Lucene search
+L

9372 matches found

CNNVD
CNNVD
•added 2022/01/28 12:00 a.m.•16 views

Lg Electronics Lg WebOs 安全漏洞

Lg Electronics Lg WebOs is a Linux kernel-based smart TV operating system from Lg Electronics, a South Korean company. A security vulnerability exists in Lg Electronics Lg WebOs, which stems from a setup environment error and can be exploited by a local attacker by performing certain actions...

7.8CVSS7.3AI score0.00226EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•9 views

Mageia: Security Advisory (MGASA-2015-0116)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References4
Veracode
Veracode
•added 2022/01/23 5:39 p.m.•34 views

Cross-Site Scripting (XSS)

phpmyadmin is vulnerable to cross-site scripting. The vulnerability exists due to a lack of escape of the config-form's action attribute. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection...

6.1CVSS6.1AI score0.07936EPSS
SaveExploits2References5Affected Software1
OSV
OSV
•added 2022/01/22 2:15 a.m.•6 views

DEBIAN-CVE-2022-23808

An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection...

6.1CVSS6.4AI score0.07936EPSS
SaveExploits2References1
NVD
NVD
•added 2022/01/22 2:15 a.m.•18 views

CVE-2022-23808

An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection...

6.1CVSS0.07936EPSS
SaveExploits2References3
OSV
OSV
•added 2022/01/22 2:15 a.m.•11 views

UBUNTU-CVE-2022-23808

An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection...

6.1CVSS6.4AI score0.07936EPSS
SaveExploits2References5
Prion
Prion
•added 2022/01/22 2:15 a.m.•26 views

Design/Logic Flaw

An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection...

4.3CVSS6AI score0.07936EPSS
SaveExploits2References3Affected Software1
UbuntuCve
UbuntuCve
•added 2022/01/22 2:15 a.m.•48 views

CVE-2022-23808

An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection...

6.1CVSS6.4AI score0.07936EPSS
SaveExploits2References4
Debian CVE
Debian CVE
•added 2022/01/22 12:00 a.m.•101 views

CVE-2022-23808

An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection...

6.1CVSS6.4AI score0.07936EPSS
SaveExploits2
Cvelist
Cvelist
•added 2022/01/22 12:00 a.m.•57 views

CVE-2022-23808

An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection...

6.4AI score0.07936EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/22 12:00 a.m.•3 views

CVE-2022-23808: Improper Neutralization of Input During Web Page Generation

An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection...

6.1CVSS6.4AI score0.07936EPSS
SaveExploits2References3
AlpineLinux
AlpineLinux
•added 2022/01/22 12:00 a.m.•155 views

CVE-2022-23808

An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection...

6.1CVSS6.4AI score0.07936EPSS
SaveExploits2
CVE
CVE
•added 2022/01/20 4:09 p.m.•78 views

CVE-2021-44736

Lexmark devices are affected by CVE-2021-44736: the initial admin account setup wizard permits unauthenticated access to the out of service erase feature, enabling unauthenticated control over a device function. The issue is documented in multiple sources (ZDI advisory ZDI-22-331; Tenable OT plug...

10CVSS9.4AI score0.02215EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2022/01/20 12:00 a.m.•21 views

Lexmark 授权问题漏洞

Lexmark is a family of printers in the United States. An authorization issue vulnerability exists in Lexmark devices, which arises from the product's initial administrative account setup wizard allowing an unauthenticated user's access to the out-of-service erase function...

10CVSS8.3AI score0.02215EPSS
SaveExploits0References4
Prion
Prion
•added 2022/01/19 1:15 a.m.•33 views

Xxe

In a Junos Fusion scenario an External Control of Critical State Data vulnerability in the Satellite Device SD control state machine of Juniper Networks Junos OS allows an attacker who is able to make physical changes to the cabling of the device to cause a denial of service DoS. An SD can get...

4.6CVSS6.5AI score0.00245EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2022/01/15 5:15 p.m.•16 views

CVE-2021-42555

Pexip Infinity before 26.2 allows temporary remote Denial of Service abort because of missing call-setup input validation...

7.5CVSS5.8AI score0.01245EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/01/15 5:15 p.m.•11 views

CVE-2021-42555

Pexip Infinity before 26.2 allows temporary remote Denial of Service abort because of missing call-setup input validation...

7.5CVSS5.8AI score0.01245EPSS
SaveExploits0References2
OSV
OSV
•added 2022/01/15 5:15 p.m.•18 views

CVE-2021-35969

Pexip Infinity before 26 allows temporary remote Denial of Service abort because of missing call-setup input validation...

7.5CVSS7.2AI score0.01245EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/15 12:00 a.m.•2 views

CVE-2021-42555: Improper Input Validation

Pexip Infinity before 26.2 allows temporary remote Denial of Service abort because of missing call-setup input validation...

7.5CVSS5.8AI score0.01245EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/15 12:00 a.m.•5 views

CVE-2021-35969: Improper Input Validation

Pexip Infinity before 26 allows temporary remote Denial of Service abort because of missing call-setup input validation...

7.5CVSS5.8AI score0.01245EPSS
SaveExploits0References2
Rows per page
Query Builder