Lucene search
K

194 matches found

vulnersOsv
vulnersOsv
added 2026/03/20 12:0 p.m.0 views

graph-generator-lib (>=0.1.0 <=0.1.10), libunftp (>=0.6.0 <=0.6.1) +7 more potentially affected by unknown CVE via tokio-compat (=0.1.6)

tokio-compat CARGO version =0.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on tokio-compat and may be impacted: - graph-generator-lib =0.1.0, =0.6.0, =0.1.0, =0.1.3 - parity-runtime =0.1.2 - price-info =1.12.0 - rudolfs =0.2.11 - sccache =0.2.15 -...

5.8AI score
Exploits0
RedhatCVE
RedhatCVE
added 2026/01/09 11:18 a.m.4 views

CVE-2021-0062

Improper input validation in some IntelR Graphics Drivers before version 27.20.100.8935 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7AI score0.00058EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:37 a.m.5 views

CVE-1999-0062

The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage...

7.2CVSS7.1AI score0.0006EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/02 6:30 p.m.2 views

EUVD-2026-0062

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

5.5AI score
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-0062

Malicious code in bioql PyPI...

8CVSS6.4AI score0.00955EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/22 3:57 p.m.4 views

CVE-2020-0062

In Euicc, there is a possible information disclosure due to an included test Certificate. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-14323203...

7.5CVSS8.1AI score0.00548EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/13 6:7 p.m.5 views

CVE-2025-0062

SAP BusinessObjects Business Intelligence Platform allows an attacker to inject JavaScript code in Web Intelligence reports. This code is then executed in the victim's browser each time the vulnerable page is visited by the victim. On successful exploitation, an attacker could cause limited impac...

4.7CVSS4.9AI score0.00163EPSS
Exploits0References1
CVE
CVE
added 2025/03/11 12:31 a.m.46 views

CVE-2025-0062

SAP BusinessObjects BI Platform Web Intelligence is affected by CVE-2025-0062: a cross-site scripting vulnerability allowing an attacker to inject JavaScript in Web Intelligence reports. The issue arises when script/html execution is enabled by the Central Management Console administrator. Exploi...

4.7CVSS7.1AI score0.00163EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/01/09 12:0 a.m.16 views

RHEL 8 : kernel (RHSA-2025:0062)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:0062 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: gro: fix ownership transfer...

5.5CVSS6.8AI score0.00029EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2024/03/15 12:0 a.m.23 views

Mageia: Security Advisory (MGASA-2024-0062)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.6AI score0.00071EPSS
Exploits9References3
The Hacker News
The Hacker News
added 2023/10/11 4:12 a.m.97 views

Microsoft Warns of Nation-State Hackers Exploiting Critical Atlassian Confluence Vulnerability

Microsoft has linked the exploitation of a recently disclosed critical flaw in Atlassian Confluence Data Center and Server to a nation-state actor it tracks as Storm-0062 aka DarkShadow or Oro0lxy. The tech giant's threat intelligence team said it observed in-the-wild abuse of the vulnerability...

10CVSS9.1AI score0.94326EPSS
Exploits39
Circl
Circl
added 2023/02/06 10:23 p.m.2 views

CVE-2023-0062

creationtimestamp| type| source ---|---|--- 2023-02-06 22:23:23+00:00| seen| https://t.me/cibsecurity/57573...

5.4CVSS5.5AI score0.00198EPSS
Exploits2References1
OSV
OSV
added 2023/02/06 8:15 p.m.2 views

CVE-2023-0062

The EAN for WooCommerce WordPress plugin before 4.4.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.4CVSS5.8AI score0.00198EPSS
Exploits2References1
Cvelist
Cvelist
added 2023/02/06 7:59 p.m.12 views

CVE-2023-0062 EAN for WooCommerce < 4.4.3 - Contributor+ Stored XSS

The EAN for WooCommerce WordPress plugin before 4.4.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.6AI score0.00198EPSS
Exploits2References1
Vulnrichment
Vulnrichment
added 2023/02/06 7:59 p.m.5 views

CVE-2023-0062 EAN for WooCommerce < 4.4.3 - Contributor+ Stored XSS

The EAN for WooCommerce WordPress plugin before 4.4.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

6.1AI score0.00198EPSS
Exploits2References1
CVE
CVE
added 2023/02/06 7:59 p.m.61 views

CVE-2023-0062

CVE-2023-0062 affects the WordPress plugin “EAN for WooCommerce” prior to version 4.4.3. The vulnerability arises because the plugin does not validate and escape certain shortcode attributes before echoing them on pages/posts containing the shortcode, enabling stored XSS for users with the Contri...

5.4CVSS5.3AI score0.00198EPSS
Exploits2References1Affected Software1
Patchstack
Patchstack
added 2023/01/11 12:0 a.m.9 views

WordPress EAN for WooCommerce Plugin < 4.4.3 is vulnerable to Cross Site Scripting (XSS)

Software EAN for WooCommerce Type Plugin Vulnerable versions 4.4.3 Fixed in 4.4.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0062 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID efcc1edc10be Credits Lana Codes...

5.4CVSS5.9AI score0.00198EPSS
Exploits2References4Affected Software1
Lenovo
Lenovo
added 2022/09/19 5:30 p.m.32 views

Intel Graphics Drivers Advisory - Lenovo Support US

No description provided...

7.8CVSS6.1AI score0.0017EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2022/07/28 12:0 a.m.3 views

PT-2022-15631 · Synology · Synology Webdav Server

Name of the Vulnerable Software and Affected Versions: Synology WebDAV Server versions prior to 2.4.0-0062 Description: The issue is related to an improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability, in the webapi component. This allows remo...

8.7CVSS7.7AI score0.00951EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.28 views

Mageia: Security Advisory (MGASA-2015-0062)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.6AI score0.01388EPSS
Exploits0References6
Rows per page
Query Builder