Lucene search
K

78 matches found

Circl
Circl
added 2026/04/11 2:16 a.m.0 views

CVE-2026-3371

creationtimestamp| type| source ---|---|--- 2026-04-11 02:16:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6rfdrtl62r...

4.3CVSS5.7AI score0.00012EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/20 3:14 p.m.3 views

EUVD-2026-3371

IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadi...

6.1CVSS5.1AI score0.00153EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2013-5427

Malware in sbrugna...

2.6CVSS6.1AI score0.00407EPSS
Exploits0References7
OSV
OSV
added 2025/09/15 1:9 a.m.1 views

ECHO-072A-9FF7-3371

Bulletin has no description...

7.8CVSS7AI score0.03726EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:50 a.m.6 views

CVE-2013-3371

Cross-site scripting XSS vulnerability in Request Tracker RT 3.8.3 through 3.8.16 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the filename of an attachment...

4.3CVSS5.8AI score0.00442EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/07 2:31 p.m.14 views

CVE-2025-3371 PCMan FTP Server DELETE Command buffer overflow

A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component DELETE Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the...

7.5CVSS7.4AI score0.00483EPSS
Exploits1References4
NVD
NVD
added 2024/04/24 5:15 p.m.11 views

CVE-2024-3371

MongoDB Compass may accept and use insufficiently validated input from an untrusted external source. This may cause unintended application behavior, including data disclosure and enabling attackers to impersonate users. This issue affects MongoDB Compass versions 1.35.0 to 1.42.0...

7.1CVSS6.8AI score0.00096EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/24 4:32 p.m.18 views

CVE-2024-3371 Insufficient validation of external input in Compass may enable MITM attacks

MongoDB Compass may accept and use insufficiently validated input from an untrusted external source. This may cause unintended application behavior, including data disclosure and enabling attackers to impersonate users. This issue affects MongoDB Compass versions 1.35.0 to 1.42.0...

7.1CVSS7AI score0.00096EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/24 4:32 p.m.16 views

CVE-2024-3371 Insufficient validation of external input in Compass may enable MITM attacks

MongoDB Compass may accept and use insufficiently validated input from an untrusted external source. This may cause unintended application behavior, including data disclosure and enabling attackers to impersonate users. This issue affects MongoDB Compass versions 1.35.0 to 1.42.0...

7.1CVSS7AI score0.00096EPSS
Exploits0References1
CVE
CVE
added 2024/04/24 4:32 p.m.73 views

CVE-2024-3371

CVE-2024-3371 affects MongoDB Compass. Affected versions: 1.35.0–1.42.0. Root cause: insufficient validation of input from untrusted sources, enabling unintended behavior and data disclosure, with potential for attackers to impersonate users and perform MITM-style access to the channel. Public di...

7.1CVSS6.6AI score0.00096EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/06/27 1:55 a.m.37 views

CVE-2023-3371

CVE-2023-3371 affects the EmbedPress WordPress plugin (

7.5CVSS7.1AI score0.00777EPSS
Exploits0References6Affected Software1
Patchstack
Patchstack
added 2023/06/26 12:0 a.m.12 views

WordPress EmbedPress Plugin <= 3.7.3 is vulnerable to Sensitive Data Exposure

Software EmbedPress Type Plugin Vulnerable versions = 3.7.3 Fixed in 3.8.0 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-3371 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID f1c35d9cb0cf Credits István Márton Required privileg...

7.5CVSS6.5AI score0.00777EPSS
Exploits0References3Affected Software1
Circl
Circl
added 2022/09/30 6:36 p.m.0 views

CVE-2022-3371

creationtimestamp| type| source ---|---|--- 2022-09-30 18:36:10+00:00| seen| https://t.me/cibsecurity/50770 2025-05-20 16:41:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17017...

7.5CVSS7.2AI score0.00468EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2022/09/30 1:15 p.m.4 views

CVE-2022-3371 No limit in length of "Token name" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3...

7.5CVSS7.6AI score0.00468EPSS
Exploits1References2
CVE
CVE
added 2022/09/30 1:15 p.m.62 views

CVE-2022-3371

CVE-2022-3371 affects rdiffweb prior to 2.5.0a3. The vulnerability stems from unbounded Token name length, allowing Allocation of Resources Without Limits or Throttling, leading to DoS or memory corruption. The issue is fixed in version 2.5.0a3. If upgrading is not possible, a temporary mitigatio...

7.5CVSS7.5AI score0.00468EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/09/30 1:15 p.m.11 views

CVE-2022-3371 No limit in length of "Token name" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3...

7.5CVSS7.8AI score0.00468EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.26 views

Ubuntu: Security Advisory (USN-853-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8AI score0.11615EPSS
Exploits31References3
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.23 views

Mageia: Security Advisory (MGASA-2017-0325)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.7AI score0.02273EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2021/09/01 12:0 a.m.27 views

RHEL 8 : cloud-init (RHSA-2021:3371)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:3371 advisory. The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to...

5.5CVSS5.8AI score0.00061EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.30 views

SUSE: Security Advisory (SUSE-SU-2019:3371-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.3AI score0.02564EPSS
Exploits1References85
Rows per page
Query Builder