Lucene search
K

20 matches found

Circl
Circl
added 2025/12/06 9:43 a.m.2 views

CVE-2025-13308

creationtimestamp| type| source ---|---|--- 2025-12-06 09:43:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7cplmgjan2x...

5.4CVSS4.8AI score0.00136EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2020-13308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. A user without 2 factor authentication enabled could be prohibited from...

4CVSS5AI score0.00293EPSS
Exploits0References2
Circl
Circl
added 2025/01/09 8:34 p.m.4 views

CVE-2024-13308

creationtimestamp| type| source ---|---|--- 2025-01-09 20:34:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113800305235617163 2025-01-09 21:16:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlz3szkz27 2025-01-09 21:18:03+00:00| seen|...

3.8CVSS4.8AI score0.00237EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/01/09 8:27 p.m.15 views

CVE-2024-13308 Browser Back Button - Moderately critical - Cross site scripting - SA-CONTRIB-2024-072

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Browser Back Button allows Cross-Site Scripting XSS.This issue affects Browser Back Button: from 1.0.0 before 2.0.2...

0.00237EPSS
Exploits0References1
CVE
CVE
added 2025/01/09 8:27 p.m.46 views

CVE-2024-13308

CVE-2024-13308 affects the Drupal Browser Back Button module. The vulnerability is an improper neutralization of input during web page generation (XSS) in the module’s back-button block, stemming from insufficient escaping of administrator-entered text. Affected versions: 1.0.0–2.0.2. Impact desc...

3.8CVSS6.6AI score0.00237EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2024/12/05 10:15 p.m.11 views

CVE-2017-13308

In tscpuwriteGPIOout and mtktsAbtswrite of mtktsAbts.c, there is a possible buffer overflow in an sscanf due to improper input validation. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS0.0003EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/05 10:5 p.m.9 views

CVE-2017-13308

In tscpuwriteGPIOout and mtktsAbtswrite of mtktsAbts.c, there is a possible buffer overflow in an sscanf due to improper input validation. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

7.6AI score0.0003EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/05/17 12:0 a.m.17 views

GitLab 1.0 < 13.1.10 / 13.2 < 13.2.8 / 13.3 < 13.3.4 (CVE-2020-13308)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. A user without 2 factor authentication enabled could be prohibited from accessing GitLab by being invited into a...

4CVSS5AI score0.00293EPSS
Exploits0References4
Prion
Prion
added 2021/06/15 7:15 p.m.17 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.8CVSS7.8AI score0.00345EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2021/06/15 7:11 p.m.48 views

CVE-2021-31496

OpenText Brava! Desktop 16.6.3.84 is affected by a DXF file parsing vulnerability that allows remote code execution. The issue stems from improper validation during DXF parsing, causing a write past the end of an allocated buffer (out-of-bounds write). Exploitation requires user interaction (visi...

7.8CVSS7.8AI score0.00345EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2020/09/15 1:15 p.m.0 views

UBUNTU-CVE-2020-13308

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. A user without 2 factor authentication enabled could be prohibited from accessing GitLab by being invited into a project that had 2 factor authentication inheritance...

2.7CVSS5.8AI score0.00293EPSS
Exploits0References3
CVE
CVE
added 2020/09/15 12:30 p.m.52 views

CVE-2020-13308

GitLab CVE-2020-13308 affects GitLab versions before 13.1.10, 13.2.8, and 13.3.4. A user without two‑factor authentication could be prohibited from accessing GitLab by being invited into a project that uses 2FA inheritance. Remediation is to upgrade to the fixed releases (13.1.10+, 13.2.8+, 13.3....

4CVSS3.8AI score0.00293EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2020/07/31 12:0 a.m.23 views

Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2020-1806)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.9AI score0.02095EPSS
Exploits18References2
Tenable Nessus
Tenable Nessus
added 2019/08/12 12:0 a.m.38 views

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2019:2010-1)

This update for ImageMagick fixes the following issues : CVE-2019-13301: Fixed a memory leak in AcquireMagickMemory bsc1140554. CVE-2019-13310: Fixed a memory leak at AcquireMagickMemory because of an error in MagickWand/mogrify.c bsc1140501. CVE-2019-13311: Fixed a memory leak at...

8.8CVSS6.8AI score0.02588EPSS
Exploits11References55
Circl
Circl
added 2019/07/05 4:0 a.m.0 views

CVE-2019-13308

creationtimestamp| type| source ---|---|--- 2019-07-05 04:00:09+00:00| seen| https://t.me/cveNotify/230...

8.8CVSS6.7AI score0.01053EPSS
Exploits1References1
OSV
OSV
added 2019/07/05 1:15 a.m.0 views

UBUNTU-CVE-2019-13308

ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow in MagickCore/fourier.c in ComplexImage...

8.8CVSS7AI score0.01053EPSS
Exploits1References3
CVE
CVE
added 2019/07/05 12:53 a.m.275 views

CVE-2019-13308

CVE-2019-13308 is an ImageMagick issue: in ImageMagick 7.0.8-50 Q16, the ComplexImage path in MagickCore/fourier.c exposes a heap-based buffer overflow in the ComplexImage handling. The associated IBM bulletin lists this CVE among a set of ImageMagick/Red Hat–related flaws and notes a high-severi...

8.8CVSS8.6AI score0.01053EPSS
Exploits1References7Affected Software1
NVD
NVD
added 2018/11/26 11:29 p.m.13 views

CVE-2018-13308

Cross-site scripting in noticegen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript by modifying the "User phrases button" field...

6.1CVSS6.4AI score0.00212EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/11/26 10:0 p.m.16 views

CVE-2018-13308

Cross-site scripting in noticegen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript by modifying the "User phrases button" field...

6.4AI score0.00212EPSS
Exploits1References1
CVE
CVE
added 2018/11/26 10:0 p.m.45 views

CVE-2018-13308

CVE-2018-13308 affects the TOTOLINK A3002RU router (firmware 1.0.8). The issue is a cross-site scripting vulnerability in the notice_gen.htm page, exploitable by modifying the "User phrases button" field to execute arbitrary JavaScript. The CVE descriptions in multiple sources confirm the vulnera...

6.1CVSS6.4AI score0.00212EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder