Lucene search
+L

95 matches found

Circl
Circl
added 2022/04/25 8:36 p.m.40 views

CVE-2022-0656

creationtimestamp| type| source ---|---|--- 2022-04-25 20:36:38+00:00| seen| https://t.me/cibsecurity/41408 2025-01-26 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-01-26 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

7.5CVSS7.1AI score0.07879EPSS
In wildExploits2References4
ATTACKERKB
ATTACKERKB
added 2022/04/25 4:16 p.m.7 views

CVE-2022-0656

The Web To Print Shop : uDraw WordPress plugin before 3.3.3 does not validate the url parameter in its udrawconverturltobase64 AJAX action available to both unauthenticated and authenticated users before using it in the filegetcontents function and returning its content base64 encoded in the...

7.5CVSS7.3AI score0.07879EPSS
Exploits2References3
CVE
CVE
added 2022/04/25 3:51 p.m.84 views

CVE-2022-0656

The CVE-2022-0656 issue affects the WordPress plugin Web To Print Shop: uDraw , where versions prior to 3.3.3 do not validate the URL parameter in the AJAX action udraw_convert_url_to_base64 before using it in file_get_contents, enabling unauthenticated arbitrary file reads (e.g., /etc/passwd, wp...

7.5CVSS7.4AI score0.07879EPSS
In wildExploits2References1Affected Software1
Circl
Circl
added 2021/11/18 6:15 p.m.7 views

CVE-2021-0656

creationtimestamp| type| source ---|---|--- 2021-11-18 18:15:59+00:00| seen| https://t.me/cibsecurity/32621...

6.7CVSS6.4AI score0.00113EPSS
Exploits0References1
CVE
CVE
added 2021/11/18 2:57 p.m.48 views

CVE-2021-0656

CVE-2021-0656 affects the edma driver and is characterized by a use-after-free memory corruption leading to local escalation of privilege with System execution privileges required. Public descriptions consistently note no user interaction is needed for exploitation. The issue is tied to the edma ...

6.7CVSS6.8AI score0.00113EPSS
Exploits0References1Affected Software1
CBLMariner
CBLMariner
added 2021/09/09 3:3 p.m.41 views

CVE-1999-0656 affecting package kernel 5.10.189.1-1

CVE-1999-0656 affecting package kernel 5.10.189.1-1. A patched version of the package is available...

5CVSS7.4AI score0.01551EPSS
Exploits0
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.28 views

SUSE: Security Advisory (SUSE-SU-2017:0656-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS10AI score0.06196EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2021/04/23 12:0 a.m.44 views

Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2021:0656)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:0656-1 advisory. - Mozilla: Content Security Policy violation report could have contained the destination of a redirect CVE-2021-23968, CVE-2021-23969 - Mozilla:...

8.8CVSS7.4AI score0.0153EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.31 views

SUSE: Security Advisory (SUSE-SU-2019:0656-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.15243EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2021/02/27 12:0 a.m.59 views

CentOS 7 : firefox (RHSA-2021:0656)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0656 advisory. - If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as...

8.8CVSS7.8AI score0.0153EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2021/02/26 12:0 a.m.28 views

Oracle Linux 7 : firefox (ELSA-2021-0656)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-0656 advisory. 78.8.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.j...

8.8CVSS7.4AI score0.0153EPSS
Exploits0References5
CVE
CVE
added 2020/01/14 11:11 p.m.97 views

CVE-2020-0656

CVE-2020-0656 describes a cross-site scripting vulnerability in Microsoft Dynamics 365 on-premises (notably Dynamics 365 Field Service on-premises v7 series) caused by improper sanitization of specially crafted web requests. An authenticated attacker could exploit this to perform XSS in the user’...

5.4CVSS5AI score0.01475EPSS
Exploits0References1Affected Software1
Kaspersky
Kaspersky
added 2020/01/14 12:0 a.m.22 views

KLA11637 XSS vulnerability in Microsoft Dynamics

A cross-site-scripting XSS vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2020-0656 Related products Microsoft-Dynamics-365 CVE list CVE-2020-0656 warning KB list Solution Install necessary updates fro...

5.4CVSS5.4AI score0.01475EPSS
Exploits0References3
CVE
CVE
added 2019/03/06 12:0 a.m.145 views

CVE-2019-0656

Technical details for CVE-2019-0656 are not publicly provided in the supplied connected documents. No explicit affected products, root cause, or remediation are stated here; monitor for updates from official sources.

7CVSS7.8AI score0.0115EPSS
Exploits0References2Affected Software6
OSV
OSV
added 2019/03/05 11:29 p.m.1 views

CVE-2019-0656

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'...

7CVSS7.2AI score0.0115EPSS
Exploits0References2
Circl
Circl
added 2019/02/13 2:35 p.m.12 views

CVE-2019-0656

creationtimestamp| type| source ---|---|--- 2019-02-13 14:35:53+00:00| seen| MISP/5c642a56-2440-4af0-8bfd-6e4a0a021402 2025-08-31 03:01:35+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

7CVSS7.8AI score0.0115EPSS
Exploits0
Check Point Advisories
Check Point Advisories
added 2019/02/12 12:0 a.m.19 views

Microsoft Windows Kernel Elevation of Privilege (CVE-2019-0656)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.9CVSS8.4AI score0.0115EPSS
Exploits0
Symantec
Symantec
added 2019/02/12 12:0 a.m.53 views

Microsoft Windows Kernel 'Win32k.sys' CVE-2019-0656 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for x64-based...

2.9AI score0.0115EPSS
Exploits0Affected Software3
Tenable Nessus
Tenable Nessus
added 2019/02/12 12:0 a.m.122 views

KB4487028: Windows 8.1 and Windows Server 2012 R2 February 2019 Security Update

The remote Windows host is missing security update 4487028 or cumulative update 4487000. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully...

9.8CVSS8.1AI score0.68294EPSS
Exploits1References33
NVD
NVD
added 2018/09/04 1:29 p.m.13 views

CVE-2018-0656

Untrusted search path vulnerability in The installer of Digital Paper App version 1.4.0.16050 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

7.8CVSS7.8AI score0.01282EPSS
Exploits0References2
Rows per page
Query Builder