Lucene search
+L

145 matches found

CVE
CVE
added 2024/01/13 7:31 p.m.59 views

CVE-2024-0501

CVE-2024-0501 affects SourceCodester House Rental Management System 1.0, targeting the Manage Invoice Details function. The vulnerability arises from user-controlled input in the Invoice parameter, enabling cross-site scripting. Exploitation is possible remotely and has been disclosed publicly (V...

4.8CVSS4.9AI score0.00502EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2024/01/13 7:31 p.m.44 views

CVE-2024-0501 SourceCodester House Rental Management System Manage Invoice Details cross site scripting

A vulnerability has been found in SourceCodester House Rental Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Manage Invoice Details. The manipulation of the argument Invoice leads to cross site scripting. The attack...

3.3CVSS5.2AI score0.00502EPSS
SaveExploits1References3
CVE
CVE
added 2023/03/27 3:37 p.m.56 views

CVE-2023-0501

CVE-2023-0501 affects the WordPress plugin WP Insurance (versions before 2.1.4). The vulnerability is a lack of CSRF validation when activating plugins, which could let an attacker trigger a CSRF attack that causes logged-in admins to activate arbitrary plugins. Root cause: missing CSRF protectio...

6.5CVSS6.3AI score0.00307EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2023/03/27 3:37 p.m.28 views

CVE-2023-0501 WP Insurance < 2.1.4 - Arbitrary Plugin Activation via CSRF

The WP Insurance WordPress plugin before 2.1.4 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack...

6.6AI score0.00307EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2023/03/27 3:37 p.m.6 views

CVE-2023-0501 WP Insurance < 2.1.4 - Arbitrary Plugin Activation via CSRF

The WP Insurance WordPress plugin before 2.1.4 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack...

6.3AI score0.00307EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2022/11/18 12:00 a.m.41 views

MariaDB 10.0.0 < 10.0.18 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.0.18. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.18 advisory. - The compilebranch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of...

7.8CVSS7AI score0.09915EPSS
SaveExploits2References10
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/26 5:45 a.m.31 views

Security Bulletin: Potential security exposure when using InfoSphere BigInsights due to vulnerability in Java JDK Version 6

Abstract IBM InfoSphere BigInsights makes use of Java Development Kit JDK Version 6. An unspecified vulnerability affecting availability has been identified in IBM Java 6 that may affect InfoSphere BigInsights. Content VULNERABILITY DETAILS: CVE-2012-0501 DESCRIPTION: An unspecified vulnerability...

5CVSS8AI score0.03617EPSS
SaveExploits1Affected Software1
OpenVAS
OpenVAS
added 2022/04/21 12:00 a.m.24 views

Slackware: Security Advisory (SSA:2015-132-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.7CVSS6.5AI score0.09915EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/21 12:00 a.m.26 views

Slackware: Security Advisory (SSA:2015-132-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.7CVSS6.5AI score0.09915EPSS
SaveExploits0References2
Circl
Circl
added 2022/02/05 6:32 p.m.13 views

CVE-2022-0501

creationtimestamp| type| source ---|---|--- 2022-02-05 18:32:18+00:00| seen| https://t.me/cibsecurity/36923...

8.6CVSS7.1AI score0.0087EPSS
SaveExploits1References1
CVE
CVE
added 2022/02/05 3:55 p.m.101 views

CVE-2022-0501

CVE-2022-0501 is a reflected cross-site scripting vulnerability in ptrofimov/beanstalk_console reported to affect versions prior to 1.7.12. The root cause is insufficient sanitization in include.php, enabling arbitrary JavaScript execution in the context of the application. Impact is browser-base...

8.6CVSS6.2AI score0.0087EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/02/05 3:55 p.m.49 views

CVE-2022-0501 Cross-site Scripting (XSS) - Reflected in ptrofimov/beanstalk_console

Cross-site Scripting XSS - Reflected in Packagist ptrofimov/beanstalkconsole prior to 1.7.12...

8.6CVSS6.1AI score0.0087EPSS
SaveExploits1References2
OSV
OSV
added 2022/02/05 3:55 p.m.29 views

CVE-2022-0501 Cross-site Scripting (XSS) - Reflected in ptrofimov/beanstalk_console

Cross-site Scripting XSS - Reflected in Packagist ptrofimov/beanstalkconsole prior to 1.7.12...

8.6CVSS7.8AI score
SaveExploits0References4
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.33 views

SUSE: Security Advisory (SUSE-SU-2012:0603-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.9AI score0.98113EPSS
SaveExploits35References5
Tenable Nessus
Tenable Nessus
added 2020/11/06 12:00 a.m.31 views

Cisco Webex Meetings Desktop App Arbitrary Code Execution Vulnerability (cisco-sa-webex-vdi-qQrpBwuJ)

According to its self-reported version, Cisco Webex Meetings Desktop App is prior to version 40.6.9, or is 40.8.x prior to 40.8.9 and thus, is affected by a remote code execution vulnerability. An unspecified flaw exists related to the virtualization channel interface that can allow a local...

7.8CVSS8.5AI score0.0041EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2020/03/12 6:15 p.m.5 views

CVE-2020-0501

Buffer overflow in IntelR Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable a denial of service via local access...

5.5CVSS5.4AI score0.00335EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2020/03/12 5:42 p.m.85 views

CVE-2020-0501

CVE-2020-0501 is a buffer-overflow flaw in Intel Graphics Drivers for Windows prior to 26.20.100.6912 that could let an authenticated local user cause a denial of service. Affected products include Intel Graphics Drivers on Windows for multiple generations; remediation is to update to a newer dri...

5.5CVSS5.1AI score0.00335EPSS
SaveExploits0References2Affected Software1
ThreatPost
ThreatPost
added 2020/03/10 6:08 p.m.64 views

High-Severity Flaws Plague Intel Graphics Drivers

Intel has issued security patches for six high-severity vulnerabilities in its Windows graphics drivers which, if exploited, could enable escalation of privilege, denial of service DoS and information disclosure. The graphics driver is software that controls how graphic components work with the...

7.2CVSS8.3AI score0.0104EPSS
SaveExploits1References24
Intel
Intel
added 2020/03/10 12:00 a.m.66 views

Intel® Graphics Drivers Advisory

Summary: Potential security vulnerabilities in Intel® Graphics Drivers may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-0502 Description:...

7.8CVSS6.3AI score0.00561EPSS
SaveExploits0
Veracode
Veracode
added 2019/05/02 5:17 a.m.57 views

Denial Of Service (DoS)

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update...

5.7CVSS6.3AI score0.09915EPSS
SaveExploits0References20Affected Software4
Rows per page
Query Builder