95 matches found
Cisco NX-OS Software Role-Based Access Arbitrary Command Execution (CVE-2018-0337)
A vulnerability in the role-based access-checking mechanisms of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on an affected device. The vulnerability exists because the affected software lacks proper input and validation checks for certain file...
SUSE: Security Advisory (SUSE-SU-2023:0337-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
AlmaLinux 9 : expat (ALSA-2023:0337)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:0337 advisory. - In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations...
CVE-2023-0337
creationtimestamp| type| source ---|---|--- 2023-01-17 18:23:47+00:00| seen| https://t.me/cibsecurity/56590 2025-04-04 19:36:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10543...
CVE-2023-0337 Cross-site Scripting (XSS) - Reflected in lirantal/daloradius
Cross-site Scripting XSS - Reflected in GitHub repository lirantal/daloradius prior to master-branch...
CVE-2023-0337 Cross-site Scripting (XSS) - Reflected in lirantal/daloradius
Cross-site Scripting XSS - Reflected in GitHub repository lirantal/daloradius prior to master-branch...
CVE-2023-0337
CVE-2023-0337 is a reflected Cross-site Scripting (XSS) vulnerability in daloRADIUS (lirantal/daloradius) prior to the master-branch. Concrete detail: a PoC shows XSS in acct-maintenance-cleanup.php, enabling arbitrary JavaScript in the victim’s browser when a user interacts with manipulated inpu...
CVE-2022-0337
Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. Chrome security severity: High...
CVE-2022-0337
Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. Chrome security severity: High...
CVE-2022-0337
CVE-2022-0337 is an information-disclosure vulnerability in Chrome’s File System Access API (window.showSaveFilePicker) caused by an inappropriate implementation. It affects Google Chrome on Windows prior to 97.0.4692.71 (and related Chromium-based browsers). Connected documents confirm that a cr...
CVE-2022-0337
Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. Chrome security severity: High...
CVE-2022-0337
creationtimestamp| type| source ---|---|--- 2022-03-19 12:09:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1686 2022-03-19 16:52:05+00:00| published-proof-of-concept| Telegram/is39w-43gnzZg3G03Yjkzji1brkGQqh4d2xqLN1XKHeCkbJG 2022-03-19 17:52:14+00:00| published-proof-of-concept...
Exploit for Exposure of Resource to Wrong Sphere in Google Chrome
🤝 Show your support - give a ⭐️ if you liked the content | SHARE...
Mageia: Security Advisory (MGASA-2014-0337)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2013-0337)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2017-0337)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2018-0337)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Backdoor.Win32.Small.vjt Code Execution
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/92ea873a2bbdaf0799d572bc4f30dc79.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Small.vjt Vulnerability: Unauthenticated Remote Command Execution Description: The...
CVE-2021-0337
creationtimestamp| type| source ---|---|--- 2021-02-10 20:41:40+00:00| seen| https://t.me/cibsecurity/23370...
CVE-2021-0337
CVE-2021-0337 affects Android (8.1–11) via moveInMediaStore in FileSystemProvider.java. A stale-metadata file exposure could enable local escalation of privilege with User execution privileges; exploitation does not require user interaction. Public technical details are limited in the provided do...