Lucene search
+L

195 matches found

OpenVAS
OpenVAS
•added 2023/02/23 12:00 a.m.•74 views

Debian: Security Advisory (DLA-3336-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.3AI score0.0222EPSS
SaveExploits6References5
SUSE CVE
SUSE CVE
•added 2023/02/15 6:20 a.m.•19 views

SUSE CVE-2004-0686

Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors...

5CVSS7.3AI score0.03666EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2023/02/15 5:54 a.m.•7 views

SUSE CVE-2011-0686

Unspecified vulnerability in Opera before 11.01 allows remote attackers to cause a denial of service application crash via unknown content on a web page, as demonstrated by vkontakte.ru...

5CVSS6.8AI score0.02624EPSS
SaveExploits0References4
Circl
Circl
•added 2023/02/06 10:29 p.m.•18 views

CVE-2023-0686

creationtimestamp| type| source ---|---|--- 2023-02-06 22:29:26+00:00| seen| https://t.me/cibsecurity/57592...

9.8CVSS6.1AI score0.00552EPSS
SaveExploits0References1
CVE
CVE
•added 2023/02/06 6:50 p.m.•80 views

CVE-2023-0686

CVE-2023-0686 affects SourceCodester Online Eyewear Shop 1.0. The SQL injection vulnerability arises in the update_cart function (Master.php?f=update_cart) via the cart_id parameter in the HTTP POST Request Handler. Demonstrated impact is remote exploitation with high severity (CVSSv3.1: 9.8, CRI...

9.8CVSS6.6AI score0.00552EPSS
SaveExploits0References2Affected Software1
vulnersOsv
vulnersOsv
•added 2022/02/21 12:00 a.m.•3 views

0x-relayer-cat (>=0.0.3, <=0.0.10), @0x-klaytn/asset-swapper (>=4.2.1, <=4.2.2) +4603 more potentially affected by CVE-2022-0686 via url-parse (>=1.0.2, <=1.5.4)

url-parse NPM version =1.0.2, =0.0.3, =4.2.1, =2.1.0-beta.4, =5.0.0-beta, =0.1.0-beta.2, =0.0.1, =0.0.31, =0.0.1, =1.0.2, =0.1.0, =0.1.0, =1.6.1, =0.2.0, =1.0.3, =2.1.1 and more Source cves: CVE-2022-0686 Source advisory: OSV:GHSA-HGJH-723H-MX2J...

9.1CVSS7.1AI score0.01827EPSS
SaveExploits1
NVD
NVD
•added 2022/02/20 1:15 p.m.•23 views

CVE-2022-0686

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8...

9.1CVSS0.01827EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2022/02/20 1:15 p.m.•44 views

CVE-2022-0686

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8...

9.1CVSS6.9AI score0.01827EPSS
SaveExploits1References5
OSV
OSV
•added 2022/02/20 12:00 a.m.•23 views

CVE-2022-0686 Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8...

6.5CVSS7.3AI score
SaveExploits0References6
CVE
CVE
•added 2022/02/20 12:00 a.m.•238 views

CVE-2022-0686

CVE-2022-0686 affects the npm package url-parse (unshift.io) prior to 1.5.8. The root cause is an issue in hostname resolution when no port is provided, which can enable SSRF, open redirects, or other hostname-dependent attacks. Affected versions include unshift.io url-parse used in various npm d...

9.1CVSS7.2AI score0.01827EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2022/02/20 12:00 a.m.•33 views

CVE-2022-0686 Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8...

6.5CVSS9.5AI score0.01827EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2022/02/20 12:00 a.m.•65 views

CVE-2022-0686

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8...

9.1CVSS7.8AI score0.01827EPSS
SaveExploits1
Circl
Circl
•added 2021/11/08 8:58 a.m.•21 views

CVE-2020-0686

creationtimestamp| type| source ---|---|--- 2021-11-08 08:58:18+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422...

7.8CVSS6.7AI score0.00959EPSS
SaveExploits0
OSV
OSV
•added 2021/10/06 3:15 p.m.•9 views

CVE-2021-0686

In getDefaultSmsPackage of RoleManagerService.java, there is a possible way to get information about the default sms app of a different device user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction i...

5.5CVSS5.9AI score0.00108EPSS
SaveExploits0References1
NVD
NVD
•added 2021/10/06 3:15 p.m.•35 views

CVE-2021-0686

In getDefaultSmsPackage of RoleManagerService.java, there is a possible way to get information about the default sms app of a different device user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction i...

5.5CVSS0.00108EPSS
SaveExploits0References1
CVE
CVE
•added 2021/10/06 2:10 p.m.•122 views

CVE-2021-0686

CVE-2021-0686 affects Android 10/11 and involves RoleManagerService.getDefaultSmsPackage. A missing permission check could allow a local attacker to disclose information about the default SMS app for a different device user without user interaction. The vulnerability enables local information dis...

5.5CVSS5AI score0.00108EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
•added 2021/09/24 12:00 a.m.•27 views

Samba 3.0.0 <= 3.0.4 Buffer Overflow Vulnerability (CVE-2004-0686)

Potential Buffer Overrun in Samba 3.0.x = 3.0.4. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5CVSS6.5AI score0.03666EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•28 views

SUSE: Security Advisory (SUSE-SU-2021:0686-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7AI score0.32362EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•51 views

SUSE: Security Advisory (SUSE-SU-2016:1378-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7AI score0.92334EPSS
SaveExploits1References9
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•52 views

SUSE: Security Advisory (SUSE-SU-2016:1379-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7AI score0.92334EPSS
SaveExploits1References9
Rows per page
Query Builder