered that when starting the cupsd server with a Listen configuration item, the cupsd process fails to validate if bind call passed. An attacker could possibly trick cupsd to perform an arbitrary chmod of the provided argument, providing world-writable access to the target...

6.7CVSS7AI score0.02421EPSS
SaveExploits1References2
Ubuntu
Ubuntu
•added 2024/06/24 10:11 a.m.•389 views

USN-6844-1: CUPS vulnerability

Rory McNamara discovered that when starting the cupsd server with a Listen configuration item, the cupsd process fails to validate if bind call passed. An attacker could possibly trick cupsd to perform an arbitrary chmod of the provided argument, providing world-writable access to the target...

6.7CVSS6AI score0.02421EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2024/06/24 12:00 a.m.•43 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS : CUPS vulnerability (USN-6844-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6844-1 advisory. Rory McNamara discovered that when starting the cupsd server with a Listen configuration item, the cupsd...

6.7CVSS6AI score0.02421EPSS
SaveExploits1References2
osv_mgasa
osv_mgasa
•added 2024/06/17 5:44 p.m.•27 views

MGASA-2024-0227 Updated cups packages fix security vulnerability

When starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the provided argument, providing world-writable access to the target...

6.7CVSS4.9AI score0.02421EPSS
SaveExploits1References3
Mageia
Mageia
•added 2024/06/17 5:44 p.m.•59 views

Updated cups packages fix security vulnerability

When starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the provided argument, providing world-writable access to the target...

6.7CVSS7AI score0.02421EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2024/06/13 3:51 a.m.•11 views

SUSE CVE-2024-35235

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the...

7.8CVSS7.3AI score0.02421EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
•added 2024/06/13 12:00 a.m.•25 views

Debian dla-3826 : cups - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3826 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3826-1 [email protected] https://www.debian.org/lts/security/...

6.7CVSS6AI score0.02421EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2024/06/12 12:40 a.m.•28 views

CVE-2024-35235

A flaw was found in the cupsd server. When starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can perform an arbitrary chmod of the provided argument, providing world-writable access to the target. Since cupsd is often running as root, this...

4.4CVSS4.9AI score0.02421EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2024/06/12 12:00 a.m.•28 views

RHEL 9 : rpm-ostree (RHSA-2024:3823)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3823 advisory. The rpm-ostree tool binds together the RPM packaging model with the OSTree model of bootable file system trees. It provides commands that can be used...

6.2CVSS6.6AI score0.00328EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2024/06/11 7:50 p.m.•28 views

Moderate: Red Hat Security Advisory: rpm-ostree security update

An update for rpm-ostree is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

6.2CVSS6.6AI score0.00328EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2024/06/11 7:50 p.m.•13 views

rpm-ostree: world-readable /etc/shadow file

A security vulnerability has been discovered within rpm-ostree, pertaining to the /etc/shadow file in default builds having the world-readable bit enabled. This issue arises from the default permissions being set at a higher level than recommended, potentially exposing sensitive authentication da...

6.2CVSS6.4AI score0.00328EPSS
SaveExploits0References5
NVD
NVD
•added 2024/06/11 3:16 p.m.•34 views

CVE-2024-35235

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the...

6.7CVSS0.02421EPSS
SaveExploits1References9
osv_debian
osv_debian
•added 2024/06/11 3:16 p.m.•14 views

DEBIAN-CVE-2024-35235

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the...

6.7CVSS5.3AI score0.02421EPSS
SaveExploits1References1
osv_alpine
osv_alpine
•added 2024/06/11 3:16 p.m.•10 views

ALPINE-CVE-2024-35235

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the...

6.7CVSS7.2AI score0.02421EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/06/11 2:13 p.m.•45 views

CVE-2024-35235 Cupsd Listen arbitrary chmod 0140777

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the...

4.4CVSS5.4AI score0.02421EPSS
SaveExploits1References11
Cvelist
Cvelist
•added 2024/06/11 2:13 p.m.•52 views

CVE-2024-35235 Cupsd Listen arbitrary chmod 0140777

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the...

4.4CVSS0.02421EPSS
SaveExploits1References8
AlpineLinux
AlpineLinux
•added 2024/06/11 2:13 p.m.•58 views

CVE-2024-35235

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the...

6.7CVSS5.9AI score0.02421EPSS
SaveExploits1
Rows per page
Query Builder