Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 1:5 a.m.3 views

CVE-2022-28081

A reflected cross-site scripting XSS vulnerability in the component Query.php of arPHP v3.6.0 allows attackers to execute arbitrary web scripts...

6.1CVSS6AI score0.0024EPSS
Exploits0References1
Circl
Circl
added 2023/05/19 2:32 a.m.0 views

CVE-2023-28081

creationtimestamp| type| source ---|---|--- 2023-05-19 02:32:38+00:00| seen| https://t.me/cibsecurity/64440...

9.8CVSS8.7AI score0.0184EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/05/18 10:15 p.m.0 views

CVE-2023-28081

A bytecode optimization bug in Hermes prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could be used to cause an use-after-free and obtain arbitrary code execution via a carefully crafted payload. Note that this is only exploitable in cases where Hermes is used to execute untrusted...

9.8CVSS7.8AI score0.0184EPSS
Exploits0References3
CVE
CVE
added 2023/05/18 9:26 p.m.50 views

CVE-2023-28081

CVE-2023-28081 involves a bytecode optimization bug in the Hermes JavaScript engine (used by React Native). The flaw, present in Hermes builds prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81, can cause a use-after-free and enable arbitrary code execution via a carefully crafted payload. ...

9.8CVSS9.6AI score0.0184EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/18 9:26 p.m.7 views

CVE-2023-28081

A bytecode optimization bug in Hermes prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could be used to cause an use-after-free and obtain arbitrary code execution via a carefully crafted payload. Note that this is only exploitable in cases where Hermes is used to execute untrusted...

7.8AI score0.0184EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/05/18 9:26 p.m.16 views

CVE-2023-28081

A bytecode optimization bug in Hermes prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could be used to cause an use-after-free and obtain arbitrary code execution via a carefully crafted payload. Note that this is only exploitable in cases where Hermes is used to execute untrusted...

9.8AI score0.0184EPSS
Exploits0References2
Circl
Circl
added 2022/05/04 6:35 p.m.0 views

CVE-2022-28081

creationtimestamp| type| source ---|---|--- 2022-05-04 18:35:00+00:00| seen| https://t.me/cibsecurity/41908...

6.1CVSS6AI score0.0024EPSS
Exploits0References1
CVE
CVE
added 2022/05/04 1:11 p.m.69 views

CVE-2022-28081

The CVE-2022-28081 entry concerns a reflected XSS vulnerability in the arPHP software, specifically in the Query.php component of arPHP v3.6.0 . According to connected sources, the issue arises from improper handling of user-supplied data (lack of data validation and unsafe output in Query.php), ...

6.1CVSS5.9AI score0.0024EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/05/04 1:11 p.m.13 views

CVE-2022-28081

A reflected cross-site scripting XSS vulnerability in the component Query.php of arPHP v3.6.0 allows attackers to execute arbitrary web scripts...

6.1AI score0.0024EPSS
Exploits0References1
Rows per page
Query Builder