Lucene search
+L

17 matches found

Tenable Nessus
Tenable Nessus
added 2026/06/26 12:0 a.m.10 views

Oracle Linux 8 : libreoffice (ELSA-2026-28922)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-28922 advisory. - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has Tenable has extracted the preceding description block directly from th...

7.8CVSS7.2AI score0.00078EPSS
SaveExploits0References2
Circl
Circl
added 2026/05/12 10:21 a.m.17 views

CVE-2026-28922

creationtimestamp| type| source ---|---|--- 2026-05-12 10:21:51+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-apple-macos-security-update-review 2026-05-12 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260513 2026-05-26...

6.5CVSS5.7AI score0.00322EPSS
SaveExploits0References3
NVD
NVD
added 2026/05/11 9:18 p.m.15 views

CVE-2026-28922

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to access private information...

6.5CVSS0.00322EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 3:27 p.m.11 views

CVE-2020-28922

An issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel driver exposes IOCTL functionality that allows low-privilege users to read and write arbitrary physical memory. This could lead to arbitrary Ring-0 code execution and escalation of privileges...

8.8CVSS7.4AI score0.00653EPSS
SaveExploits1
CVE
CVE
added 2025/03/11 9:1 p.m.47 views

CVE-2025-28922

CVE-2025-28922 describes a CSRF to Stored XSS vulnerability in the WordPress Go To Top plugin (affected: versions up to 0.0.8). The issue arises from CSRF handling that enables stored cross-site scripting when a victim visits a crafted page or executes a forged request. Connected sources confirm ...

7.1CVSS7.2AI score0.00139EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/11 9:1 p.m.2 views

CVE-2025-28922 WordPress Go To Top plugin <= 0.0.8 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Terence D. Go To Top go-to-top allows Stored XSS.This issue affects Go To Top: from n/a through = 0.0.8...

7.1CVSS8.6AI score0.00139EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/09 5:15 p.m.21 views

CVE-2024-28922

Secure Boot Security Feature Bypass Vulnerability...

4.1CVSS6.1AI score0.00721EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/09 5:0 p.m.171 views

CVE-2024-28922

CVE-2024-28922 is a Secure Boot security feature bypass vulnerability. CVSS‑3.1 metrics show a physical attack vector, low attack complexity, low privileges required, user interaction needed, with no confidentiality impact, but high integrity impact (base score 4.1, Medium). Connected sources ref...

4.1CVSS6.1AI score0.00721EPSS
SaveExploits0References1Affected Software13
Vulnrichment
Vulnrichment
added 2024/04/09 5:0 p.m.32 views

CVE-2024-28922 Secure Boot Security Feature Bypass Vulnerability

...

4.1CVSS6.8AI score0.00721EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/04/09 12:0 a.m.277 views

KB5036910: Windows Server version 23H2 Security Update (April 2024)

The remote Windows host is missing security update 5036910. It is, therefore, affected by multiple vulnerabilities - SmartScreen Prompt Security Feature Bypass Vulnerability CVE-2024-29988 - Secure Boot Security Feature Bypass Vulnerability CVE-2024-20669, CVE-2024-26168, CVE-2024-26171,...

8.8CVSS7.3AI score0.87896EPSS
SaveExploits7References88
Tenable Nessus
Tenable Nessus
added 2024/04/09 12:0 a.m.299 views

KB5036909: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (April 2024)

The remote Windows host is missing security update 5036909. It is, therefore, affected by multiple vulnerabilities - SmartScreen Prompt Security Feature Bypass Vulnerability CVE-2024-29988 - Secure Boot Security Feature Bypass Vulnerability CVE-2024-20669, CVE-2024-26168, CVE-2024-26171,...

8.8CVSS8.3AI score0.62576EPSS
SaveExploits6References83
Tenable Nessus
Tenable Nessus
added 2024/04/09 12:0 a.m.179 views

KB5036899: Windows 10 Version 1607 / Windows Server 2016 Security Update (April 2024)

The remote Windows host is missing security update 5036899. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability CVE-2024-26214 - Secure Boot Security Feature Bypass Vulnerability CVE-2024-20669, CVE-2024-26168,...

8.8CVSS8.5AI score0.62576EPSS
SaveExploits5References70
Tenable Nessus
Tenable Nessus
added 2024/04/09 12:0 a.m.159 views

KB5036960: Windows Server 2012 R2 Security Update (April 2024)

The remote Windows host is missing security update 5036960. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability CVE-2024-26214 - Secure Boot Security Feature Bypass Vulnerability CVE-2024-20669, CVE-2024-20688,...

8.8CVSS8.5AI score0.62576EPSS
SaveExploits5References62
Tenable Nessus
Tenable Nessus
added 2024/04/09 12:0 a.m.100 views

KB5036969: Windows Server 2012 Security Update (April 2024)

The remote Windows host is missing security update 5036969. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability CVE-2024-26214 - Secure Boot Security Feature Bypass Vulnerability CVE-2024-20669, CVE-2024-20688,...

8.8CVSS8.5AI score0.62576EPSS
SaveExploits5References53
Circl
Circl
added 2020/11/27 8:50 p.m.8 views

CVE-2020-28922

creationtimestamp| type| source ---|---|--- 2020-11-27 20:50:16+00:00| seen| https://t.me/cibsecurity/16896 2020-12-09 07:32:03+00:00| seen| https://t.me/cibsecurity/17441...

8.8CVSS8.2AI score0.00653EPSS
SaveExploits1References2
NVD
NVD
added 2020/11/27 6:15 p.m.21 views

CVE-2020-28922

An issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel driver exposes IOCTL functionality that allows low-privilege users to read and write arbitrary physical memory. This could lead to arbitrary Ring-0 code execution and escalation of privileges...

8.8CVSS8.7AI score0.00653EPSS
SaveExploits1References3
CVE
CVE
added 2020/11/27 5:51 p.m.82 views

CVE-2020-28922

CVE-2020-28922 affects Devid Espenschied PC Analyser up to version 4.10, where the PCADRVX64.SYS kernel driver exposes IOCTLs that allow a low-privilege user to read and write arbitrary physical memory. This leads to potential arbitrary Ring-0 code execution and privilege escalation. The connecte...

8.8CVSS8.6AI score0.00653EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder