Lucene search
K

21 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 2:48 a.m.3 views

CVE-2023-21336

In Input Method, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.5AI score0.00017EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:21 a.m.8 views

CVE-2022-21336

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...

6.3CVSS5.8AI score0.11434EPSS
Exploits0References1
NVD
NVD
added 2025/01/14 6:15 p.m.4 views

CVE-2025-21336

Windows Cryptographic Information Disclosure Vulnerability...

5.6CVSS0.00221EPSS
Exploits0References1
OSV
OSV
added 2025/01/14 6:15 p.m.0 views

CVE-2025-21336

Windows Cryptographic Information Disclosure Vulnerability...

5.6CVSS7.3AI score0.00221EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/14 6:4 p.m.9 views

CVE-2025-21336 Windows Cryptographic Information Disclosure Vulnerability

...

5.6CVSS0.00221EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/14 6:4 p.m.12 views

CVE-2025-21336 Windows Cryptographic Information Disclosure Vulnerability

...

5.6CVSS7AI score0.00221EPSS
Exploits0References1
Circl
Circl
added 2025/01/14 5:29 p.m.4 views

CVE-2025-21336

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:22:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpum6b2pw2t 2025-01-15 01:41:34+00:00| seen|...

5.6CVSS7.3AI score0.00221EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2024/07/23 12:0 a.m.21 views

Photon OS 4.0: Mysql PHSA-2022-4.0-0153

An update of the mysql package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0153. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

7.1CVSS6.7AI score0.1491EPSS
Exploits0References54
OSV
OSV
added 2024/01/26 6:15 p.m.0 views

CVE-2024-21336

Microsoft Edge Chromium-based Spoofing Vulnerability...

2.5CVSS5.8AI score0.00334EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/01/26 5:40 p.m.15 views

CVE-2024-21336 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

2.5CVSS4.6AI score0.00334EPSS
Exploits0References1
CVE
CVE
added 2024/01/26 5:40 p.m.154 views

CVE-2024-21336

Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2024-21336) affects the Edge browser’s UI spoofing surface. Root cause: spoofing in the Chromium-based UI; impact is spoofed user interface with potential to mislead. Attack vector: local, requires user interaction; CVSS v3.1 base score ...

2.5CVSS3.8AI score0.00334EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/26 5:40 p.m.21 views

CVE-2024-21336 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

2.5CVSS7.2AI score0.00334EPSS
Exploits0References1
Circl
Circl
added 2023/10/30 7:25 p.m.3 views

CVE-2023-21336

creationtimestamp| type| source ---|---|--- 2023-10-30 19:25:52+00:00| seen| https://t.me/cibsecurity/73161 2025-08-18 09:42:08+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwo4amidkdp2...

5.5CVSS5.5AI score0.00017EPSS
Exploits0References2
CVE
CVE
added 2023/10/30 4:56 p.m.53 views

CVE-2023-21336

CVE-2023-21336 concerns an information disclosure vulnerability in Android’s Input Method, where side-channel information can reveal whether an app is installed without query permissions. The issue is described as a local information disclosure with no extra execution privileges required, and exp...

5.5CVSS5.6AI score0.00017EPSS
Exploits0References1Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 3:29 a.m.5 views

SUSE CVE-2022-21336

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...

6.3CVSS5.8AI score0.11434EPSS
Exploits0References3
CBLMariner
CBLMariner
added 2022/04/09 6:53 a.m.17 views

CVE-2022-21336 affecting package mysql for versions less than 8.0.28-1

CVE-2022-21336 affecting package mysql for versions less than 8.0.28-1. An upgraded version of the package is available that resolves this issue...

6.3CVSS6.7AI score0.11434EPSS
Exploits0
Chainguard
Chainguard
added 2022/01/19 12:15 p.m.8 views

CVE-2022-21336 vulnerabilities

Vulnerabilities for packages: mysql...

6.3CVSS6.9AI score0.11434EPSS
Exploits0
CVE
CVE
added 2022/01/19 11:24 a.m.357 views

CVE-2022-21336

The CVE-2022-21336 entry corresponds to Oracle MySQL Cluster (Cluster: General). Affected releases include 7.4.34 and earlier, 7.5.24 and earlier, 7.6.20 and earlier, and 8.0.27 and earlier. The vulnerability is exploitable by a high-privilege attacker with access to the hardware’s physical commu...

6.3CVSS5.6AI score0.11434EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2021/03/08 9:15 p.m.8 views

CVE-2021-21336

Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an information disclosure vulnerability - everyone can list the names of roles defined in the ZODB Role Manager plugin if the site uses this...

6.5CVSS6.3AI score
Exploits0References5
Cvelist
Cvelist
added 2021/03/08 8:40 p.m.16 views

CVE-2021-21336 Exposure of Sensitive Information to an Unauthorized Actor in Products.PluggableAuthService ZODBRoleManager

Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an information disclosure vulnerability - everyone can list the names of roles defined in the ZODB Role Manager plugin if the site uses this...

6.5CVSS6.8AI score0.00324EPSS
Exploits0References5
Rows per page
Query Builder