Lucene search
+L

95 matches found

Tenable Nessus
Tenable Nessus
added 2023/07/25 12:0 a.m.20 views

Cisco NX-OS Software Role-Based Access Arbitrary Command Execution (CVE-2018-0337)

A vulnerability in the role-based access-checking mechanisms of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on an affected device. The vulnerability exists because the affected software lacks proper input and validation checks for certain file...

7.8CVSS7.2AI score0.00346EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/02/10 12:0 a.m.22 views

SUSE: Security Advisory (SUSE-SU-2023:0337-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.4AI score0.01417EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2023/01/25 12:0 a.m.45 views

AlmaLinux 9 : expat (ALSA-2023:0337)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:0337 advisory. - In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations...

7.5CVSS7.2AI score0.0226EPSS
SaveExploits1References2
Circl
Circl
added 2023/01/17 6:23 p.m.12 views

CVE-2023-0337

creationtimestamp| type| source ---|---|--- 2023-01-17 18:23:47+00:00| seen| https://t.me/cibsecurity/56590 2025-04-04 19:36:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10543...

6.1CVSS5.6AI score0.00468EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/01/17 12:0 a.m.11 views

CVE-2023-0337 Cross-site Scripting (XSS) - Reflected in lirantal/daloradius

Cross-site Scripting XSS - Reflected in GitHub repository lirantal/daloradius prior to master-branch...

5.8CVSS6.3AI score0.00468EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/01/17 12:0 a.m.38 views

CVE-2023-0337 Cross-site Scripting (XSS) - Reflected in lirantal/daloradius

Cross-site Scripting XSS - Reflected in GitHub repository lirantal/daloradius prior to master-branch...

5.8CVSS6.2AI score0.00468EPSS
SaveExploits1References2
CVE
CVE
added 2023/01/17 12:0 a.m.76 views

CVE-2023-0337

CVE-2023-0337 is a reflected Cross-site Scripting (XSS) vulnerability in daloRADIUS (lirantal/daloradius) prior to the master-branch. Concrete detail: a PoC shows XSS in acct-maintenance-cleanup.php, enabling arbitrary JavaScript in the victim’s browser when a user interacts with manipulated inpu...

6.1CVSS5.8AI score0.00468EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2023/01/02 11:15 p.m.29 views

CVE-2022-0337

Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. Chrome security severity: High...

6.5CVSS6.2AI score0.01277EPSS
SaveExploits2References2
OSV
OSV
added 2023/01/02 11:15 p.m.5 views

CVE-2022-0337

Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. Chrome security severity: High...

6.5CVSS5.8AI score0.01277EPSS
SaveExploits2References2
CVE
CVE
added 2023/01/02 12:0 a.m.789 views

CVE-2022-0337

CVE-2022-0337 is an information-disclosure vulnerability in Chrome’s File System Access API (window.showSaveFilePicker) caused by an inappropriate implementation. It affects Google Chrome on Windows prior to 97.0.4692.71 (and related Chromium-based browsers). Connected documents confirm that a cr...

6.5CVSS5.5AI score0.01277EPSS
SaveExploits2References2Affected Software1
Debian CVE
Debian CVE
added 2023/01/02 12:0 a.m.92 views

CVE-2022-0337

Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. Chrome security severity: High...

6.5CVSS5.9AI score0.01277EPSS
SaveExploits2
Circl
Circl
added 2022/03/19 12:9 p.m.8 views

CVE-2022-0337

creationtimestamp| type| source ---|---|--- 2022-03-19 12:09:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1686 2022-03-19 16:52:05+00:00| published-proof-of-concept| Telegram/is39w-43gnzZg3G03Yjkzji1brkGQqh4d2xqLN1XKHeCkbJG 2022-03-19 17:52:14+00:00| published-proof-of-concept...

6.5CVSS6.9AI score0.01277EPSS
SaveExploits2References8
GithubExploit
GithubExploit
added 2022/03/19 8:10 a.m.833 views

Exploit for Exposure of Resource to Wrong Sphere in Google Chrome

🤝 Show your support - give a ⭐️ if you liked the content | SHARE...

6.5CVSS6.5AI score0.01277EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.32 views

Mageia: Security Advisory (MGASA-2014-0337)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.37233EPSS
SaveExploits22References11
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.29 views

Mageia: Security Advisory (MGASA-2013-0337)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6AI score0.84424EPSS
SaveExploits0References8
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.25 views

Mageia: Security Advisory (MGASA-2017-0337)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.7AI score0.03211EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.23 views

Mageia: Security Advisory (MGASA-2018-0337)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.1AI score0.7372EPSS
SaveExploits0References9
Packet Storm
Packet Storm
added 2021/09/07 12:0 a.m.214 views

Backdoor.Win32.Small.vjt Code Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/92ea873a2bbdaf0799d572bc4f30dc79.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Small.vjt Vulnerability: Unauthenticated Remote Command Execution Description: The...

7.4AI score
SaveExploits0
Circl
Circl
added 2021/02/10 8:41 p.m.9 views

CVE-2021-0337

creationtimestamp| type| source ---|---|--- 2021-02-10 20:41:40+00:00| seen| https://t.me/cibsecurity/23370...

7.8CVSS7.5AI score0.00169EPSS
SaveExploits0References1
CVE
CVE
added 2021/02/10 4:48 p.m.140 views

CVE-2021-0337

CVE-2021-0337 affects Android (8.1–11) via moveInMediaStore in FileSystemProvider.java. A stale-metadata file exposure could enable local escalation of privilege with User execution privileges; exploitation does not require user interaction. Public technical details are limited in the provided do...

7.8CVSS7.6AI score0.00169EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder