Lucene search
K

57 matches found

Circl
Circl
added 2026/05/18 12:56 p.m.4 views

CVE-2026-4320

creationtimestamp| type| source ---|---|--- 2026-05-18 12:56:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4wfejqwn2n...

9.3CVSS5.8AI score0.00064EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/23 3:24 p.m.3 views

EUVD-2026-4320

In the Linux kernel, the following vulnerability has been resolved: net: do not write to msggetinq in callee NULL pointer dereference fix. msggetinq is an input field from caller to callee. Don't set it in the callee, as the caller may not clear it on struct reuse. This is a kernel-internal varia...

5.3AI score0.00025EPSS
Exploits0References3
Circl
Circl
added 2026/01/23 1:44 p.m.0 views

CVE-2025-4320

creationtimestamp| type| source ---|---|--- 2026-01-23 13:44:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3tgyo76h24 2026-01-23 14:28:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md3vx2omxk2r...

10CVSS4.8AI score0.00037EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2025/12/08 12:0 a.m.3 views

SUSE: Security Advisory (SUSE-SU-2025:4320-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.00223EPSS
Exploits0References223
OSV
OSV
added 2025/10/01 12:0 a.m.1 views

DLA-4320-1 u-boot - security update

Bulletin has no description...

7.8CVSS7.9AI score0.00059EPSS
Exploits0
Circl
Circl
added 2025/08/30 12:19 p.m.0 views

CVE-2023-4320

creationtimestamp| type| source ---|---|--- 2025-08-30 12:19:53+00:00| seen| Telegram/jeV1P16aLm0VDGF10VyDeX-S9ksNlaVoQqTazUcF70m5U...

7.6CVSS6.1AI score0.0005EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 12:46 a.m.7 views

CVE-2022-4320

The WordPress Events Calendar WordPress plugin before 1.4.5 does not sanitize and escapes a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against both unauthenticated and authenticated users such as high-privilege ones like admin...

6.1CVSS6.2AI score0.04142EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:31 p.m.3 views

CVE-2020-24055

Verint 5620PTZ VerintFW042 and Verint 4320 V4320FW023, and V4320FW031 units feature an autodiscovery service implemented in the binary executable '/usr/sbin/DM' that listens on port TCP 6666. The service is vulnerable to a stack buffer overflow. It is worth noting that this service does not requi...

9.8CVSS7.1AI score0.00495EPSS
Exploits1
Circl
Circl
added 2025/04/04 6:36 p.m.0 views

CVE-2022-4320

creationtimestamp| type| source ---|---|--- 2025-04-04 18:36:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10524...

6.1CVSS6AI score0.04142EPSS
Exploits2References1
VulnCheck KEV
VulnCheck KEV
added 2024/10/10 12:0 a.m.0 views

VulnCheck KEV: CVE-2023-4320

An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are valid indefinitely, resulting in damage to the system's integrity...

7.6CVSS5.8AI score0.0005EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2024/06/22 6:30 p.m.18 views

Remote Code Execution via path traversal bypass in lollms

CVE-2024-4320 describes a vulnerability in the parisneo/lollms software, specifically within the ExtensionBuilder.buildextension function. The vulnerability arises from the /mountextension endpoint, where a path traversal issue allows attackers to navigate beyond the intended directory structure...

9.8CVSS7.5AI score0.66234EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2024/06/22 5:15 p.m.10 views

CVE-2024-5443

CVE-2024-4320 describes a vulnerability in the parisneo/lollms software, specifically within the ExtensionBuilder.buildextension function. The vulnerability arises from the /mountextension endpoint, where a path traversal issue allows attackers to navigate beyond the intended directory structure...

9.8CVSS7.6AI score0.66234EPSS
Exploits1References2
CVE
CVE
added 2024/06/22 4:12 p.m.55 views

CVE-2024-5443

CVE-2024-5443 describes a path traversal flaw in parisneo/lollms related to the ExtensionBuilder().build_extension() workflow. The issue, exploited via the /mount_extension endpoint, arises because data.category and data.folder can be empty strings, enabling construction of a package_path that ca...

9.8CVSS9.7AI score0.17468EPSS
Exploits0References2
NVD
NVD
added 2024/06/06 7:16 p.m.13 views

CVE-2024-4320

A remote code execution RCE vulnerability exists in the '/installextension' endpoint of the parisneo/lollms-webui application, specifically within the @router.post"/installextension" route handler. The vulnerability arises due to improper handling of the name parameter in the...

9.8CVSS0.66234EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/06/06 6:22 p.m.14 views

CVE-2024-4320 Remote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webui

A remote code execution RCE vulnerability exists in the '/installextension' endpoint of the parisneo/lollms-webui application, specifically within the @router.post"/installextension" route handler. The vulnerability arises due to improper handling of the name parameter in the...

9.8CVSS8.2AI score0.66234EPSS
Exploits1References1
NVD
NVD
added 2023/12/18 2:15 p.m.14 views

CVE-2023-4320

An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are valid indefinitely, resulting in damage to the system's integrity...

7.6CVSS0.0005EPSS
Exploits0References3
CVE
CVE
added 2023/12/18 1:43 p.m.135 views

CVE-2023-4320

CVE-2023-4320 affects Red Hat Satellite: arithmetic overflow when creating a new personal access token, enabling tokens that remain valid indefinitely and risking integrity. Connected advisories indicate the fix is included in Red Hat Satellite 6.15.0 (RHSA-2024:2010); upgrade to that release to ...

7.6CVSS7.4AI score0.0005EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/12/18 1:43 p.m.15 views

CVE-2023-4320 Satellite: arithmetic overflow in satellite

An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are valid indefinitely, resulting in damage to the system's integrity...

7.6CVSS7.7AI score0.0005EPSS
Exploits0References3
OSV
OSV
added 2023/07/29 12:15 a.m.17 views

CVE-2021-4320

Use after free in Blink in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.1AI score
Exploits0References3
UbuntuCve
UbuntuCve
added 2023/07/29 12:15 a.m.26 views

CVE-2021-4320

Use after free in Blink in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...

8.8CVSS7.2AI score0.01139EPSS
Exploits1References3
Rows per page
Query Builder