Lucene search
+L

69 matches found

CVE
CVE
added 2023/01/31 3:52 p.m.261 views

CVE-2022-24963

CVE-2022-24963. Apache Portable Runtime (APR) has an integer overflow in apr_encode functions that can write beyond buffer bounds. Public details confirm affected software APR 1.7.x, with reports stating APR versions less than 1.7.2-1 are vulnerable; a patched version APR 1.7.2-1 (and newer relea...

9.8CVSS7.9AI score0.01472EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/01/31 3:52 p.m.37 views

CVE-2022-24963 Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions

Integer Overflow or Wraparound vulnerability in aprencode functions of Apache Portable Runtime APR allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime APR version 1.7.0...

9.8CVSS6.9AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2023/01/31 3:52 p.m.9 views

CVE-2022-24963 Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions

Integer Overflow or Wraparound vulnerability in aprencode functions of Apache Portable Runtime APR allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime APR version 1.7.0...

9.5AI score0.01472EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2023/01/31 3:52 p.m.35 views

CVE-2022-24963

Integer Overflow or Wraparound vulnerability in aprencode functions of Apache Portable Runtime APR allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime APR version 1.7.0...

9.8CVSS7.6AI score0.01472EPSS
SaveExploits0
Circl
Circl
added 2022/01/03 4:44 p.m.9 views

CVE-2021-24963

creationtimestamp| type| source ---|---|--- 2022-01-03 16:44:15+00:00| seen| https://t.me/cibsecurity/34862...

4.8CVSS4.9AI score0.00654EPSS
SaveExploits2References1
OSV
OSV
added 2022/01/03 1:15 p.m.8 views

CVE-2021-24963

The LiteSpeed Cache WordPress plugin before 4.4.4 does not escape the qcres parameter before outputting it back in the JS code of an admin page, leading to a Reflected Cross-Site Scripting...

4.8CVSS5.9AI score0.00654EPSS
SaveExploits2References2
CVE
CVE
added 2022/01/03 12:49 p.m.81 views

CVE-2021-24963

The CVE-2021-24963 entry concerns the WordPress LiteSpeed Cache plugin prior to 4.4.4, where the qc_res parameter is not escaped before being echoed into admin-page JavaScript, enabling a Reflected Cross-Site Scripting vulnerability. Affected software: LiteSpeed Cache WordPress plugin (versions

4.8CVSS5AI score0.00654EPSS
SaveExploits2References2Affected Software1
Packet Storm
Packet Storm
added 2020/11/27 12:00 a.m.609 views

Best Support System 3.0.4 Cross Site Scripting

Exploit Title: Best Support System 3.0.4 - 'ticketbody' Persistent XSS Authenticated Google Dork: "Powered By Best Support System" Date: 2020-08-23 Exploit Author: Ex.Mi https://ex-mi.ru Vendor: Appsbd https://appsbd.com Software Version: 3.0.4 Software Link:...

3.5CVSS5.6AI score0.01853EPSS
SaveExploits2
CVE
CVE
added 2020/09/04 3:47 p.m.73 views

CVE-2020-24963

Summary: CVE-2020-24963 affects the Best Support System, v3.0.4. The vulnerability is an authenticated persistent XSS in the application, demonstrated via the ticketing workflow, specifically the ticket_body input in the ticket-confirm/ticket-reply/11.html path. The evidence from connected source...

5.4CVSS5.2AI score0.01853EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder