Lucene search
+L

114 matches found

CVE
CVE
added 2023/02/21 8:01 p.m.53 views

CVE-2023-0945

SourceCodester Best POS Management System 1.0 contains an XSS vulnerability in the endpoint index.php?page=add-category. The Name parameter can be manipulated with a payload like > to trigger cross-site scripting. The issue affects the specific function handling the add-category page and can b...

5.4CVSS4.4AI score0.00356EPSS
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/13 1:18 a.m.37 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-0945,...

7.6CVSS7.3AI score0.15745EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/05/13 1:18 a.m.48 views

GHSA-WJMF-6X7G-XQ67 ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-0945,...

7.5CVSS7.8AI score0.15745EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2022/03/25 12:00 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2022:0945-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS7.3AI score0.03357EPSS
SaveExploits0References2
Circl
Circl
added 2022/03/15 6:18 a.m.16 views

CVE-2022-0945

creationtimestamp| type| source ---|---|--- 2022-03-15 06:18:44+00:00| seen| Telegram/dKS0KvyonD98G1kYbhzG8B4dROZKr8B2OBjeVkrAnyZIy0...

9CVSS7.1AI score0.00809EPSS
SaveExploits1
OSV
OSV
added 2022/03/15 3:50 a.m.18 views

CVE-2022-0945 Stored XSS viva axd and cshtml file upload in star7th/showdoc in star7th/showdoc

Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4...

9CVSS7.4AI score
SaveExploits0References4
CVE
CVE
added 2022/03/15 3:50 a.m.129 views

CVE-2022-0945

CVE-2022-0945 refers to a stored XSS vulnerability in ShowDoc (star7th/showdoc) prior to v2.10.4. The root cause is inadequate validation in the file upload functionality, failing to reject .cshtml and .axd extensions, enabling an attacker to upload malicious scripts that can execute in a user’s ...

9CVSS5.7AI score0.00809EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/03/15 3:50 a.m.34 views

CVE-2022-0945 Stored XSS viva axd and cshtml file upload in star7th/showdoc in star7th/showdoc

Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4...

9CVSS5.5AI score0.00809EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.10 views

SUSE: Security Advisory (SUSE-SU-2021:0945-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.04328EPSS
SaveExploits0References2
NVD
NVD
added 2020/04/15 3:15 p.m.12 views

CVE-2020-0945

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0946, CVE-2020-0947...

5.5CVSS5.4AI score0.06649EPSS
SaveExploits0References1
Prion
Prion
added 2020/04/15 3:15 p.m.28 views

Information disclosure

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0939, CVE-2020-0945, CVE-2020-0946, CVE-2020-0947...

4.3CVSS5.2AI score0.08658EPSS
SaveExploits0References1Affected Software2
Prion
Prion
added 2020/04/15 3:15 p.m.20 views

Information disclosure

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0945, CVE-2020-0947...

4.3CVSS5.2AI score0.08658EPSS
SaveExploits0References1Affected Software5
CVE
CVE
added 2020/04/15 3:12 p.m.148 views

CVE-2020-0945

CVE-2020-0945 is a Media Foundation information-disclosure vulnerability in Microsoft Windows media handling where memory objects are not properly managed, potentially exposing partial confidentiality. The entry provides a CVSS score (4.3/5.0 base, MEDIUM) and vectors for both CVSS v2 and v3, but...

5.5CVSS5.6AI score0.06649EPSS
SaveExploits0References1Affected Software6
Tenable Nessus
Tenable Nessus
added 2020/04/14 12:00 a.m.50 views

KB4550930: Windows 10 April 2020 Security Update

The remote Windows host is missing security update 4550930. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections. An attacker who successfully exploited this vulnerability could...

9.3CVSS8.3AI score0.69166EPSS
SaveExploits4References52
Circl
Circl
added 2020/01/15 4:39 p.m.15 views

CVE-2012-0945

creationtimestamp| type| source ---|---|--- 2020-01-15 16:39:21+00:00| seen| https://t.me/cibsecurity/9203...

5.5CVSS5AI score0.00707EPSS
SaveExploits1References1
NVD
NVD
added 2020/01/15 1:15 p.m.20 views

CVE-2012-0945

whoopsie-daisy before 0.1.26: Root user can remove arbitrary files...

5.5CVSS5.2AI score0.00707EPSS
SaveExploits1References1
CVE
CVE
added 2020/01/15 12:26 p.m.55 views

CVE-2012-0945

CVE-2012-0945 affects whoopsie-daisy prior to 0.1.26. The reported vulnerability allows the root user to remove arbitrary files, describing a root‑level impact due to the underlying cause in whoopsie-daisy. The entry is corroborated across multiple sources in this set (e.g., Red Hat/TLP and NVD r...

5.5CVSS5.3AI score0.00707EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2019/05/16 6:17 p.m.120 views

CVE-2019-0945

CVE-2019-0945 is a remote code execution vulnerability in the Microsoft Office Access Connectivity Engine, triggered by improper handling of objects in memory. The issue affects Microsoft Office products using the Office Connectivity Engine and can be exploited when a user opens a specially craft...

9.3CVSS7.9AI score0.13695EPSS
SaveExploits0References1Affected Software2
OpenVAS
OpenVAS
added 2019/05/15 12:00 a.m.99 views

Microsoft Office 2016 Multiple Vulnerabilities (KB4464551)

This host is missing an important security update according to Microsoft KB4464551 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

9.3CVSS7.6AI score0.13695EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2019/05/15 12:00 a.m.106 views

Microsoft Office 2013 Service Pack 1 Multiple Vulnerabilities (KB4464561)

This host is missing an important security update according to Microsoft KB4464561 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

9.3CVSS7.6AI score0.13695EPSS
SaveExploits0References3
Rows per page
Query Builder