Lucene search
+L

208 matches found

ATTACKERKB
ATTACKERKB
added 2024/12/13 3:15 p.m.7 views

CVE-2023-32599

Missing Authorization vulnerability in sminozzi reCAPTCHA for all recaptcha-for-all allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects reCAPTCHA for all: from n/a through = 1.22...

4.3CVSS5.8AI score0.00458EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/12/13 12:00 a.m.8 views

PT-2024-12337 · Google · Recaptcha

Name of the Vulnerable Software and Affected Versions: reCAPTCHA for all versions n/a through 1.22 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions n/a through...

4.3CVSS9.3AI score0.00458EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/12/13 12:00 a.m.6 views

WordPress plugin reCAPTCHA for all 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS8.6AI score0.00458EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
added 2024/10/29 1:54 p.m.8 views

Security update for go1.22-openssl

This update for go1.22-openssl fixes the following issues: This update ships go1.22-openssl 1.22.7.1 jscSLE-18320 Update to version 1.22.7.1 cut from the go1.22-fips-release branch at the revision tagged go1.22.7-1-openssl-fips. Update to Go 1.22.7 229 go1.22.7 released 2024-09-05 includes securi...

7.5CVSS7.8AI score0.91969EPSS
SaveExploits2References64
OSV
OSV
added 2024/10/29 1:54 p.m.15 views

SUSE-SU-2024:3772-1 Security update for go1.22-openssl

This update for go1.22-openssl fixes the following issues: This update ships go1.22-openssl 1.22.7.1 jscSLE-18320 - Update to version 1.22.7.1 cut from the go1.22-fips-release branch at the revision tagged go1.22.7-1-openssl-fips. Update to Go 1.22.7 229 - go1.22.7 released 2024-09-05 includes...

9.8CVSS8.4AI score0.91969EPSS
SaveExploits2References31
OpenVAS
OpenVAS
added 2024/10/23 12:00 a.m.22 views

Ubuntu: Security Advisory (USN-7081-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8AI score0.01414EPSS
SaveExploits0References2
OSV
OSV
added 2024/10/22 1:50 a.m.28 views

RHSA-2023:6120 Red Hat Security Advisory: nginx:1.22 security update

Bulletin has no description...

7.5CVSS8.5AI score0.99999EPSS
SaveExploits21References13
OSV
OSV
added 2024/10/22 1:43 a.m.26 views

RHSA-2023:5713 Red Hat Security Advisory: nginx:1.22 security update

Bulletin has no description...

7.5CVSS8.5AI score0.99999EPSS
SaveExploits21References13
OpenVAS
OpenVAS
added 2024/07/10 12:00 a.m.22 views

Ubuntu: Security Advisory (USN-6886-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.5AI score0.91969EPSS
SaveExploits1References2
Chainguard
Chainguard
added 2024/07/07 6:15 p.m.81 views

CVE-2024-3651 vulnerabilities

Vulnerabilities for packages: ggshield, py3-cassandra-medusa, kubeflow-pipelines-visualization-server, kubeflow-pipelines, kubeflow-volumes-web-app, nvidia-nsight-compute-13.1, nvidia-nsight-compute-13.2, py3-idna, request-1276, kubeflow-jupyter-web-app, checkov, jwt-tool, confluent-docker-utils,...

7.5CVSS6.6AI score0.01386EPSS
SaveExploits1
SUSE CVE
SUSE CVE
added 2024/05/03 2:11 a.m.4 views

SUSE CVE-2023-47212

A heap-based buffer overflow vulnerability exists in the comment functionality of stb vorbis.c v1.22. A specially crafted .ogg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

9.8CVSS7.4AI score0.0141EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/05/01 12:00 a.m.10 views

stb_vorbis 缓冲区错误漏洞

stbvorbis is an open source audio decoder for decoding ogg vorbis files. A buffer error vulnerability exists in stb vorbis.c version v1.22, which stems from the presence of a heap-based buffer overflow vulnerability that could lead to out-of-bounds writes...

9.8CVSS9.2AI score0.0141EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/04/17 12:00 a.m.14 views

PT-2024-24653 · Unknown · Lh Add Media From Url

Name of the Vulnerable Software and Affected Versions: LH Add Media From Url versions 1.22 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations: For versions...

7.1CVSS5.7AI score0.00354EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/04/17 12:00 a.m.10 views

WordPress Plugin LH Add Media From Url 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

7.1CVSS5.9AI score0.00354EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/04/15 2:27 p.m.12 views

WordPress LH Add Media From Url plugin <= 1.22 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin LH Add Media From Url versions = 1.22...

7.1CVSS6.1AI score0.00354EPSS
SaveExploits0Affected Software1
Chainguard
Chainguard
added 2024/04/11 9:32 p.m.35 views

GHSA-JJG7-2V4V-X38H vulnerabilities

Vulnerabilities for packages: ggshield, py3-cassandra-medusa, kubeflow-pipelines-visualization-server, kubeflow-pipelines, kubeflow-volumes-web-app, nvidia-nsight-compute-13.1, nvidia-nsight-compute-13.2, py3-idna, request-1276, kubeflow-jupyter-web-app, checkov, jwt-tool, confluent-docker-utils,...

5.9AI score
SaveExploits0
VulnCheck KEV
VulnCheck KEV
added 2023/12/24 12:00 a.m.8 views

VulnCheck KEV: CVE-2021-29203

A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of arbitrary...

10CVSS7.3AI score0.68293EPSS
SaveExploits1References1
Prion
Prion
added 2023/12/13 1:15 p.m.16 views

Command injection

Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...

7.5CVSS7.3AI score0.01465EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/13 12:48 p.m.35 views

CVE-2023-42495 Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...

9.8CVSS9.8AI score0.01465EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/13 12:00 a.m.8 views

Dasan W-Web OS Command Injection Vulnerability

Dasan W-Web is a network appliance from Dasan. An operating system command injection vulnerability exists in Dasan W-Web versions 1.22-1.27, which stems from the presence of an operating system command injection vulnerability...

9.8CVSS7.5AI score0.01465EPSS
SaveExploits0References2
Rows per page
Query Builder