Lucene search
+L

110 matches found

Kitploit
Kitploit
•added 2026/10/16 4:22 a.m.•17 views

cve-2013-4348

This repository does not have a README...

7.1CVSS6.8AI score0.09408EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2026/09/26 12:00 a.m.•17 views

SUSE SLES12: glib2-devel / glib2-devel-static / glib2-lang / glib2-tools / etc (SUSE-SU-2026:4348-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4348-1 advisory. This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering...

5.3CVSS6AI score0.00479EPSS
SaveExploits0References5
Circl
Circl
•added 2026/05/07 6:54 a.m.•41 views

CVE-2026-4348

creationtimestamp| type| source ---|---|--- 2026-05-07 06:54:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlan2hlf4i2n 2026-05-07 10:13:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlay6waate2q 2026-05-08 01:31:13+00:00| seen|...

7.5CVSS5.8AI score0.00463EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•10 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004348)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004348 advisory. In binderthreadrelease of binder.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional...

7CVSS7AI score0.00155EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/01/09 11:56 a.m.•21 views

CVE-2018-4348

A validation issue was addressed with improved logic. This issue affected versions prior to macOS Mojave 10.14...

5.5CVSS7.1AI score0.00313EPSS
SaveExploits0References1
osv_cga
osv_cga
•added 2025/11/22 11:47 p.m.•7 views

CGA-4348-922J-MXQW

Bulletin has no description...

5.3CVSS6.3AI score0.00546EPSS
SaveExploits0
osv_dla
osv_dla
•added 2025/10/26 12:00 a.m.•23 views

DLA-4348-1 python-pip - security update

Bulletin has no description...

5.9CVSS6.5AI score0.00498EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 12:34 a.m.•31 views

CVE-2022-4348

A vulnerability was found in yproject RuoYi-Cloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component JSON Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the publi...

6.1CVSS6.1AI score0.00425EPSS
SaveExploits1References1
Circl
Circl
•added 2025/05/05 5:11 p.m.•31 views

CVE-2025-4348

creationtimestamp| type| source ---|---|--- 2025-05-05 17:11:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114456336307073752 2025-05-06 11:21:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15085 2025-05-06 14:21:38+00:00| seen|...

9.8CVSS8.1AI score0.02438EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2016-4348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The rsvgcssnormalizefontsize function in librsvg 2.40.2 allows context-dependent attackers to cause a denial of service stack consumption and application crash...

7.5CVSS7.1AI score0.02362EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/02/06 4:19 a.m.•17 views

CVE-2021-4348

The Ultimate GDPR & CCPA plugin for WordPress is vulnerable to unauthenticated settings import and export via the exportsettings & importsettings functions in versions up to, and including, 2.4. This makes it possible for unauthenticated attackers to change plugin settings and conduct attacks suc...

7.5CVSS6.8AI score0.00655EPSS
SaveExploits1References1
Circl
Circl
•added 2024/05/02 10:31 p.m.•18 views

CVE-2024-4348

creationtimestamp| type| source ---|---|--- 2024-05-02 22:31:13+00:00| seen| https://t.me/arpsyndicate/4910 2024-05-04 08:06:46+00:00| seen| https://t.me/arpsyndicate/4921...

5CVSS4.5AI score0.01828EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2024/04/30 10:00 p.m.•53 views

CVE-2024-4348 osCommerce all-products cross site scripting

A vulnerability, which was classified as problematic, was found in osCommerce 4. Affected is an unknown function of the file /catalog/all-products. The manipulation of the argument cat leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to t...

5CVSS4.6AI score0.01828EPSS
SaveExploits2References3
Packet Storm
Packet Storm
•added 2024/04/30 12:00 a.m.•652 views

osCommerce 4 Cross Site Scripting

Exploit Title: osCommerce 4 - Reflected XSS Exploit Author: skalvin Date: 22/04/2024 Vendor: osCommerce ltd. Vendor Homepage: https://www.oscommerce.com/ Software Link: https://demo.oscommerce.com/ Demo Link: https://demo.oscommerce.com/furniture/ Tested on: Windows 11 Pro Impact: Manipulate the...

7.4AI score0.01828EPSS
SaveExploits2
OpenVAS
OpenVAS
•added 2024/03/04 12:00 a.m.•110 views

openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2023:4348-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7AI score0.03635EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
•added 2023/06/07 1:51 a.m.•13 views

CVE-2021-4348 Ultimate GDPR & CCPA <= 2.4 - Unauthenticated Settings Import & Export

The Ultimate GDPR & CCPA plugin for WordPress is vulnerable to unauthenticated settings import and export via the exportsettings & importsettings functions in versions up to, and including, 2.4. This makes it possible for unauthenticated attackers to change plugin settings and conduct attacks suc...

7.5CVSS6.3AI score0.00655EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2023/03/08 12:00 a.m.•29 views

Debian: Security Advisory (DLA-477-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.02369EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2023/02/15 5:27 a.m.•11 views

SUSE CVE-2014-4348

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.2.x before 4.2.4 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1 database name or 2 table name that is improperly handled after presence in a the favorite list or b recent tables...

3.5CVSS5.7AI score0.01519EPSS
SaveExploits1References4
CVE
CVE
•added 2022/12/08 12:00 a.m.•96 views

CVE-2022-4348

CVE-2022-4348 affects y_project RuoYi-Cloud, specifically the JSON Handler component, where input handling allows cross-site scripting. The vulnerability can be exploited remotely, and the exploit has been disclosed publicly. Multiple sources corroborate the issue, including Red Hat, GitHub advis...

6.1CVSS4.8AI score0.00425EPSS
SaveExploits1References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2022/05/25 11:01 p.m.•21 views

Security Bulletin: A vulnerability has been identified in IBM Elastic Storage System 3000 GUI where an unauthorised user can execute commands (CVE-2020-4348)

Summary A security vulnerability has been identified in IBM Elastic Storage System 3000 GUI that could allow an unauthorised user to execute commands . A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2020-4348 DESCRIPTION: IBM Spectrum Scale 4.2.0.0 through 4.2.3.21 an...

6.5CVSS1.1AI score0.00759EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder