Lucene search
+L

150 matches found

The Hacker News
The Hacker News
added 2022/11/11 10:13 a.m.45 views

Multiple High-Severity Flaws Affect Widely Used OpenLiteSpeed Web Server Software

Multiple high-severity flaws have been uncovered in the open source OpenLiteSpeed Web Server as well as its enterprise variant that could be weaponized to achieve remote code execution. "By chaining and exploiting the vulnerabilities, adversaries could compromise the web server and gain fully...

8.8CVSS2.6AI score0.08663EPSS
Exploits3
Circl
Circl
added 2022/10/28 12:29 a.m.14 views

CVE-2022-0073

creationtimestamp| type| source ---|---|--- 2022-10-28 00:29:04+00:00| seen| https://t.me/cibsecurity/52187 2022-11-11 11:18:17+00:00| seen| https://t.me/thehackernews/2756 2022-11-11 14:15:05+00:00| seen| https://t.me/truesecator/3695 2025-03-19 15:48:49+00:00| seen|...

8.8CVSS8.3AI score0.08663EPSS
Exploits1References4
NVD
NVD
added 2022/10/27 8:15 p.m.19 views

CVE-2022-0073

Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1...

8.8CVSS0.08663EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2022/10/27 7:30 p.m.11 views

CVE-2022-0073 Authenticated Remote Code Execution in OpenLiteSpeed Web Server

Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1...

8.8CVSS8.8AI score0.08663EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/10/27 7:30 p.m.33 views

CVE-2022-0073 Authenticated Remote Code Execution in OpenLiteSpeed Web Server

Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1...

8.8CVSS8.9AI score0.08663EPSS
Exploits1References2
OSV
OSV
added 2022/10/27 7:30 p.m.15 views

CVE-2022-0073 Authenticated Remote Code Execution in OpenLiteSpeed Web Server

Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1...

8.8CVSS7.3AI score0.08663EPSS
Exploits1References5
CVE
CVE
added 2022/10/27 7:30 p.m.305 views

CVE-2022-0073

CVE-2022-0073 affects LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards. The vulnerability is an Improper Input Validation that enables Command Injection. Affected versions are OpenLiteSpeed Web Server 1.7.0.x up to 1.7.16.0 (and corresponding OpenLiteSpeed/LiteS...

8.8CVSS8.8AI score0.08663EPSS
In wildExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/10/27 12:0 a.m.48 views

CVE-2022-0073

Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

8.8CVSS7AI score0.08663EPSS
In wildExploits1References3
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.37 views

Mageia: Security Advisory (MGASA-2020-0073)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.9AI score0.08667EPSS
Exploits0References9
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.13 views

Mageia: Security Advisory (MGASA-2021-0073)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS6.6AI score0.00436EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.39 views

Mageia: Security Advisory (MGASA-2019-0073)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.5AI score0.64265EPSS
Exploits7References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.22 views

Mageia: Security Advisory (MGASA-2015-0073)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.4CVSS5.7AI score0.04502EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2022/01/12 12:0 a.m.31 views

RHEL 8 : cpio (RHSA-2022:0073)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:0073 advisory. The cpio packages provide the GNU cpio utility for creating and extracting archives, or copying files from one place to another. Security Fixes: cpio...

7.3CVSS6.5AI score0.00686EPSS
Exploits1References5
Circl
Circl
added 2021/06/10 2:57 a.m.6 views

CVE-2021-0073

creationtimestamp| type| source ---|---|--- 2021-06-10 02:57:06+00:00| published-proof-of-concept| Telegram/r44wcWu2yxm1BUEEX8apmPZqnhKuKA7N-F7pLYHD8RgD0qU...

7.8CVSS7.5AI score0.00246EPSS
Exploits0
OSV
OSV
added 2021/06/09 8:15 p.m.4 views

CVE-2021-0073

Insufficient control flow management in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.1AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2021/06/09 8:15 p.m.1 views

CVE-2021-0073

Insufficient control flow management in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.3AI score0.00246EPSS
Exploits0References2
CVE
CVE
added 2021/06/09 7:7 p.m.63 views

CVE-2021-0073

Intel Driver and Support Assistant (DSA) is affected by CVE-2021-0073: Insufficient control flow management before version 20.11.50.9 can allow an authenticated user to escalate privileges via local access. The issue lives in Intel DSA prior to 20.11.50.9, with a local, low-user-interaction requi...

7.8CVSS7.7AI score0.00246EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/12/09 12:0 a.m.18 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : doxygen Vulnerability (NS-SA-2020-0073)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has doxygen packages installed that are affected by a vulnerability: - Insufficient sanitization of the query parameter in templates/html/searchopensearch.php could lead to reflected cross-site scripting or iframe injection...

6.1CVSS6.1AI score0.01823EPSS
Exploits0References2
Circl
Circl
added 2020/05/08 12:27 p.m.13 views

CVE-2013-0073

creationtimestamp| type| source ---|---|--- 2020-05-08 12:27:08+00:00| seen| https://t.me/techpwnews/594 2022-06-03 18:49:29+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3644...

10CVSS4.8AI score0.29632EPSS
Exploits0References2
CVE
CVE
added 2020/04/17 6:20 p.m.164 views

CVE-2020-0073

The CVE-2020-0073 entry describes an out-of-bounds write in Android’s NFC processing, specifically in rw_t2t_handle_tlv_detect_rsp within rw_t2t_ndef.cc. The issue allows remote code execution over NFC with no privileges and no user interaction, per the description. Affected products/versions inc...

10CVSS9.2AI score0.01338EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder