Lucene search
+L

134 matches found

Circl
Circl
added 2024/01/15 10:06 a.m.8 views

CVE-2019-3862

creationtimestamp| type| source ---|---|--- 2024-01-15 10:06:57+00:00| seen| https://t.me/ctinow/168249...

9.1CVSS7.2AI score0.07708EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/10/23 12:00 a.m.30 views

Ubuntu 16.04 ESM : libssh2 vulnerabilities (USN-5308-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5308-1 advisory. It was discovered that libssh2 mishandled certain input. If libssh2 were used to connect to a malicious or compromised SSH server, a remote,...

9.3CVSS8.2AI score0.11659EPSS
SaveExploits2References12
OSV
OSV
added 2023/08/31 12:15 p.m.5 views

BELL-CVE-2019-3862 CVE-2019-3862 does not affect BellSoft software

Bulletin has no description...

9.1CVSS7.3AI score0.07708EPSS
SaveExploits0References1
Circl
Circl
added 2023/07/24 7:25 a.m.14 views

CVE-2023-3862

creationtimestamp| type| source ---|---|--- 2023-07-24 07:25:52+00:00| seen| https://t.me/cibsecurity/67139...

4.7CVSS4.2AI score0.00415EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/24 4:15 a.m.27 views

CVE-2023-3862

A vulnerability was found in Travelmate Travelable Trek Management Solution 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Comment Box Handler. The manipulation of the argument comment leads to cross site scripting. The attack may be...

4.7CVSS3.9AI score0.00415EPSS
SaveExploits0References2
CVE
CVE
added 2023/07/24 3:31 a.m.62 views

CVE-2023-3862

The CVE-2023-3862 issue affects Travelmate Travelable Trek Management Solution 1.0, specifically the Comment Box Handler component. The vulnerability is a Cross-Site Scripting flaw triggered by manipulating the comment parameter, with remote exposure and a high attack complexity. Exploitation is ...

4.7CVSS4.1AI score0.00415EPSS
SaveExploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 4:03 a.m.5 views

SUSE CVE-2020-3862

A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. A malicious website may be able to cause a denial of service...

6.5CVSS6.2AI score0.02009EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2023/01/27 12:00 a.m.26 views

Ubuntu: Security Advisory (USN-5308-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS9.2AI score0.11659EPSS
SaveExploits2References2
OSV
OSV
added 2022/12/12 6:15 p.m.8 views

CVE-2022-3862

The Livemesh Addons for Elementor WordPress plugin before 7.2.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite set...

4.8CVSS5.8AI score0.0047EPSS
SaveExploits2References1
NVD
NVD
added 2022/12/12 6:15 p.m.26 views

CVE-2022-3862

The Livemesh Addons for Elementor WordPress plugin before 7.2.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite set...

4.8CVSS0.0047EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2022/12/12 5:54 p.m.7 views

CVE-2022-3862 Livemesh Addons for Elementor < 7.2.4 - Admin+ Stored XSS

The Livemesh Addons for Elementor WordPress plugin before 7.2.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite set...

5AI score0.0047EPSS
SaveExploits2References1
CVE
CVE
added 2022/12/12 5:54 p.m.75 views

CVE-2022-3862

CVE-2022-3862 affects the WordPress plugin Livemesh Addons for Elementor (versions before 7.2.4). The issue stems from insufficient sanitization/escaping of certain settings, enabling Stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (such as in multisite s...

4.8CVSS4.7AI score0.0047EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2022/12/12 5:54 p.m.38 views

CVE-2022-3862 Livemesh Addons for Elementor < 7.2.4 - Admin+ Stored XSS

The Livemesh Addons for Elementor WordPress plugin before 7.2.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite set...

4.9AI score0.0047EPSS
SaveExploits2References1
Circl
Circl
added 2022/01/17 4:23 p.m.9 views

CVE-2021-3862

creationtimestamp| type| source ---|---|--- 2022-01-17 16:23:24+00:00| seen| https://t.me/cibsecurity/35671...

5.4CVSS5.1AI score0.00668EPSS
SaveExploits1References1
CVE
CVE
added 2022/01/17 1:50 p.m.89 views

CVE-2021-3862

CVE-2021-3862 affects icecoder and is described as an Improper Neutralization of Input During Web Page Generation (XSS). Public sources in the connected set cite an XSS flaw in icecoder/icecoder, with multiple references (NVD entry and related advisories) confirming a Cross-site Scripting vulnera...

5.4CVSS5AI score0.00668EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/01/17 1:50 p.m.37 views

CVE-2021-3862 Cross-site Scripting (XSS) - Reflected in icecoder/icecoder

icecoder is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS5.4AI score0.00668EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2021/09/22 11:38 p.m.42 views

Security Bulletin: Vulnerability in libssh2 affects Power Hardware Management Console (CVE-2019-3862)

Summary libssh2 is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-3862 DESCRIPTION: An out of bounds read flaw was discovered in libssh2 in the way SSHMSGCHANNELREQUEST packets with an exit status message and no payload a...

9.1CVSS0.4AI score0.07708EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.31 views

SUSE: Security Advisory (SUSE-SU-2019:13982-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS8AI score0.09294EPSS
SaveExploits0References11
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.32 views

SUSE: Security Advisory (SUSE-SU-2020:1135-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.7AI score0.09543EPSS
SaveExploits3References12
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:00 a.m.208 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : webkitgtk4 Multiple Vulnerabilities (NS-SA-2021-0041)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has webkitgtk4 packages installed that are affected by multiple vulnerabilities: - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS...

9.8CVSS7.1AI score0.18108EPSS
SaveExploits35References108
Rows per page
Query Builder