Lucene search
+L

188 matches found

CVE
CVE
added 2023/08/02 8:35 a.m.61 views

CVE-2023-4067

CVE-2023-4067 concerns the WordPress plugin “Bus Ticket Booking with Seat Reservation.” The vulnerability is a Reflected Cross-Site Scripting (XSS) in versions up to and including 5.2.3, caused by insufficient input sanitization and output escaping for the parameters tab_date and tab_date_r . Thi...

6.1CVSS6.2AI score0.00378EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.24 views

Debian: Security Advisory (DSA-2310-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.7AI score0.05798EPSS
Exploits13References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:3 a.m.4 views

SUSE CVE-2020-4067

In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly. There is a leak of information between different client connections. One client an attacker could use their connection to intelligently query coturn to get interesting bytes in the...

7CVSS7AI score0.01898EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2022/11/21 12:0 a.m.25 views

SUSE: Security Advisory (SUSE-SU-2022:4067-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.5AI score0.9947EPSS
Exploits98References6
Circl
Circl
added 2022/11/20 7:30 a.m.7 views

CVE-2022-4067

creationtimestamp| type| source ---|---|--- 2022-11-20 07:30:53+00:00| seen| https://t.me/cibsecurity/53207 2025-04-28 20:11:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13729...

5.4CVSS4.4AI score0.93712EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2022/11/20 12:0 a.m.8 views

CVE-2022-4067 Cross-site Scripting (XSS) - Stored in librenms/librenms

Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.10.0...

3.4CVSS5.3AI score0.93712EPSS
Exploits0References2
CVE
CVE
added 2022/11/20 12:0 a.m.74 views

CVE-2022-4067

LibreNMS (librenms/librenms) is affected by a stored Cross-site Scripting (XSS) vulnerability in versions prior to 22.10.0. Root cause cited in sources is stored XSS; impact is consistent with XSS in the web UI. Remediation: upgrade to version 22.10.0 or later to resolve the issue. Public referen...

5.4CVSS4.4AI score0.93712EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2022/11/20 12:0 a.m.14 views

CVE-2022-4067 Cross-site Scripting (XSS) - Stored in librenms/librenms

Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.10.0...

3.4CVSS4.3AI score0.93712EPSS
Exploits0References4
Cvelist
Cvelist
added 2022/11/20 12:0 a.m.18 views

CVE-2022-4067 Cross-site Scripting (XSS) - Stored in librenms/librenms

Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.10.0...

3.4CVSS5.5AI score0.93712EPSS
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/26 3:29 a.m.29 views

Security Bulletin: Multiple security vulnerabilities exist in IBM InfoSphere Information Server (CVE-2013-4066 and CVE-2013-4067)

Abstract Security Bulletin: Multiple security vulnerabilities exist in IBM InfoSphere Information Server CVE-2013-4066 and CVE-2013-4067 Content Security vulnerabilities exist in various versions of IBM Information Server or constituent products. See the individual descriptions for details...

5.8CVSS5.8AI score0.01168EPSS
Exploits0Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.16 views

Mageia: Security Advisory (MGASA-2020-0287)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01898EPSS
Exploits0References4
OSV
OSV
added 2021/12/28 7:45 a.m.12 views

OPENSUSE-SU-2021:1632-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 96.0.4664.110 boo1193713: CVE-2021-4098: Insufficient data validation in Mojo CVE-2021-4099: Use after free in Swiftshader CVE-2021-4100: Object lifecycle issue in ANGLE CVE-2021-4101: Heap buffer overflow in Swiftshader CVE-2021-4102:...

9.6CVSS7.9AI score0.07836EPSS
Exploits2References46
ATTACKERKB
ATTACKERKB
added 2021/12/23 1:15 a.m.8 views

CVE-2021-4067

Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.7AI score0.01237EPSS
Exploits0References7
OSV
OSV
added 2021/12/23 1:15 a.m.1 views

DEBIAN-CVE-2021-4067

Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.2AI score0.01237EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2021/12/23 1:15 a.m.26 views

CVE-2021-4067

Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.2AI score0.01237EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2021/12/23 12:45 a.m.27 views

CVE-2021-4067

Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.6AI score0.01237EPSS
Exploits0
CVE
CVE
added 2021/12/23 12:45 a.m.125 views

CVE-2021-4067

CVE-2021-4067: A use-after-free in the Chromium window manager before version 96.0.4664.93 allows a remote attacker to potentially execute arbitrary code or spoof content through crafted web content. Affected product: Chromium browser engine (window manager component). Root cause: use-after-free ...

8.8CVSS8.8AI score0.01237EPSS
Exploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/12/17 12:0 a.m.45 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2021:1582-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1582-1 advisory. - Use after free in loader. CVE-2021-38005 - Use after free in storage foundation. CVE-2021-38006, CVE-2021-38011 - Type Confusion in V8...

9.6CVSS7.4AI score0.02073EPSS
Exploits2References76
Microsoft CVE
Microsoft CVE
added 2021/12/10 8:0 a.m.26 views

Chromium: CVE-2021-4067 Use after free in window manager

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.01237EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2020/07/20 12:0 a.m.63 views

openSUSE Security Update : coturn (openSUSE-2020-937)

This update for coturn fixes the following issues : Version 4.5.1.3 : - Remove reference to SSLv3: ghcoturn/coturn566 - Ignore MD5 for BoringSSL: ghcoturn/coturn579 - STUN response buffer not initialized properly; he issue found and reported ghcoturn/coturn583 by Felix Drre all credits belongs to...

7.5CVSS7.3AI score0.01898EPSS
Exploits0References2
Rows per page
Query Builder