Lucene search
+L

139 matches found

Cvelist
Cvelist
added 2022/02/28 9:06 a.m.33 views

CVE-2022-0360 WP Ultimate CSV Importer < 6.4.3 - Admin+ Stored Cross-Site Scripting

The Easy Drag And drop All Import : WP Ultimate CSV Importer WordPress plugin before 6.4.3 does not sanitise and escaped imported comments, which could allow high privilege users to import malicious ones either intentionnaly or not and lead to Stored Cross-Site Scripting issues...

5.1AI score0.00647EPSS
SaveExploits2References2
CVE
CVE
added 2022/02/28 9:06 a.m.123 views

CVE-2022-0360

CVE-2022-0360 affects the WordPress plugin WP Ultimate CSV Importer (versions prior to 6.4.3). The root cause is failure to sanitise and escape imported comments, enabling stored Cross-Site Scripting (XSS) by high-privilege users who import malicious comments. Documented evidence shows an admin+ ...

4.8CVSS4.8AI score0.00647EPSS
SaveExploits2References2Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.28 views

Mageia: Security Advisory (MGASA-2015-0155)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.9AI score0.92109EPSS
SaveExploits13References6
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.27 views

Mageia: Security Advisory (MGASA-2017-0360)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.01849EPSS
SaveExploits3References5
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.23 views

Mageia: Security Advisory (MGASA-2020-0360)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.1AI score0.03044EPSS
SaveExploits7References7
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.25 views

Mageia: Security Advisory (MGASA-2016-0360)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS8.9AI score0.25198EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.28 views

Mageia: Security Advisory (MGASA-2021-0360)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.9AI score0.23132EPSS
SaveExploits1References6
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.22 views

SUSE: Security Advisory (SUSE-SU-2018:2232-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.4AI score0.02703EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.18 views

SUSE: Security Advisory (SUSE-SU-2020:0360-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.01025EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.40 views

SUSE: Security Advisory (SUSE-SU-2018:2323-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.03551EPSS
SaveExploits0References8
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2018:2323-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.03551EPSS
SaveExploits0References8
Circl
Circl
added 2021/02/03 2:29 a.m.8 views

CVE-2021-0360

creationtimestamp| type| source ---|---|--- 2021-02-03 02:29:33+00:00| seen| https://t.me/cibsecurity/22996...

6.7CVSS6.4AI score0.00155EPSS
SaveExploits0References1
CVE
CVE
added 2021/02/02 11:01 p.m.63 views

CVE-2021-0360

CVE-2021-0360 concerns an out-of-bounds write in the netdiag component caused by an incorrect bounds check. According to the provided documents, this could allow local escalation of privilege with System execution privileges, and does not require user interaction. Affected products listed are And...

6.7CVSS6.7AI score0.00155EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/09/17 8:53 p.m.56 views

CVE-2020-0360

CVE-2020-0360 affects Android 11, involving a permissions bypass in Notification Access Confirmation that could enable local elevation of privilege with user execution privileges needed. Exploitation requires user interaction. The issue is listed under Android 11 vulnerability details and is addr...

7.8CVSS8.2AI score0.00439EPSS
SaveExploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/02/11 9:31 p.m.17 views

Security Bulletin: Security vulnerabilities have been identified in Websphere Application Server shipped with Predictive Customer Intelligence (CVE-2016-0360, CVE-2017-1151)

Summary Websphere Application Server is shipped with Predictive Customer Intelligence. Information about security vulnerabilities affecting Websphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletins Security Bulletin:...

9.8CVSS1.7AI score0.0241EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/04/11 12:00 a.m.46 views

GLSA-201904-12 : ClamAV: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201904-12 ClamAV: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ClamAV. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

9.8CVSS6.4AI score0.02703EPSS
SaveExploits3References10
Tenable Nessus
Tenable Nessus
added 2019/03/27 12:00 a.m.41 views

openSUSE Security Update : clamav (openSUSE-2019-598)

This update for clamav to version 0.100.1 fixes the following issues: The following security vulnerabilities were addressed : - CVE-2018-0360: HWP integer overflow, infinite loop vulnerability bsc1101410 - CVE-2018-0361: PDF object length check, unreasonably long time to parse relatively small fi...

5.5CVSS6.5AI score0.02703EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2019/01/02 12:00 a.m.37 views

SUSE SLED15 / SLES15 Security Update : clamav (SUSE-SU-2018:2230-1)

This update for clamav to version 0.100.1 fixes the following issues: The following security vulnerabilities were addressed : - CVE-2018-0360: HWP integer overflow, infinite loop vulnerability bsc1101410 - CVE-2018-0361: PDF object length check, unreasonably long time to parse relatively small fi...

5.5CVSS6.5AI score0.02703EPSS
SaveExploits0References9
OpenVAS
OpenVAS
added 2018/10/26 12:00 a.m.32 views

openSUSE: Security Advisory for clamav (openSUSE-SU-2018:2259-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS5.2AI score0.02703EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2018/10/22 12:00 a.m.32 views

SUSE SLES12 Security Update : clamav (SUSE-SU-2018:2323-2)

This update for clamav to version 0.100.1 fixes the following issues : The following security vulnerabilities were addressed : CVE-2018-0360: HWP integer overflow, infinite loop vulnerability bsc1101410 CVE-2018-0361: PDF object length check, unreasonably long time to parse relatively small file...

6.5CVSS6.7AI score0.03551EPSS
SaveExploits0References14
Rows per page
Query Builder