Lucene search
+L

38 matches found

CVE
CVE
added 2023/03/07 12:00 a.m.63 views

CVE-2023-20633

CVE-2023-20633 describes a potential out-of-bounds write in the usb module due to a missing bounds check, enabling local escalation of privileges with SYSTEM level execution and no user interaction required. The vulnerability is described consistently across multiple sources and references patch ...

6.7CVSS6.7AI score0.00093EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/02/17 12:00 a.m.86 views

WordPress Plugin 'GDPR Cookie Consent' < 1.8.3 Multiple Vulnerabilities (CVE-2020-20633)

The WordPress application running on the remote host has a version of the 'GDPR Cookie Consent' plugin that is prior to 1.8.3. It is, therefore, affected by authenticated stored XSS and privilege escalation. Note that Nessus has not tested for this issue but has instead relied only on the...

5.4CVSS5.7AI score0.00859EPSS
SaveExploits1References2
Circl
Circl
added 2021/03/18 6:36 a.m.12 views

CVE-2021-20633

creationtimestamp| type| source ---|---|--- 2021-03-18 06:36:40+00:00| seen| https://t.me/cibsecurity/25066...

4.3CVSS4.7AI score0.00722EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/18 1:15 a.m.6 views

CVE-2021-20633

Improper access control vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the date of Cabinet via unspecified vectors...

4.3CVSS5.8AI score0.00722EPSS
SaveExploits0References2
CVE
CVE
added 2021/03/18 12:56 a.m.92 views

CVE-2021-20633

CVE-2021-20633 affects Cybozu Office Cabinet. An improper access control vulnerability allows authenticated users to bypass viewing restrictions and obtain Cabinet data via unspecified vectors in Cybozu Office versions 10.0.0–10.8.4. The issue is a cross-product access-control bypass (CWE-264 sty...

4.3CVSS4.8AI score0.00722EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2020/08/21 4:15 p.m.24 views

CVE-2020-20633

ajaxpolicygenerator in admin/modules/cli-policy-generator/classes/class-policy-generator-ajax.php in GDPR Cookie Consent cookie-law-info 1.8.2 and below plugin for WordPress, allows authenticated stored XSS and privilege escalation...

5.4CVSS5.3AI score0.00859EPSS
SaveExploits1References1
CVE
CVE
added 2020/08/21 3:42 p.m.78 views

CVE-2020-20633

CVE-2020-20633 affects the WordPress plugin GDPR Cookie Consent (cookie-law-info) versions 1.8.2 and earlier, via ajax_policy_generator in admin/modules/cli-policy-generator/classes/class-policy-generator-ajax.php. The vulnerability allows authenticated stored XSS and privilege escalation. The co...

5.4CVSS5.1AI score0.00859EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/08/21 3:42 p.m.40 views

CVE-2020-20633

ajaxpolicygenerator in admin/modules/cli-policy-generator/classes/class-policy-generator-ajax.php in GDPR Cookie Consent cookie-law-info 1.8.2 and below plugin for WordPress, allows authenticated stored XSS and privilege escalation...

5.2AI score0.00859EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2020/03/30 6:31 p.m.48 views

CVE-2019-20633

GNU patch through 2.7.6 contains a freeplinepend Double Free vulnerability in the function anotherhunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952...

7.5CVSS6AI score0.0819EPSS
SaveExploits1References3
Circl
Circl
added 2020/03/30 9:47 a.m.19 views

CVE-2019-20633

creationtimestamp| type| source ---|---|--- 2020-03-30 09:47:43+00:00| seen| https://t.me/cibsecurity/10818 2025-07-08 07:10:41+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816361290443115 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

5.5CVSS6.5AI score0.01023EPSS
SaveExploits1References3
Chainguard
Chainguard
added 2020/03/25 5:15 p.m.53 views

CVE-2019-20633 vulnerabilities

Vulnerabilities for packages: patch...

5.5CVSS7.4AI score0.01023EPSS
SaveExploits1
Wolfi
Wolfi
added 2020/03/25 5:15 p.m.57 views

CVE-2019-20633 vulnerabilities

Vulnerabilities for packages: patch...

5.5CVSS7.7AI score0.01023EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2020/03/25 5:15 p.m.403 views

CVE-2019-20633

GNU patch through 2.7.6 contains a freeplinepend Double Free vulnerability in the function anotherhunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952...

5.5CVSS6.8AI score0.01023EPSS
SaveExploits1References1
CVE
CVE
added 2020/03/25 4:44 p.m.523 views

CVE-2019-20633

CVE-2019-20633 affects GNU patch up to version 2.7.6. The vulnerability is a use-after-free in the function pch.c (another_hunk) caused by a faulty memory free (free(p_line[p_end])), which can enable denial of service via a crafted patch file. The issue is noted as stemming from an incomplete fix...

5.5CVSS6.2AI score0.01023EPSS
SaveExploits1References1Affected Software1
Debian CVE
Debian CVE
added 2020/03/25 4:44 p.m.115 views

CVE-2019-20633

GNU patch through 2.7.6 contains a freeplinepend Double Free vulnerability in the function anotherhunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952...

5.5CVSS6.2AI score0.01023EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2020/02/19 12:00 a.m.29 views

WordPress GDPR Cookie Consent Plugin < 1.8.3 Multiple Vulnerabilities

The WordPress plugin Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...

5.4CVSS7AI score0.00859EPSS
SaveExploits1References3
OSV
OSV
added 2019/03/21 4:00 p.m.10 views

CVE-2018-20633

PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

8.8CVSS5.8AI score0.0065EPSS
SaveExploits1References1
CVE
CVE
added 2019/03/20 6:20 p.m.57 views

CVE-2018-20633

CVE-2018-20633 affects PHP Scripts Mall Advance B2B Script 2.1.4, with a Cross-Site Request Forgery (CSRF) vulnerability exposed via the Edit Profile feature. The connected records consistently identify the vulnerable component as the Advance B2B Script 2.1.4 and describe the issue as CSRF via Ed...

8.8CVSS8.8AI score0.0065EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder