Lucene search
K

25 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 11:23 a.m.4 views

CVE-2021-31256

Memory leak in the stblGetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

5.5CVSS6.5AI score0.0012EPSS
Exploits1References1
Circl
Circl
added 2025/05/12 10:47 p.m.10 views

CVE-2025-31256

creationtimestamp| type| source ---|---|--- 2025-05-12 22:47:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loz2g3jdvg2h 2025-05-13 01:19:16+00:00| seen| https://t.me/cvedetector/25121 2025-05-13 20:31:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16224...

5.5CVSS4.8AI score0.00083EPSS
Exploits0References3
NVD
NVD
added 2025/05/12 10:15 p.m.16 views

CVE-2025-31256

The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.5. Hot corner may unexpectedly reveal a user’s deleted notes...

5.5CVSS0.00083EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/05/12 9:42 p.m.6 views

CVE-2025-31256

The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.5. Hot corner may unexpectedly reveal a user’s deleted notes...

6.6AI score0.00083EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 12:28 a.m.7 views

CVE-2024-31256

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebinarPress allows Reflected XSS.This issue affects WebinarPress: from n/a through 1.33.10...

7.1CVSS6.9AI score0.00152EPSS
Exploits0References1
NVD
NVD
added 2024/04/07 6:15 p.m.11 views

CVE-2024-31256

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebinarPress allows Reflected XSS.This issue affects WebinarPress: from n/a through 1.33.10...

7.1CVSS6.9AI score0.00152EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/07 5:48 p.m.14 views

CVE-2024-31256 WordPress WebinarPress plugin <= 1.33.10 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebinarPress allows Reflected XSS.This issue affects WebinarPress: from n/a through 1.33.10...

7.1CVSS6.9AI score0.00152EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/07 5:48 p.m.13 views

CVE-2024-31256 WordPress WebinarPress plugin <= 1.33.10 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebinarPress allows Reflected XSS.This issue affects WebinarPress: from n/a through 1.33.10...

7.1CVSS7.1AI score0.00152EPSS
Exploits0References1
CVE
CVE
added 2024/04/07 5:48 p.m.46 views

CVE-2024-31256

CVE-2024-31256 is a Reflected XSS in the WordPress WebinarPress (WP Webinar System) plugin. Affected: WebinarPress versions up to 1.33.10. Root cause: improper neutralization of input during web page generation. Impact: potential disclosure/remote script execution via crafted input (low to modera...

7.1CVSS7.1AI score0.00152EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/04/05 12:0 a.m.7 views

WordPress WebinarPress Plugin <= 1.33.10 is vulnerable to Cross Site Scripting (XSS)

Software WebinarPress Type Plugin Vulnerable versions = 1.33.10 Fixed in 1.33.11 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31256 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5bfc876c299b Credits Le Ngoc Anh Required privilege...

7.1CVSS6.5AI score0.00152EPSS
Exploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 3:25 a.m.2 views

SUSE CVE-2022-31256

A Improper Link Resolution Before File Access 'Link Following' vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1...

7.8CVSS6.7AI score0.00128EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2022/11/09 12:0 a.m.30 views

SUSE SLES12 Security Update : sendmail (SUSE-SU-2022:3898-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:3898-1 advisory. - A Improper Link Resolution Before File Access 'Link Following' vulnerability in a script called by the sendmail systemd service of openSUS...

7.8CVSS7.3AI score0.00128EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2022/11/09 12:0 a.m.14 views

SUSE: Security Advisory (SUSE-SU-2022:3899-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.00128EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2022/11/09 12:0 a.m.16 views

SUSE: Security Advisory (SUSE-SU-2022:3898-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.00128EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/11/09 12:0 a.m.27 views

SUSE SLED15 / SLES15 Security Update : sendmail (SUSE-SU-2022:3899-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:3899-1 advisory. - A Improper Link Resolution Before File Access 'Link Following' vulnerability in a script called by the sendmail syste...

7.8CVSS7.3AI score0.00128EPSS
Exploits0References5
OSV
OSV
added 2022/11/08 9:44 a.m.4 views

SUSE-SU-2022:3899-1 Security update for sendmail

This update for sendmail fixes the following issues: - CVE-2022-31256: Fixed mail to root privilege escalation via sm-client.pre script bsc1204696, bsc1202937...

7.8CVSS7.8AI score0.00128EPSS
Exploits0References4
OSV
OSV
added 2022/11/08 9:41 a.m.3 views

SUSE-SU-2022:3898-1 Security update for sendmail

This update for sendmail fixes the following issues: - CVE-2022-31256: Fixed mail to root privilege escalation via sm-client.pre script bsc1204696, bsc1202937...

7.8CVSS7.8AI score0.00128EPSS
Exploits0References4
Circl
Circl
added 2022/10/26 12:27 p.m.3 views

CVE-2022-31256

creationtimestamp| type| source ---|---|--- 2022-10-26 12:27:16+00:00| seen| https://t.me/cibsecurity/52089 2025-05-09 19:26:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15820...

7.8CVSS7.1AI score0.00128EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/10/26 8:55 a.m.38 views

CVE-2022-31256 sendmail: mail to root privilege escalation via sm-client.pre script

A Improper Link Resolution Before File Access 'Link Following' vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1...

7.7CVSS7.7AI score0.00128EPSS
Exploits0References1
CVE
CVE
added 2022/10/26 8:55 a.m.80 views

CVE-2022-31256

CVE-2022-31256 is a local privilege-escalation issue in the openSUSE/openSUSE Factory sendmail workflow. Affected component: a script invoked by the sendmail systemd service. Root cause: improper link resolution before file access ("link following") in that script allows a local attacker to escal...

7.8CVSS7.4AI score0.00128EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder