Lucene search
+L

194 matches found

OpenVAS
OpenVAS
added 2023/02/23 12:0 a.m.23 views

Debian: Security Advisory (DLA-3336-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.3AI score0.0222EPSS
Exploits6References5
SUSE CVE
SUSE CVE
added 2023/02/15 6:20 a.m.10 views

SUSE CVE-2004-0686

Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors...

5CVSS7.3AI score0.03666EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:54 a.m.3 views

SUSE CVE-2011-0686

Unspecified vulnerability in Opera before 11.01 allows remote attackers to cause a denial of service application crash via unknown content on a web page, as demonstrated by vkontakte.ru...

5CVSS6.8AI score0.02624EPSS
Exploits0References4
Circl
Circl
added 2023/02/06 10:29 p.m.8 views

CVE-2023-0686

creationtimestamp| type| source ---|---|--- 2023-02-06 22:29:26+00:00| seen| https://t.me/cibsecurity/57592...

9.8CVSS6.1AI score0.00552EPSS
Exploits0References1
CVE
CVE
added 2023/02/06 6:50 p.m.64 views

CVE-2023-0686

CVE-2023-0686 affects SourceCodester Online Eyewear Shop 1.0. The SQL injection vulnerability arises in the update_cart function (Master.php?f=update_cart) via the cart_id parameter in the HTTP POST Request Handler. Demonstrated impact is remote exploitation with high severity (CVSSv3.1: 9.8, CRI...

9.8CVSS6.6AI score0.00552EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2022/02/20 1:15 p.m.18 views

CVE-2022-0686

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8...

9.1CVSS0.01827EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2022/02/20 1:15 p.m.36 views

CVE-2022-0686

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8...

9.1CVSS6.9AI score0.01827EPSS
Exploits1References5
CVE
CVE
added 2022/02/20 12:0 a.m.220 views

CVE-2022-0686

CVE-2022-0686 affects the npm package url-parse (unshift.io) prior to 1.5.8. The root cause is an issue in hostname resolution when no port is provided, which can enable SSRF, open redirects, or other hostname-dependent attacks. Affected versions include unshift.io url-parse used in various npm d...

9.1CVSS7.5AI score0.01827EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2022/02/20 12:0 a.m.22 views

CVE-2022-0686 Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8...

6.5CVSS9.5AI score0.01827EPSS
Exploits1References4
Debian CVE
Debian CVE
added 2022/02/20 12:0 a.m.57 views

CVE-2022-0686

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8...

9.1CVSS7.8AI score0.01827EPSS
Exploits1
OSV
OSV
added 2022/02/20 12:0 a.m.17 views

CVE-2022-0686 Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8...

6.5CVSS7.3AI score0.01827EPSS
Exploits1References6
Circl
Circl
added 2021/11/08 8:58 a.m.13 views

CVE-2020-0686

creationtimestamp| type| source ---|---|--- 2021-11-08 08:58:18+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422...

7.8CVSS6.7AI score0.00959EPSS
Exploits0
NVD
NVD
added 2021/10/06 3:15 p.m.29 views

CVE-2021-0686

In getDefaultSmsPackage of RoleManagerService.java, there is a possible way to get information about the default sms app of a different device user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction i...

5.5CVSS0.00104EPSS
Exploits0References1
OSV
OSV
added 2021/10/06 3:15 p.m.4 views

CVE-2021-0686

In getDefaultSmsPackage of RoleManagerService.java, there is a possible way to get information about the default sms app of a different device user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction i...

5.5CVSS5.9AI score0.00104EPSS
Exploits0References1
CVE
CVE
added 2021/10/06 2:10 p.m.108 views

CVE-2021-0686

CVE-2021-0686 affects Android 10/11 and involves RoleManagerService.getDefaultSmsPackage. A missing permission check could allow a local attacker to disclose information about the default SMS app for a different device user without user interaction. The vulnerability enables local information dis...

5.5CVSS5AI score0.00104EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2021/09/24 12:0 a.m.21 views

Samba 3.0.0 <= 3.0.4 Buffer Overflow Vulnerability (CVE-2004-0686)

Potential Buffer Overrun in Samba 3.0.x = 3.0.4. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5CVSS6.5AI score0.03666EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2021:0686-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.32362EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.25 views

SUSE: Security Advisory (SUSE-SU-2016:1379-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.8AI score0.92334EPSS
Exploits1References9
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.25 views

SUSE: Security Advisory (SUSE-SU-2016:1303-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.9AI score0.92334EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2016:1388-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.9AI score0.92334EPSS
Exploits1References4
Rows per page
Query Builder