Lucene search
+L

11617 matches found

The Coalfire Blog
The Coalfire Blog
added 2022/05/04 5:07 p.m.10 views

CMMC – The smoke is clearing

The smoke is finally starting to clear on "CMMC 2.0." Hundreds of companies are already lining up for Cybersecurity Maturity Model Certification assessments. Everything is taking place faster and with far more urgency than most organizations have planned around or prepared for...

2.3AI score
SaveExploits0
The Coalfire Blog
The Coalfire Blog
added 2022/05/04 5:07 p.m.14 views

CMMC – The smoke is clearing

The smoke is finally starting to clear on "CMMC 2.0." Hundreds of companies are already lining up for Cybersecurity Maturity Model Certification assessments. Everything is taking place faster and with far more urgency than most organizations have planned around or prepared for...

2.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2022/05/04 12:00 a.m.71 views

Fedora: Security Advisory for chromium (FEDORA-2022-17aa1c62da)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.6CVSS7.5AI score0.16596EPSS
SaveExploits14References4
NVD
NVD
added 2022/05/03 2:15 p.m.24 views

CVE-2022-0916

An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations...

8.8CVSS0.00443EPSS
SaveExploits0References1
Prion
Prion
added 2022/05/03 2:15 p.m.23 views

Cross site request forgery (csrf)

An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations...

6.8CVSS8.7AI score0.00443EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/05/03 1:40 p.m.2424 views

CVE-2022-0916

CVE-2022-0916 affects Logitech Options. The issue is that the OAuth 2.0 state parameter was not properly validated, enabling potential CSRF during authentication/authorization. Documents show vulnerability details and CVSS metrics but do not provide a concrete patch/version or remediation guidanc...

8.8CVSS8.8AI score0.00443EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/05/02 10:40 p.m.67 views

CVE-2020-23617

CVE-2020-23617 concerns a cross-site scripting (XSS) vulnerability in the error page of Totolink N200RE and N100RE routers running version 2.0. The flaw allows an attacker to cause the router’s error page to execute arbitrary web scripts or HTML via a SCRIPT element. Reported across multiple sour...

6.1CVSS6AI score0.00559EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2022/05/02 12:00 a.m.18 views

Fedora: Security Advisory for usd (FEDORA-2022-61f6ee6353)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS6.8AI score0.02111EPSS
SaveExploits1References2
OSV
OSV
added 2022/05/01 12:40 p.m.25 views

CVE-2022-23060 Shopizer - Stored XSS in Manage Files

A Stored Cross Site Scripting XSS vulnerability exists in Shopizer versions 2.0 through 2.17.0, where a privileged user attacker can inject malicious JavaScript in the filename under the “Manage files” tab...

4.8CVSS5.9AI score
SaveExploits0References4
OpenVAS
OpenVAS
added 2022/04/29 12:00 a.m.8 views

Fedora: Security Advisory for golang-github-prometheus-node-exporter (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/29 12:00 a.m.17 views

Fedora: Security Advisory for golang-github-haproxytech-client-native (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/29 12:00 a.m.19 views

Fedora: Security Advisory for golang-github-google-slothfs (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/29 12:00 a.m.8 views

Fedora: Security Advisory for golang-github-intel-goresctrl (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/29 12:00 a.m.26 views

Fedora: Security Advisory for golang-github-containerd-stargz-snapshotter (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/29 12:00 a.m.17 views

Fedora: Security Advisory for commit-stream (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/29 12:00 a.m.14 views

Fedora: Security Advisory for golang-k8s-sample-controller (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/29 12:00 a.m.14 views

Fedora: Security Advisory for golang-k8s-code-generator (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/28 12:00 a.m.19 views

Slackware: Security Advisory (SSA:2022-117-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.4AI score0.03777EPSS
SaveExploits4References6
Tenable Nessus
Tenable Nessus
added 2022/04/27 12:00 a.m.33 views

CentOS 8 : container-tools:2.0 (CESA-2022:1566)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1566 advisory. - podman: Default inheritable capabilities for linux container should be empty CVE-2022-27649 - buildah: Default inheritable capabilities for linux...

7.5CVSS7.5AI score0.01429EPSS
SaveExploits0References3
Prion
Prion
added 2022/04/26 9:15 p.m.19 views

Arbitrary file deletion

Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\filecontroller.php...

5.5CVSS8.2AI score0.01224EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder