Lucene search
+L

83 matches found

Circl
Circl
added 2024/04/12 8:31 a.m.14 views

CVE-2012-3503

creationtimestamp| type| source ---|---|--- 2024-04-12 08:31:47+00:00| seen| https://t.me/arpsyndicate/4565...

9.8CVSS8.7AI score0.03002EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/01/24 8:23 p.m.5 views

Malicious code in wlwz-2312-3503 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e37821dcee33f95f4b953ea27d72c65c60194f7a9bf534d52b43687fac80898a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2024/01/24 8:23 p.m.11 views

MAL-2024-488 Malicious code in wlwz-2312-3503 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e37821dcee33f95f4b953ea27d72c65c60194f7a9bf534d52b43687fac80898a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/01/24 8:23 p.m.4 views

Malicious code in wlwz-2311-3503 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67797be8dc36ebfc481aa95423d855f70b7a5b0e8699080da778927702bb86c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2024/01/24 8:23 p.m.9 views

MAL-2024-171 Malicious code in wlwz-2311-3503 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67797be8dc36ebfc481aa95423d855f70b7a5b0e8699080da778927702bb86c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2023/07/04 3:15 p.m.8 views

CVE-2023-3503

A vulnerability has been found in SourceCodester Shopping Website 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been...

8.8CVSS5.4AI score0.00939EPSS
SaveExploits1References3
CVE
CVE
added 2023/07/04 2:31 p.m.166 views

CVE-2023-3503

CVE-2023-3503 concerns SourceCodester Shopping Website 1.0. The vulnerability is in the file insert-product.php, where an input allows an unrestricted file upload, enabling a remote attacker to upload arbitrary files. Exploitation details consistently reported across multiple connected sources: t...

8.8CVSS7.1AI score0.00939EPSS
SaveExploits1References3Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 6:11 a.m.13 views

SUSE CVE-2007-3503

The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.9AI score0.03051EPSS
SaveExploits1References3
Circl
Circl
added 2022/10/14 2:33 p.m.9 views

CVE-2022-3503

creationtimestamp| type| source ---|---|--- 2022-10-14 14:33:37+00:00| seen| https://t.me/cibsecurity/51395...

5.4CVSS5.5AI score0.00494EPSS
SaveExploits1References1
OSV
OSV
added 2022/10/14 11:15 a.m.9 views

CVE-2022-3503

A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Supplier Handler. The manipulation of the argument Supplier Name/Address/Contact person/Contact leads to cross site...

5.4CVSS3.8AI score0.00494EPSS
SaveExploits1References2
CVE
CVE
added 2022/10/14 12:00 a.m.70 views

CVE-2022-3503

CVE-2022-3503 affects SourceCodester Purchase Order Management System 1.0, specifically the Supplier Handler component. The vulnerability is a cross-site scripting (XSS) flaw caused by manipulating the arguments Supplier Name/Address/Contact person/Contact, which can be exploited remotely. The ex...

5.4CVSS4.5AI score0.00494EPSS
SaveExploits1References2Affected Software1
Circl
Circl
added 2022/04/18 8:29 p.m.16 views

CVE-2021-3503

creationtimestamp| type| source ---|---|--- 2022-04-18 20:29:46+00:00| seen| https://t.me/cibsecurity/41045...

4.3CVSS4.6AI score0.01089EPSS
SaveExploits0References1
CVE
CVE
added 2022/04/18 4:20 p.m.116 views

CVE-2021-3503

This CVE (CVE-2021-3503) concerns WildFly where insufficient RBAC restrictions may allow exposure of metrics data, affecting confidentiality. Affected software is WildFly; the root cause is RBAC misconfiguration that enables unauthorized access to metrics. Publicly documented impacts indicate pot...

4.3CVSS4.3AI score0.01089EPSS
SaveExploits0References5Affected Software1
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.34 views

SUSE: Security Advisory (SUSE-SU-2020:3503-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.7AI score0.06692EPSS
SaveExploits10References45
CVE
CVE
added 2020/09/24 5:51 p.m.79 views

CVE-2020-3503

Summary of CVE-2020-3503 (Cisco IOS XE Guest Shell Unauthorized File System Access) Cisco IOS XE Software contains a vulnerability in the file system permissions of the guest shell. The issue stems from insufficient file system permissions, allowing an authenticated, local attacker to access or m...

6CVSS5.7AI score0.00277EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2017/12/05 12:00 a.m.37 views

Ubuntu 14.04 LTS / 16.04 LTS : Evince vulnerability (USN-3503-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3503-1 advisory. It was discovered that Evince incorrectly handled printing certain DVI files. If a user were tricked into opening and printing a specially-named DVI...

7.8CVSS6.8AI score0.01406EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2017/04/24 7:00 p.m.17 views

CVE-2017-3503

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite subcomponent: Web Access Apache Commons BeanUtils. Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows low...

7.1AI score0.02063EPSS
SaveExploits0References3
CVE
CVE
added 2017/04/24 7:00 p.m.68 views

CVE-2017-3503

CVE-2017-3503 is a vulnerability in the Oracle Primavera P6 Enterprise Project Portfolio Management (P6 EPPM) Web Access component (Apache Commons BeanUtils). Affected versions: 8.3, 8.4, 15.1, 15.2, 16.1, and 16.2. The description indicates an easily exploitable issue where a low-privileged atta...

9.9CVSS8.6AI score0.02063EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/08/17 12:00 a.m.61 views

openSUSE Security Update : OpenJDK7 (openSUSE-2016-982)

Update to 2.6.7 - OpenJDK 7u111 - Security fixes - S8079718, CVE-2016-3458: IIOP Input Stream Hooking bsc989732 - S8145446, CVE-2016-3485: Perfect pipe placement Windows only bsc989734 - S8147771: Construction of static protection domains under Javax custom policy - S8148872, CVE-2016-3500:...

9.6CVSS6.9AI score0.0669EPSS
SaveExploits0References23
Tenable Nessus
Tenable Nessus
added 2016/08/16 12:00 a.m.46 views

openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2016-978)

This update for java-180-openjdk fixes the following issues : - Upgrade to version jdk8u101 icedtea 3.1.0 - New in release 3.1.0 2016-07-25 : - Security fixes - S8079718, CVE-2016-3458: IIOP Input Stream Hooking bsc989732 - S8145446, CVE-2016-3485: Perfect pipe placement Windows only bsc989734 -...

9.6CVSS6.8AI score0.0669EPSS
SaveExploits0References29
Rows per page
Query Builder