Lucene search
+L

158 matches found

Circl
Circl
added 2024/03/13 5:37 p.m.12 views

CVE-2024-1862

creationtimestamp| type| source ---|---|--- 2024-03-13 17:37:06+00:00| seen| https://t.me/ctinow/206939...

8.1CVSS8.4AI score0.00673EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/13 3:26 p.m.45 views

CVE-2024-1862

CVE-2024-1862 affects the WordPress plugin “WooCommerce Add to Cart Custom Redirect” (versions

8.1CVSS8.3AI score0.00673EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2024/03/08 12:00 a.m.10 views

WordPress WooCommerce Add to Cart Custom Redirect Plugin <= 1.2.13 is vulnerable to Broken Access Control

Software WooCommerce Add to Cart Custom Redirect Type Plugin Vulnerable versions = 1.2.13 Fixed in 1.2.14 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1862 Patch priority Low CVSS severity Low 8.1 Developer Claim ownership PSID c97532040847 Credits Luci...

8.1CVSS6.5AI score0.00673EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2023/06/20 9:15 a.m.36 views

CVE-2023-1862

Cloudflare WARP client for Windows up to v2023.3.381.0 allowed a malicious actor to remotely access the warp-svc.exe binary due to an insufficient access control policy on an IPC Named Pipe. This would have enabled an attacker to trigger WARP connect and disconnect commands, as well as obtaining...

7.3CVSS7.2AI score0.00754EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/06/20 8:28 a.m.14 views

CVE-2023-1862 Remote access to warp-svc.exe in Cloudflare WARP

Cloudflare WARP client for Windows up to v2023.3.381.0 allowed a malicious actor to remotely access the warp-svc.exe binary due to an insufficient access control policy on an IPC Named Pipe. This would have enabled an attacker to trigger WARP connect and disconnect commands, as well as obtaining...

7.3CVSS6.5AI score0.00754EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2023/06/20 8:28 a.m.66 views

CVE-2023-1862

Cloudflare WARP client for Windows up to v2023.3.381.0 allowed a malicious actor to remotely access the warp-svc.exe binary due to an insufficient access control policy on an IPC Named Pipe. This would have enabled an attacker to trigger WARP connect and disconnect commands, as well as obtaining...

7.3CVSS7AI score0.00754EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/06/20 8:28 a.m.43 views

CVE-2023-1862 Remote access to warp-svc.exe in Cloudflare WARP

Cloudflare WARP client for Windows up to v2023.3.381.0 allowed a malicious actor to remotely access the warp-svc.exe binary due to an insufficient access control policy on an IPC Named Pipe. This would have enabled an attacker to trigger WARP connect and disconnect commands, as well as obtaining...

7.3CVSS7.3AI score0.00754EPSS
SaveExploits0References3
CVE
CVE
added 2023/06/20 8:28 a.m.101 views

CVE-2023-1862

CVE-2023-1862 affects the Cloudflare WARP client for Windows (up to v2023.3.381.0). The weakness is an insufficient access control policy on an IPC Named Pipe used by warp-svc.exe, which could let a remote attacker trigger WARP connect/disconnect commands and read network diagnostics and applicat...

7.3CVSS7.2AI score0.00754EPSS
SaveExploits0References3Affected Software1
Circl
Circl
added 2023/06/14 9:10 p.m.12 views

CVE-2009-1862

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:32:03+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971628 2025-02-23 02:09:59+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2025-08-31...

9.3CVSS5.8AI score0.25006EPSS
SaveExploits5References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:39 a.m.8 views

SUSE CVE-2013-1862

modrewrite.c in the modrewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a terminal emulator...

5.1CVSS7.8AI score0.24886EPSS
SaveExploits2References9
SUSE CVE
SUSE CVE
added 2023/02/15 3:33 a.m.8 views

SUSE CVE-2022-1862

Inappropriate implementation in Extensions in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass profile restrictions via a crafted HTML page...

6.5CVSS6.7AI score0.00565EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2022/10/21 12:00 a.m.39 views

Amazon Linux 2 : golang-googlecode-sqlite (ALAS-2022-1862)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1862 advisory. 2023-05-11: CVE-2022-1996 has changed status to NOT AFFECTED for this package and has been removed from this advisory. A flaw was found in golang. The HTTP/1 client accepted invalid...

9.3CVSS7.2AI score0.0995EPSS
SaveExploits7References32
Circl
Circl
added 2022/07/28 2:11 a.m.16 views

CVE-2022-1862

creationtimestamp| type| source ---|---|--- 2022-07-28 02:11:45+00:00| seen| https://t.me/cibsecurity/47147...

6.5CVSS6.8AI score0.00565EPSS
SaveExploits0References1
OSV
OSV
added 2022/07/27 10:15 p.m.8 views

UBUNTU-CVE-2022-1862

Inappropriate implementation in Extensions in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass profile restrictions via a crafted HTML page...

6.5CVSS5.8AI score0.00565EPSS
SaveExploits0References2
CVE
CVE
added 2022/07/27 9:17 p.m.242 views

CVE-2022-1862

CVE-2022-1862 corresponds to an issue in Google Chrome extensions: an inappropriate implementation in Extensions allowed a user-assisted attacker to bypass profile restrictions via a crafted HTML page. The vulnerability affects Chrome prior to 102.0.5005.61 (and related Chromium builds). Impact d...

6.5CVSS6.6AI score0.00565EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2022/07/27 9:17 p.m.37 views

CVE-2022-1862

Inappropriate implementation in Extensions in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass profile restrictions via a crafted HTML page...

7AI score0.00565EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2022/07/02 12:00 a.m.25 views

Fedora: Security Advisory for chromium (FEDORA-2022-bcb096166f)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.6CVSS7.2AI score0.00981EPSS
SaveExploits4References2
OpenVAS
OpenVAS
added 2022/06/16 12:00 a.m.6 views

Huawei EulerOS: Security Advisory for flac (EulerOS-SA-2022-1862)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6AI score0.00465EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/05/28 12:00 a.m.35 views

SUSE SLED15 / SLES15 Security Update : go1.17 (SUSE-SU-2022:1862-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1862-1 advisory. - Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags...

5.3CVSS7.1AI score0.02951EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2022/05/27 12:00 a.m.21 views

openSUSE: Security Advisory for go1.17 (SUSE-SU-2022:1862-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.3CVSS9.1AI score0.02951EPSS
SaveExploits1References2
Rows per page
Query Builder