Lucene search
+L

139 matches found

Patchstack
Patchstack
added 2024/04/16 12:0 a.m.9 views

WordPress Tainacan Interface Theme <= 2.7.1 is vulnerable to Cross Site Scripting (XSS)

Software Tainacan Interface Type Theme Vulnerable versions = 2.7.1 Fixed in 2.7.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3867 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID dcbddfa32a84 Credits Matheus Nascimento de...

6.1CVSS5.8AI score0.00818EPSS
SaveExploits0References3Affected Software1
Ubuntu
Ubuntu
added 2024/04/09 1:19 p.m.446 views

USN-6725-1: Linux kernel vulnerabilities

Chih-Yen Chang discovered that the KSMBD implementation in the Linux kernel did not properly validate certain data structure fields when parsing lease contexts, leading to an out-of-bounds read vulnerability. A remote attacker could use this to cause a denial of service system crash or possibly...

9.8CVSS7.4AI score0.17442EPSS
SaveExploits0
Circl
Circl
added 2024/02/10 3:46 p.m.6 views

GHSA-3867-JC5C-66QF

creationtimestamp| type| source ---|---|--- 2024-02-10 15:46:15+00:00| seen| https://t.me/ctinow/182584...

4.8AI score
SaveExploits0References1
OSV
OSV
added 2023/10/18 1:47 p.m.3 views

BELL-CVE-2023-3867

Bulletin has no description...

7.1CVSS7.8AI score0.031EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/09/29 12:0 a.m.36 views

SUSE SLES12 Security Update : SUSE Manager Client Tools (SUSE-SU-2023:3867-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3867-1 advisory. golang-github-lusitaniae-apacheexporter: - Security issues fixed: CVE-2022-32149: Fix denial of service vulnerability bsc1204501...

8.8CVSS6.9AI score0.04561EPSS
SaveExploits1References16
OpenVAS
OpenVAS
added 2023/09/29 12:0 a.m.38 views

SUSE: Security Advisory (SUSE-SU-2023:3867-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.2AI score0.04561EPSS
SaveExploits1References10
UbuntuCve
UbuntuCve
added 2023/09/13 12:0 a.m.53 views

CVE-2023-3867

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of bounds read in smb2sesssetup ksmbd does not consider the case of that smb2 session setup is in compound request. If this is the second payload of the compound, OOB read issue occurs while processing the first...

7.1CVSS6.4AI score0.031EPSS
SaveExploits0References9
Circl
Circl
added 2022/11/13 5:49 a.m.8 views

CVE-2022-3867

creationtimestamp| type| source ---|---|--- 2022-11-13 05:49:16+00:00| seen| https://t.me/cibsecurity/52909 2025-05-01 19:14:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14371...

4.3CVSS4.6AI score0.00462EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/11/10 5:45 a.m.34 views

CVE-2022-3867 Nomad Event Stream Subscriber Using a Token with TTL Receives Updates Until Garbage Collected

HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 event stream subscribers using a token with TTL receive updates until token garbage is collected. Fixed in 1.4.2...

2.7CVSS4.8AI score0.00462EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/11/10 5:45 a.m.9 views

CVE-2022-3867 Nomad Event Stream Subscriber Using a Token with TTL Receives Updates Until Garbage Collected

HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 event stream subscribers using a token with TTL receive updates until token garbage is collected. Fixed in 1.4.2...

2.7CVSS4.5AI score0.00462EPSS
SaveExploits0References1
CVE
CVE
added 2022/11/10 5:45 a.m.65 views

CVE-2022-3867

CVE-2022-3867 affects HashiCorp Nomad and Nomad Enterprise versions 1.4.0–1.4.1, where event stream subscribers using a TTL token can continue to receive updates until the token is garbage-collected. The underlying issue is tied to how TTL tokens are handled for event stream subscriptions, allowi...

4.3CVSS4.1AI score0.00462EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2022/11/10 5:45 a.m.95 views

CVE-2022-3867

Removed by vendor...

4.3CVSS4.8AI score0.00462EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2022/11/04 12:0 a.m.15 views

SUSE: Security Advisory (SUSE-SU-2022:3867-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.4AI score0.00913EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2022/11/04 12:0 a.m.24 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-Flask-Security-Too (SUSE-SU-2022:3867-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:3867-1 advisory. - CVE-2021-23385: Fixed open redirect bsc1202105. Tenable has extracted the preceding description block...

6.1CVSS6.7AI score0.00913EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2022/02/24 2:30 p.m.12 views

CVE-2021-3867

...

SaveExploits0
CVE
CVE
added 2022/02/24 2:30 p.m.33 views

CVE-2021-3867

CVE-2021-3867 is rejected and not associated with any vulnerability.

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2012:0983-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.6AI score0.02453EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.31 views

SUSE: Security Advisory (SUSE-SU-2020:1135-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.7AI score0.09543EPSS
SaveExploits3References12
OSV
OSV
added 2021/03/18 7:15 p.m.7 views

CVE-2019-3867

A vulnerability was found in the Quay web application. Sessions in the Quay web application never expire. An attacker, able to gain access to a session, could use it to control or delete a user's container repository. Red Hat Quay 2 and 3 are vulnerable to this issue...

4.1CVSS6AI score0.00295EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/03/18 6:4 p.m.30 views

CVE-2019-3867

A vulnerability was found in the Quay web application. Sessions in the Quay web application never expire. An attacker, able to gain access to a session, could use it to control or delete a user's container repository. Red Hat Quay 2 and 3 are vulnerable to this issue...

4.5AI score0.00295EPSS
SaveExploits0References1
Rows per page
Query Builder