Lucene search
+L

124 matches found

Cvelist
Cvelist
added 2022/02/08 8:55 a.m.35 views

CVE-2022-0506 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...

7.7CVSS5.4AI score0.00631EPSS
Exploits1References2
CVE
CVE
added 2022/02/08 8:55 a.m.83 views

CVE-2022-0506

CVE-2022-0506 is a Cross-site Scripting (XSS) vulnerability stored in the microweber/microweber package prior to version 1.2.11. The Red Hat, NVD, OSV, and CNVD records consistently describe a stored XSS flaw where user-supplied input is not properly sanitized, allowing injected script to be exec...

7.7CVSS5.3AI score0.00631EPSS
Exploits1References2Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.19 views

Mageia: Security Advisory (MGASA-2014-0506)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.3AI score0.01965EPSS
Exploits1References5
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.22 views

Mageia: Security Advisory (MGASA-2014-0169)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.5AI score0.0761EPSS
Exploits4References4
Circl
Circl
added 2021/06/22 2:48 a.m.10 views

CVE-2021-0506

creationtimestamp| type| source ---|---|--- 2021-06-22 02:48:50+00:00| seen| Telegram/H9CBLOpkbnmSkmIgCA40UMh9ocnyKlG3YMCyGpscBioFRwI...

7.3CVSS7.3AI score0.00282EPSS
Exploits0
Cvelist
Cvelist
added 2021/06/21 4:1 p.m.26 views

CVE-2021-0506

In ActivityPicker.java, there is a possible bypass of user interaction in intent resolution due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10...

7.5AI score0.00282EPSS
Exploits0References1
CVE
CVE
added 2021/06/21 4:1 p.m.137 views

CVE-2021-0506

CVE-2021-0506 corresponds to a tapjacking/overlay bypass in ActivityPicker.java that can bypass required user interaction during intent resolution, enabling local elevation of privilege with User execution privileges needed. Affected products/versions include Android 8.1, 9, 10, and 11. The vulne...

7.3CVSS7.2AI score0.00282EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.17 views

SUSE: Security Advisory (SUSE-SU-2018:0506-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7CVSS7.2AI score0.00482EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2012:0734-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.4AI score0.06336EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.30 views

SUSE: Security Advisory (SUSE-SU-2012:0603-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.9AI score0.98113EPSS
Exploits35References5
OSV
OSV
added 2020/03/12 6:15 p.m.1 views

CVE-2020-0506

Improper initialization in IntelR Graphics Drivers before versions 15.40.44.5107, 15.45.29.5077, and 26.20.100.7000 may allow a privileged user to potentially enable a denial of service via local access...

2.3CVSS5.8AI score0.00266EPSS
Exploits0References2
NVD
NVD
added 2020/03/12 6:15 p.m.22 views

CVE-2020-0506

Improper initialization in IntelR Graphics Drivers before versions 15.40.44.5107, 15.45.29.5077, and 26.20.100.7000 may allow a privileged user to potentially enable a denial of service via local access...

2.3CVSS3.5AI score0.00266EPSS
Exploits0References2
Cvelist
Cvelist
added 2020/03/12 5:41 p.m.27 views

CVE-2020-0506

Improper initialization in IntelR Graphics Drivers before versions 15.40.44.5107, 15.45.29.5077, and 26.20.100.7000 may allow a privileged user to potentially enable a denial of service via local access...

3.9AI score0.00266EPSS
Exploits0References2
CVE
CVE
added 2020/03/12 5:41 p.m.72 views

CVE-2020-0506

CVE-2020-0506 is an Intel Graphics Drivers vulnerability identified as an improper initialization issue that affects Windows Intel Graphics Drivers before versions 15.40.44.5107, 15.45.29.5077, and 26.20.100.7000. The issue may allow a privileged local user to potentially cause a denial of servic...

2.3CVSS4.3AI score0.00266EPSS
Exploits0References2Affected Software1
Veracode
Veracode
added 2019/05/02 4:41 a.m.46 views

Memory Corruption

The IBM Java SE version 6 release includes the IBM Java 6 Runtime Environment and the IBM Java 6 Software Development Kit. This update fixes several vulnerabilities in the IBM Java 6 Runtime Environment and the IBM Java 6 Software Development Kit. Detailed vulnerability descriptions are linked fr...

9.8CVSS9.1AI score0.98113EPSS
Exploits35References26Affected Software1
OSV
OSV
added 2018/01/26 4:29 p.m.2 views

CVE-2018-0506

Nootka 1.4.4 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...

9.8CVSS6.1AI score0.02277EPSS
Exploits0References1
CVE
CVE
added 2018/01/26 4:0 p.m.40 views

CVE-2018-0506

CVE-2018-0506 affects Nootka 1.4.4 and earlier. The vulnerability is an OS command injection that lets remote attackers execute arbitrary commands via unspecified vectors in the mobile app. Public sources (NVD, JVN, CNVD) consistently describe a remote impact and the same affected product version...

10CVSS9.7AI score0.02277EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2017/03/08 1:0 a.m.61 views

CVE-2017-0506

CVE-2017-0506 describes an elevation of privilege in MediaTek components (M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver) that could allow a local malicious app to execute arbitrary code in the kernel context. The vulnerability is rated as Critical due to the r...

9.3CVSS7.3AI score0.00745EPSS
Exploits0References4Affected Software1
OpenVAS
OpenVAS
added 2016/06/03 12:0 a.m.38 views

Oracle MySQL Multiple Unspecified Vulnerabilities-04 (Jun 2016) - Linux

Oracle MySQL is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql";...

4CVSS6.7AI score0.02497EPSS
Exploits0References9
NVD
NVD
added 2016/01/21 3:0 a.m.12 views

CVE-2016-0506

Unspecified vulnerability in the Oracle Retail Order Management System Cloud Service component in Oracle Retail Applications 3.5, 4.5, 4.7, 5.0, and 15.0 allows remote attackers to affect confidentiality via unknown vectors related to Order Entry...

4.3CVSS5.6AI score0.01602EPSS
Exploits0References2
Rows per page
Query Builder