Lucene search
K

120 matches found

OpenVAS
OpenVAS
added 2026/01/14 12:0 a.m.2 views

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2026-1033)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.6CVSS6.7AI score0.00061EPSS
Exploits2References2
RedhatCVE
RedhatCVE
added 2025/05/23 8:24 a.m.8 views

CVE-2024-1033

A vulnerability, which was classified as problematic, has been found in openBI up to 1.0.8. Affected by this issue is the function agent of the file /application/index/controller/Datament.php. The manipulation of the argument api leads to information disclosure. The attack may be launched remotel...

7.5CVSS6.5AI score0.00057EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:2 p.m.4 views

CVE-2021-1033

In createGeneralSlice of ConnectedDevicesSliceProvider.java.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.8CVSS7.1AI score0.00014EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:40 a.m.4 views

CVE-2013-1033

Screen Lock in Apple Mac OS X before 10.8.5 does not properly track sessions, which allows remote authenticated users to bypass locking by leveraging screen-sharing access...

5.5CVSS6.1AI score0.00211EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/05/19 4:4 a.m.6 views

WordPress Badgearoo plugin <= 1.0.14 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Badgearoo versions = 1.0.14...

4.8CVSS6AI score0.00153EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/15 8:7 p.m.6 views

CVE-2025-1033 Badgearoo <= 1.0.14 - Admin+ Stored XSS

The Badgearoo WordPress plugin through 1.0.14 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.8AI score0.00153EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2024/04/28 12:0 a.m.21 views

RHEL 8 / 9 : OpenShift Container Platform 4.12.6 (RHSA-2023:1033)

The remote Redhat Enterprise Linux 8 / 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:1033 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...

7.8CVSS7AI score0.00042EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2024/03/29 12:0 a.m.32 views

SUSE SLES15 Security Update : kernel (Live Patch 40 for SLE 15 SP3) (SUSE-SU-2024:1033-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:1033-1 advisory. - A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with...

7CVSS6.8AI score0.00013EPSS
Exploits0References4
Circl
Circl
added 2024/01/30 3:22 p.m.0 views

CVE-2024-1033

creationtimestamp| type| source ---|---|--- 2024-01-30 15:22:24+00:00| seen| https://t.me/ctinow/175972 2024-02-21 15:11:55+00:00| seen| https://t.me/ctinow/189652...

7.5CVSS5.1AI score0.00057EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/01/30 2:0 p.m.5 views

CVE-2024-1033 openBI Datament.php agent information disclosure

A vulnerability, which was classified as problematic, has been found in openBI up to 1.0.8. Affected by this issue is the function agent of the file /application/index/controller/Datament.php. The manipulation of the argument api leads to information disclosure. The attack may be launched remotel...

4.3CVSS6.5AI score0.00057EPSS
Exploits0References3
CVE
CVE
added 2024/01/30 2:0 p.m.62 views

CVE-2024-1033

OpenBI up to version 1.0.8 contains a vulnerability in the function agent of /application/index/controller/Datament.php. Manipulating the api argument leads to information disclosure, and the issue can be exploited remotely. Public exploit information is available. No fixed version is documented ...

7.5CVSS7.3AI score0.00057EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2023/02/25 1:15 a.m.7 views

CVE-2023-1033

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...

8.8CVSS7.3AI score0.00206EPSS
Exploits1References2
OSV
OSV
added 2023/02/25 12:0 a.m.8 views

CVE-2023-1033 Cross-Site Request Forgery (CSRF) in froxlor/froxlor

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...

6.8CVSS7AI score0.00206EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2023/02/25 12:0 a.m.4 views

CVE-2023-1033 Cross-Site Request Forgery (CSRF) in froxlor/froxlor

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...

6.8CVSS8.9AI score0.00206EPSS
Exploits1References2
CVE
CVE
added 2023/02/25 12:0 a.m.52 views

CVE-2023-1033

CVE-2023-1033 describes a Cross-Site Request Forgery (CSRF) vulnerability in froxlor/froxlor prior to version 2.0.11. The affected software is Froxlor (web-based server management) with the issue in its handling of authenticated requests. The practical impact cited in connected documents is that ...

8.8CVSS7.7AI score0.00206EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2023/02/25 12:0 a.m.12 views

CVE-2023-1033 Cross-Site Request Forgery (CSRF) in froxlor/froxlor

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.11...

6.8CVSS9.1AI score0.00206EPSS
Exploits1References2
NVD
NVD
added 2023/02/22 11:15 p.m.7 views

CVE-2017-1033

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

6.5AI score
Exploits0
OSV
OSV
added 2022/03/30 4:15 p.m.1 views

CVE-2021-1033

In createGeneralSlice of ConnectedDevicesSliceProvider.java.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.8CVSS7.2AI score
Exploits0References1
CVE
CVE
added 2022/03/30 4:2 p.m.82 views

CVE-2021-1033

CVE-2021-1033 affects Android 12L and involves a local elevation-of-privilege in ConnectedDevicesSliceProvider.java.java (createGeneralSlice) due to an unsafe PendingIntent. Impact: local Privilege Escalation with HIGH/Partial/Partial likelihoods in CVSS3.1 terms, with no user interaction require...

7.8CVSS7.9AI score0.00014EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2022/03/23 11:28 a.m.1 views

CVE-2022-1033

creationtimestamp| type| source ---|---|--- 2022-03-23 11:28:25+00:00| seen| https://t.me/cibsecurity/39398...

7.8CVSS7.1AI score0.00322EPSS
Exploits1References1
Rows per page
Query Builder