Lucene search
K

73 matches found

Circl
Circl
added 2026/04/08 10:47 p.m.0 views

CVE-2026-3199

creationtimestamp| type| source ---|---|--- 2026-04-08 22:47:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizeqrzleb25 2026-04-09 00:00:42+00:00| seen| https://infosec.exchange/users/offseq/statuses/116371806078783632 2026-04-09 00:00:44+00:00| seen|...

9.4CVSS4.8AI score0.00088EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/03/19 12:0 a.m.1 views

Amazon Linux 2 : freerdp, --advisory ALAS2-2026-3199 (ALAS-2026-3199)

The version of freerdp installed on the remote host is prior to 2.11.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3199 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a malicious RDP server can...

8.8CVSS6AI score0.00076EPSS
Exploits2References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-3199

Malware in sbrugna...

8.8CVSS8.8AI score0.07271EPSS
Exploits2References5
RedhatCVE
RedhatCVE
added 2025/05/22 9:29 p.m.4 views

CVE-2021-3199

Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an image upload parameter...

9.8CVSS7.8AI score0.06758EPSS
Exploits1References1
Circl
Circl
added 2025/04/04 2:35 a.m.4 views

CVE-2025-3199

creationtimestamp| type| source ---|---|--- 2025-04-04 02:35:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10382 2025-04-04 05:06:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llxnhflewh2h 2025-04-04 06:18:05+00:00| seen|...

9.8CVSS7.3AI score0.00559EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/04/04 2:0 a.m.8 views

CVE-2025-3199 ageerle ruoyi-ai API Interface SysModelController.java improper authorization

A vulnerability was found in ageerle ruoyi-ai up to 2.0.1 and classified as critical. Affected by this issue is some unknown functionality of the file ruoyi-modules/ruoyi-system/src/main/java/org/ruoyi/system/controller/system/SysModelController.java of the component API Interface. The manipulati...

7.5CVSS0.00559EPSS
Exploits1References8
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.29 views

openSUSE: Security Advisory for opera (openSUSE-SU-2022:10131-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.5AI score0.00962EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.27 views

openSUSE: Security Advisory for chromium (openSUSE-SU-2022:10123-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.5AI score0.00962EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2023/11/10 12:0 a.m.27 views

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2023-3199)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8AI score0.00247EPSS
Exploits0References2
Circl
Circl
added 2023/07/12 12:48 p.m.0 views

CVE-2023-3199

creationtimestamp| type| source ---|---|--- 2023-07-12 12:48:27+00:00| seen| https://t.me/cibsecurity/66505...

4.3CVSS6.1AI score0.00107EPSS
Exploits0References1
CVE
CVE
added 2023/07/12 4:38 a.m.48 views

CVE-2023-3199

CVE-2023-3199 affects the MStore API WordPress plugin. The vulnerability is a CSRF due to missing nonce validation in mstore_update_status_order_title, enabling unauthenticated attackers to forge requests to update status order titles if a site admin is tricked into actions. Publicly documented d...

4.3CVSS4.7AI score0.00107EPSS
Exploits0References3Affected Software1
Patchstack
Patchstack
added 2023/06/14 12:0 a.m.17 views

WordPress MStore API Plugin <= 3.9.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software MStore API Type Plugin Vulnerable versions = 3.9.6 Fixed in 3.9.7 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-3199 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 52100659480e Credits Truoc Phan Required...

4.3CVSS6.6AI score0.00107EPSS
Exploits0References3Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 3:31 a.m.1 views

SUSE CVE-2022-3199

Use after free in Frames in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.9AI score0.008EPSS
Exploits0References7
OpenVAS
OpenVAS
added 2022/10/03 12:0 a.m.24 views

Fedora: Security Advisory for chromium (FEDORA-2022-3f28aa88cf)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.6CVSS7.8AI score0.35994EPSS
Exploits5References4
Tenable Nessus
Tenable Nessus
added 2022/09/27 12:0 a.m.34 views

openSUSE 15 Security Update : opera (openSUSE-SU-2022:10130-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10130-1 advisory. - Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a...

8.8CVSS7.7AI score0.00962EPSS
Exploits0References13
OSV
OSV
added 2022/09/26 4:15 p.m.32 views

CVE-2022-3199

Use after free in Frames in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.9AI score
Exploits0References5
OSV
OSV
added 2022/09/26 4:15 p.m.0 views

UBUNTU-CVE-2022-3199

Use after free in Frames in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS5.8AI score0.008EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2022/09/26 12:0 a.m.7 views

CVE-2022-3199

Use after free in Frames in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

9AI score0.008EPSS
Exploits0References5
CVE
CVE
added 2022/09/26 12:0 a.m.147 views

CVE-2022-3199

CVE-2022-3199 concerns a Use-after-Free in Chrome/Chromium frames. The issue arises in Chrome prior to 105.0.5195.125, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page (high impact). Affected software is Chromium/Chrome's rendering frames subsystem; root c...

8.8CVSS8.8AI score0.008EPSS
Exploits0References5Affected Software1
AlpineLinux
AlpineLinux
added 2022/09/26 12:0 a.m.48 views

CVE-2022-3199

Use after free in Frames in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9AI score0.008EPSS
Exploits0
Rows per page
Query Builder