CVE-2024-0337

CVE-2024-0337 corresponds to an Open Redirect vulnerability in the Travelpayouts: All Travel Brands in One Place WordPress plugin. Connected data shows the issue arises from insufficient validation of the travelpayouts_redirect variable, enabling unauthenticated attackers to steer users to potent...

Important: Red Hat Security Advisory: RHACS 4.2 security update

Updated images are now available for Red Hat Advanced Cluster Security 4.2.4. The updated images includes security fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Rocky Linux 9 : expat (RLSA-2023:0337)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:0337 advisory. - In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory...

Cisco NX-OS Software Role-Based Access Arbitrary Command Execution (CVE-2018-0337)

A vulnerability in the role-based access-checking mechanisms of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on an affected device. The vulnerability exists because the affected software lacks proper input and validation checks for certain file...

SUSE: Security Advisory (SUSE-SU-2023:0337-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AlmaLinux 9 : expat (ALSA-2023:0337)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:0337 advisory. - In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations...

CVE-2023-0337

creationtimestamp| type| source ---|---|--- 2023-01-17 18:23:47+00:00| seen| https://t.me/cibsecurity/56590 2025-04-04 19:36:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10543...

CVE-2023-0337 Cross-site Scripting (XSS) - Reflected in lirantal/daloradius

Cross-site Scripting XSS - Reflected in GitHub repository lirantal/daloradius prior to master-branch...

CVE-2023-0337

CVE-2023-0337 is a reflected Cross-site Scripting (XSS) vulnerability in daloRADIUS (lirantal/daloradius) prior to the master-branch. Concrete detail: a PoC shows XSS in acct-maintenance-cleanup.php, enabling arbitrary JavaScript in the victim’s browser when a user interacts with manipulated inpu...

CVE-2023-0337 Cross-site Scripting (XSS) - Reflected in lirantal/daloradius

Cross-site Scripting XSS - Reflected in GitHub repository lirantal/daloradius prior to master-branch...

CVE-2022-0337

Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. Chrome security severity: High...

CVE-2022-0337

Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. Chrome security severity: High...

CVE-2022-0337

CVE-2022-0337 is an information-disclosure vulnerability in Chrome’s File System Access API (window.showSaveFilePicker) caused by an inappropriate implementation. It affects Google Chrome on Windows prior to 97.0.4692.71 (and related Chromium-based browsers). Connected documents confirm that a cr...

CVE-2022-0337

Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. Chrome security severity: High...

CVE-2022-0337

creationtimestamp| type| source ---|---|--- 2022-03-19 12:09:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1686 2022-03-19 16:52:05+00:00| published-proof-of-concept| Telegram/is39w-43gnzZg3G03Yjkzji1brkGQqh4d2xqLN1XKHeCkbJG 2022-03-19 17:52:14+00:00| published-proof-of-concept...

Exploit for Exposure of Resource to Wrong Sphere in Google Chrome

🤝 Show your support - give a ⭐️ if you liked the content | SHARE...

Mageia: Security Advisory (MGASA-2013-0337)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2014-0337)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2018-0337)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2017-0337)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...