Lucene search
+L

122 matches found

Cvelist
Cvelist
added 2023/03/02 12:0 a.m.33 views

CVE-2023-1106 Cross-site Scripting (XSS) - Reflected in flatpressblog/flatpress

Cross-site Scripting XSS - Reflected in GitHub repository flatpressblog/flatpress prior to 1.3...

5.3CVSS6.5AI score0.00577EPSS
SaveExploits1References2
OSV
OSV
added 2023/03/02 12:0 a.m.18 views

CVE-2023-1106 Cross-site Scripting (XSS) - Reflected in flatpressblog/flatpress

Cross-site Scripting XSS - Reflected in GitHub repository flatpressblog/flatpress prior to 1.3...

5.3CVSS6AI score0.00577EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:4 a.m.4 views

SUSE CVE-2009-1106

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files, which allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unknown vectors, aka CR 6798948...

6.4CVSS7AI score0.03558EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2022/03/29 12:0 a.m.50 views

RHEL 7 : kernel (RHSA-2022:1106)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1106 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Use After Free in unixgc which...

7.8CVSS6.7AI score0.00811EPSS
SaveExploits0References6
Circl
Circl
added 2022/03/27 6:39 p.m.6 views

CVE-2022-1106

creationtimestamp| type| source ---|---|--- 2022-03-27 18:39:15+00:00| seen| https://t.me/cibsecurity/39592...

9.1CVSS7.3AI score0.01031EPSS
SaveExploits1References1
NVD
NVD
added 2022/03/27 2:15 p.m.23 views

CVE-2022-1106

use after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

9.1CVSS0.01031EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2022/03/27 2:15 p.m.29 views

CVE-2022-1106

use after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

9.1CVSS7.1AI score0.01031EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2022/03/27 2:5 p.m.27 views

CVE-2022-1106 use after free in mrb_vm_exec in mruby/mruby

use after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

7.2CVSS9.7AI score0.01031EPSS
SaveExploits1References2
CVE
CVE
added 2022/03/27 2:5 p.m.108 views

CVE-2022-1106

CVE-2022-1106 affects mruby/mruby before 3.2. The issue is a use-after-free vulnerability in mrb_vm_exec. Public references consistently identify the vulnerable component as mruby/mruby and the root cause as use-after-free in mrb_vm_exec, with potential for arbitrary code execution (per CNVD). Se...

9.1CVSS8.2AI score0.01031EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
added 2022/03/27 2:5 p.m.63 views

CVE-2022-1106

use after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

9.1CVSS7.3AI score0.01031EPSS
SaveExploits1
OSV
OSV
added 2022/03/27 2:5 p.m.24 views

CVE-2022-1106 use after free in mrb_vm_exec in mruby/mruby

use after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

7.2CVSS7.4AI score0.01031EPSS
SaveExploits1References4
Prion
Prion
added 2020/05/21 11:15 p.m.22 views

Cross site scripting

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1099, CVE-2020-1101, CVE-2020-1106...

3.5CVSS5.1AI score0.03077EPSS
SaveExploits1References1Affected Software3
Prion
Prion
added 2020/05/21 11:15 p.m.26 views

Cross site scripting

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1100, CVE-2020-1101, CVE-2020-1106...

3.5CVSS5.1AI score0.03077EPSS
SaveExploits1References1Affected Software2
Prion
Prion
added 2020/05/21 11:15 p.m.28 views

Cross site scripting

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1099, CVE-2020-1100, CVE-2020-1106...

3.5CVSS5.1AI score0.03077EPSS
SaveExploits1References1Affected Software3
CVE
CVE
added 2020/05/21 10:53 p.m.99 views

CVE-2020-1106

CVE-2020-1106 corresponds to a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server, where improper sanitization of a crafted web request can lead to an XSS condition on the affected server. The NVD entry notes a CVSS v3.1 base score of 6.1 (Network, Low attack complexity, User...

6.1CVSS5.1AI score0.03077EPSS
SaveExploits1References2Affected Software3
Cvelist
Cvelist
added 2020/05/21 10:53 p.m.28 views

CVE-2020-1106

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1099, CVE-2020-1100, CVE-2020-1101...

5.2AI score0.03077EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2019/12/23 12:0 a.m.46 views

EulerOS 2.0 SP5 : PackageKit (EulerOS-SA-2019-2700)

According to the version of the PackageKit packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed...

5.5CVSS5.6AI score0.00393EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/08/12 12:0 a.m.22 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : PackageKit Vulnerability (NS-SA-2019-0028)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has PackageKit packages installed that are affected by a vulnerability: - An authentication bypass flaw has been found in PackageKit that allows users without administrator privileges to install signed packages. A local attacke...

5.5CVSS5.6AI score0.00393EPSS
SaveExploits0References2
CVE
CVE
added 2019/07/29 2:8 p.m.132 views

CVE-2019-1106

Technical details for CVE-2019-1106 are not publicly provided in the supplied documents. No concrete information on affected products, versions, root cause, impact, or fixes is available here. Monitor for updates from official advisories.

7.6CVSS7.4AI score0.09205EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/07/29 2:8 p.m.28 views

CVE-2019-1106

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1062, CVE-2019-1092, CVE-2019-1103, CVE-2019-1107...

7.5AI score0.09205EPSS
SaveExploits0References1
Rows per page
Query Builder