Lucene search
+L

118 matches found

Circl
Circl
added 2023/01/16 6:24 p.m.10 views

CVE-2022-3904

creationtimestamp| type| source ---|---|--- 2023-01-16 18:24:03+00:00| seen| Telegram/YxCJ1TzP29wRe3vGQrbHUsMmKfhfCQf2PLjtXC5IhkTw-BY 2026-07-29 12:00:15+00:00| seen| https://t.me/CVEhub/16860 2026-07-30 00:00:35+00:00| seen| https://t.me/CVEhub/16860 2026-07-31 00:00:41+00:00|...

6.1CVSS6.3AI score0.01339EPSS
SaveExploits3References1
CVE
CVE
added 2023/01/16 3:37 p.m.105 views

CVE-2022-3904

CVE-2022-3904 affects the WordPress MonsterInsights plugin. Versions prior to 8.9.1 fail to sanitize/escape page titles in the top posts/pages section, enabling an unauthenticated attacker to inject arbitrary web scripts into titles by spoofing requests to Google Analytics. The vulnerability is d...

6.1CVSS6.2AI score0.01339EPSS
SaveExploits3References1Affected Software1
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.15 views

Ubuntu: Security Advisory (USN-1093-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.3CVSS7.7AI score0.17009EPSS
SaveExploits90References4
Circl
Circl
added 2021/10/28 2:16 a.m.10 views

CVE-2021-3904

creationtimestamp| type| source ---|---|--- 2021-10-28 02:16:26+00:00| seen| https://t.me/cibsecurity/31339...

6.3CVSS5.7AI score0.00592EPSS
SaveExploits1References1
NVD
NVD
added 2021/10/27 10:15 p.m.32 views

CVE-2021-3904

grav is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.3CVSS0.00592EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/10/27 10:15 p.m.7 views

CVE-2021-3904

grav is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.3CVSS6.4AI score0.00592EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2021/10/27 9:10 p.m.35 views

CVE-2021-3904 Cross-site Scripting (XSS) - Stored in getgrav/grav

grav is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.3CVSS5.7AI score0.00592EPSS
SaveExploits1References2
CVE
CVE
added 2021/10/27 9:10 p.m.91 views

CVE-2021-3904

CVE-2021-3904 affects Grav (getgrav/grav) and is a Cross-Site Scripting vulnerability caused by improper input neutralization during web page generation. Multiple sources (including GHSA, Red Hat, NVD, OSV, and CVE CVELIST entries) describe it as XSS with Grav versions prior to 1.7.24 being affec...

6.3CVSS5.5AI score0.00592EPSS
SaveExploits1References2Affected Software1
RedHat Linux
RedHat Linux
added 2021/10/19 7:19 a.m.74 views

Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

8.8CVSS6.5AI score0.00658EPSS
SaveExploits1References3
CVE
CVE
added 2021/06/11 9:3 p.m.47 views

CVE-2017-3904

CVE-2017-3904 is rejected/not used per the Initial Description.

7.3AI score
SaveExploits0
CVE
CVE
added 2020/04/01 5:51 p.m.71 views

CVE-2020-3904

CVE-2020-3904 is a memory-corruption vulnerability in AppleGraphicsControl on macOS Catalina (prior to 10.15.4) that could allow a malicious, locally executing app to gain kernel privileges. The issue is fixed in macOS Catalina 10.15.4; Apple’s security content confirms the kernel-priviliege impa...

9.3CVSS8AI score0.0133EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/03/27 12:0 a.m.74 views

macOS 10.15.x < 10.15.4 / 10.14.x < 10.14.6 Security Update 2020-002 / 10.13.x < 10.13.6 Security Update 2020-002

The remote host is running a version of macOS / Mac OS X that is 10.13.x prior to 10.13.6 Security Update 2020-002, 10.14.x prior to 10.14.6 Security Update 2020-002, or 10.15.x prior to 10.15.4. It is, therefore, affected by multiple vulnerabilities : - Insufficient control flow in certain data...

9.8CVSS8.1AI score0.03295EPSS
SaveExploits0References33
zdt
zdt
added 2019/12/24 12:0 a.m.550 views

vReliable Datagram Sockets (RDS) rds_page_copy_user Privilege Escalation Exploit

This Metasploit module exploits a vulnerability in the rdspagecopyuser function in net/rds/page.c RDS in Linux kernel versions 2.6.30 to 2.6.36-rc8 to execute code as root CVE-2010-3904. This module has been tested successfully on Fedora 13 i686 kernel version 2.6.33.3-85.fc13.i686.PAE and Ubuntu...

7.8CVSS0.6AI score0.12159EPSS
SaveExploits16
Packet Storm
Packet Storm
added 2019/12/23 12:0 a.m.221 views

vReliable Datagram Sockets (RDS) rds_page_copy_user Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Reliable Datagram Sockets RDS rdspagecopyuser Privilege Escalation', 'Description' = %q This module exploits a vulnerability in the rdspagecopyus...

7.2CVSS1.1AI score0.12159EPSS
SaveExploits16
Tenable Nessus
Tenable Nessus
added 2019/03/08 12:0 a.m.32 views

Ubuntu 18.04 LTS : NVIDIA graphics drivers vulnerability (USN-3904-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3904-1 advisory. It was discovered that the NVIDIA graphics drivers incorrectly handled the GPU performance counters. A local attacker could possibly use this issue to access the...

5.5CVSS6.2AI score0.00393EPSS
SaveExploits0References2
NVD
NVD
added 2018/08/27 3:29 p.m.19 views

CVE-2018-3904

An exploitable buffer overflow vulnerability exists in the camera 'update' feature of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on...

9.9CVSS9.7AI score0.01753EPSS
SaveExploits2References1
CVE
CVE
added 2018/08/27 3:0 p.m.74 views

CVE-2018-3904

CVE-2018-3904 is a buffer overflow in Samsung SmartThings Hub STH-ETH-250, triggered by user-controlled JSON in the video-core HTTP server when handling PATCH /cameras/ requests. The vulnerable code copies a parameter value (url or state) into a 512-byte stack buffer using memcpy with length deri...

9.9CVSS9.6AI score0.01753EPSS
SaveExploits2References1Affected Software1
zdt
zdt
added 2018/05/21 12:0 a.m.117 views

Linux 2.6.30 < 2.6.36-rc8 - Reliable Datagram Sockets (RDS) Privilege Escalation Exploit

Exploit for linux platform in category local exploits This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Reliable Datagram Sockets RDS Privilege Escalation', 'Description' = %q This module exploit...

7.2CVSS0.7AI score0.12159EPSS
SaveExploits16
Exploit DB
Exploit DB
added 2018/05/21 12:0 a.m.95 views

Linux 2.6.30 < 2.6.36-rc8 - Reliable Datagram Sockets (RDS) Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Reliable Datagram Sockets RDS Privilege Escalation', 'Description' = %q This module exploits a vulnerability in the rdspagecopyuser function in...

7.8CVSS6.4AI score0.12159EPSS
SaveExploits16
Packet Storm
Packet Storm
added 2018/05/19 12:0 a.m.166 views

Reliable Datagram Sockets (RDS) Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Reliable Datagram Sockets RDS Privilege Escalation', 'Description' = %q This module exploits a vulnerability in the rdspagecopyuser function in...

7.2CVSS1.1AI score0.12159EPSS
SaveExploits16
Rows per page
Query Builder