Lucene search
+L

118 matches found

Patchstack
Patchstack
added 2023/08/16 12:00 a.m.27 views

WordPress Advanced File Manager Plugin < 5.1.1 is vulnerable to Sensitive Data Exposure

Software Advanced File Manager Type Plugin Vulnerable versions 5.1.1 Fixed in 5.1.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-3814 Patch priority Low CVSS severity Low 4.9 Developer Claim ownership PSID c11d3f659c9c Credits Dmitrii Required...

4.9CVSS6.5AI score0.00616EPSS
SaveExploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/05/25 12:00 a.m.37 views

Wireshark 1.10.x < 1.10.14 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 1.10.14. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.14 advisory. - epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12....

7.8CVSS6.5AI score0.04422EPSS
SaveExploits0References10
Circl
Circl
added 2022/11/02 1:19 a.m.8 views

CVE-2022-3814

creationtimestamp| type| source ---|---|--- 2022-11-02 01:19:12+00:00| seen| https://t.me/cibsecurity/52440...

6.5CVSS6.3AI score0.00793EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2022/11/01 12:00 a.m.8 views

CVE-2022-3814 Axiomatic Bento4 mp4decrypt memory leak

A vulnerability classified as problematic was found in Axiomatic Bento4. This vulnerability affects unknown code of the component mp4decrypt. The manipulation leads to memory leak. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier o...

4.3CVSS5.2AI score0.00793EPSS
SaveExploits1References3
CVE
CVE
added 2022/11/01 12:00 a.m.71 views

CVE-2022-3814

Axiomatic Bento4.mp4decrypt is affected by a memory-leak issue. The vulnerability involves unknown code in the mp4decrypt component and can be triggered remotely; exploit information has been disclosed publicly (VDB-212680). The connected documents consistently describe the flaw as affecting Bent...

6.5CVSS5.6AI score0.00793EPSS
SaveExploits1References3Affected Software1
OpenVAS
OpenVAS
added 2022/08/26 12:00 a.m.27 views

Ubuntu: Security Advisory (USN-3881-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.7CVSS6.8AI score0.02417EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2022/08/26 12:00 a.m.27 views

Ubuntu: Security Advisory (USN-3814-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS5.8AI score0.03086EPSS
SaveExploits1References2
NVD
NVD
added 2022/03/25 7:15 p.m.22 views

CVE-2021-3814

It was found that 3scale's APIdocs does not validate the access token, in the case of invalid token, it uses session auth instead. This conceivably bypasses access controls and permits unauthorized information disclosure...

7.5CVSS0.01158EPSS
SaveExploits0References1
CVE
CVE
added 2022/03/25 6:02 p.m.96 views

CVE-2021-3814

CVE-2021-3814 affects 3scale’s APIdocs. The issue is that token validation is not performed correctly: when an invalid token is presented, the system falls back to session authentication, which can bypass access controls and lead to unauthorized information disclosure. This is described in multip...

7.5CVSS7.3AI score0.01158EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.16 views

Mageia: Security Advisory (MGASA-2019-0072)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.7CVSS6.2AI score0.02417EPSS
SaveExploits1References6
OpenVAS
OpenVAS
added 2021/11/30 12:00 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2021:3814-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.03906EPSS
SaveExploits1References2
Rosalinux
Rosalinux
added 2021/07/02 6:20 p.m.45 views

Advisory ROSA-SA-2021-1997

Software: wirehark 1.10.14 OS: Cobalt 7.9 CVE-ID: CVE-2015-3814 CVE-Crit: HIGH CVE-DESC: The functions 1 exctfsrequest and 2 exctfsresponse in epan / dissectors / packet-ieee80211.c in IEEE 802.11 dissector in Wireshark 1.10.x through 1.10.14 and 1.12.x through 1.12.5 interpret the null. value as...

9.8CVSS7.3AI score0.03116EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.27 views

SUSE: Security Advisory (SUSE-SU-2015:1098-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.7AI score0.60643EPSS
SaveExploits27References37
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2012:0553-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.5AI score0.30653EPSS
SaveExploits15References2
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.17 views

SUSE: Security Advisory (SUSE-SU-2019:0414-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.7CVSS6.9AI score0.02417EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2015:1046-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.2AI score0.03731EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2021/02/15 9:41 p.m.14 views

CVE-2020-3814

...

SaveExploits0
CVE
CVE
added 2021/02/15 9:41 p.m.26 views

CVE-2020-3814

CVE-2020-3814 is rejected and not used; does not represent an active vulnerability entry.

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2021/01/29 12:00 a.m.28 views

CentOS 8 : dovecot (CESA-2019:3467)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3467 advisory. - dovecot: Improper certificate validation CVE-2019-3814 Note that Nessus has not tested for this issue but has instead relied only on the application's...

7.7CVSS6.5AI score0.02417EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2020/12/10 12:00 a.m.27 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : dovecot Multiple Vulnerabilities (NS-SA-2020-0105)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has dovecot packages installed that are affected by multiple vulnerabilities: - In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker process, which can be used ...

8.8CVSS7AI score0.02417EPSS
SaveExploits1References3
Rows per page
Query Builder