Lucene search
+L

78 matches found

CVE
CVE
added 2022/02/09 4:20 a.m.113 views

CVE-2022-0527

CVE-2022-0527 is a stored Cross-site Scripting (XSS) in the open-source Chatwoot repository chatwoot/chatwoot, prior to version 2.2.0. The vulnerability, documented across multiple sources (NVD, Red Hat, OSV, CVE lists), indicates that user-supplied data in the web application can be interpreted ...

6.1CVSS6AI score0.0085EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/02/09 4:20 a.m.33 views

CVE-2022-0527 Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot

Cross-site Scripting XSS - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0...

6.1CVSS6.2AI score0.0085EPSS
SaveExploits1References2
NVD
NVD
added 2021/06/21 5:15 p.m.33 views

CVE-2021-0527

In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-185193931...

7.8CVSS0.00116EPSS
SaveExploits2References1
CVE
CVE
added 2021/06/21 4:01 p.m.103 views

CVE-2021-0527

CVE-2021-0527 concerns a memory management driver issue where a use-after-free can cause memory corruption, enabling local privilege escalation without additional privileges. The vulnerability is described across multiple sources as affecting Android devices with MediaTek memory management driver...

7.8CVSS7.8AI score0.00116EPSS
SaveExploits2References1Affected Software1
zdt
zdt
added 2021/05/27 12:00 a.m.61 views

Pandora FMS 6.0SP3 Cross Site Scripting Vulnerability

Exploit Title: XSS vulnerability for keywords searching parameter in pandorafms-6.0SP3/pandoraconsole Author: @nu11secur1ty Testing and Debugging: @nu11secur1ty Vendor: https://pandorafms.com/ Link: https://github.com/pandorafms/pandorafms/releases CVE: 2021-0527-nu11secur1ty Proof:...

7.8CVSS7.8AI score0.00116EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2021/05/27 12:00 a.m.234 views

Pandora FMS 6.0SP3 Cross Site Scripting

Exploit Title: XSS vulnerability for keywords searching parameter in pandorafms-6.0SP3/pandoraconsole Author: @nu11secur1ty Testing and Debugging: @nu11secur1ty Date: 05.27.2021 Vendor: https://pandorafms.com/ Link: https://github.com/pandorafms/pandorafms/releases CVE: 2021-0527-nu11secur1ty...

0.1AI score0.00116EPSS
SaveExploits2
Circl
Circl
added 2020/06/17 7:55 a.m.12 views

CVE-2020-0527

creationtimestamp| type| source ---|---|--- 2020-06-17 07:55:35+00:00| seen| https://t.me/cibsecurity/12793...

4.4CVSS4.6AI score0.00331EPSS
SaveExploits0References1
CVE
CVE
added 2020/06/15 1:52 p.m.84 views

CVE-2020-0527

CVE-2020-0527 concerns firmware in Intel® Data Center SSDs with insufficient control flow management, enabling potential information disclosure by a privileged user with local access. Connected Intel advisory INTEL-SA-00266 lists affected products: Intel® SSD D3-S4510 Series; Intel® SSD DC P4510 ...

4.4CVSS4.1AI score0.00331EPSS
SaveExploits0References1Affected Software1
ThreatPost
ThreatPost
added 2020/06/10 6:37 p.m.483 views

Critical Intel Flaws Fixed in Active Management Technology

Intel has released its June security updates, which address two critical vulnerabilities that, if exploited, can give unauthenticated attackers elevated privileges. The critical flaws exist in Intel’s Active Management Technology AMT, which is used for remote out-of-band management of personal...

7.5CVSS8.5AI score0.05272EPSS
SaveExploits1References29
Lenovo
Lenovo
added 2020/06/04 4:24 p.m.45 views

Intel SSD Advisory - Lenovo Support US

No description provided...

4.4CVSS4.6AI score0.00331EPSS
SaveExploits0
Lenovo
Lenovo
added 2020/06/04 4:24 p.m.52 views

Intel SSD Advisory - Lenovo Support US

Lenovo Security Advisory: LEN-30040 Potential Impact: Information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0527 Summary Description: Intel reported a potential security vulnerability in Intel Solid State Drive SSD products that may allow information...

2.1CVSS2.1AI score0.00331EPSS
SaveExploits0
CVE
CVE
added 2018/06/26 2:00 p.m.60 views

CVE-2018-0527

Cybozu Office is affected by CVE-2018-0527: a Cross-site scripting (CWE-79) vulnerability in Cybozu Office versions 10.0.0–10.7.0 that can allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The impact is an arbitrary script execution in the user’s browser. Reme...

6.1CVSS6AI score0.00809EPSS
SaveExploits0References2Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2018/05/22 12:00 a.m.54 views

JVN#51737843: Multiple vulnerabilities in Cybozu Office

Cybozu Office provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Information disclosure in the application "Message" when viewing an external image CWE-200 - CVE-2018-0526 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N| Base Score:...

6.5CVSS5.4AI score0.01069EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2018/03/16 12:00 a.m.36 views

RHEL 7 : firefox (RHSA-2018:0527)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:0527 advisory. - Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 MFSA 2018-07 CVE-2018-5125 - Mozilla: Buffer overflow manipulating SV...

9.8CVSS7.9AI score0.07923EPSS
SaveExploits3References18
Tenable Nessus
Tenable Nessus
added 2018/03/16 12:00 a.m.38 views

Oracle Linux 7 : firefox (ELSA-2018-0527)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-0527 advisory. 52.7.0-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 52.7.0-1 - Update to 52.7.0 ESR Tenable has extracted the...

9.8CVSS7.8AI score0.07923EPSS
SaveExploits3References8
OpenVAS
OpenVAS
added 2017/03/18 12:00 a.m.62 views

CentOS Update for tomcat6 CESA-2017:0527 centos6

Check the version of tomcat6 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882682";...

7.5CVSS7.2AI score0.39633EPSS
SaveExploits6References2
Virtuozzo
Virtuozzo
added 2017/03/17 12:00 a.m.21 views

Virtuozzo Linux Errata and Security Advisory 2017:0527 Moderate

Upstream security update. Follow RHSA-2017-0527 for details...

7.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2017/03/16 12:00 a.m.79 views

Oracle Linux 6 : tomcat6 (ELSA-2017-0527)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0527 advisory. - Related: rhbz1402664 CVE-2016-6816 Adding system property from asfbz-60594 to allow use of some un- encoded characters - Related: rhbz1402664...

7.5CVSS7.4AI score0.39633EPSS
SaveExploits6References3
CVE
CVE
added 2017/03/08 1:00 a.m.77 views

CVE-2017-0527

CVE-2017-0527 describes an elevation-of-privilege vulnerability in the HTC Sensor Hub Driver on Android, enabling a local malicious app to execute arbitrary code in kernel context. Affected products/versions: Android on kernel 3.10 and 3.18. Root cause is operating in the context of the kernel af...

7.6CVSS6.6AI score0.01453EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2017/03/08 1:00 a.m.34 views

CVE-2017-0527

An elevation of privilege vulnerability in the HTC Sensor Hub Driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

6.7AI score0.01453EPSS
SaveExploits0References3
Rows per page
Query Builder