Lucene search
K

13 matches found

OSV
OSV
added 2025/08/23 5:15 a.m.2 views

CVE-2025-43764

Self-ReDoS Regular expression Denial of Service exists with Role Name search field of Kaleo Designer portlet JavaScript in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.1, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.20...

6.5CVSS6.6AI score0.001EPSS
Exploits0References1
Circl
Circl
added 2025/08/23 5:15 a.m.0 views

CVE-2025-43764

creationtimestamp| type| source ---|---|--- 2025-08-23 05:15:27+00:00| seen| Telegram/tv9gE9lhlsc10icjX8-O5bX8F1RP1kDACWxmoTy2TTcSyqM...

6.9CVSS4.8AI score0.001EPSS
Exploits0
NVD
NVD
added 2025/01/03 1:15 a.m.12 views

CVE-2024-43764

In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00007EPSS
Exploits0References2
Circl
Circl
added 2025/01/03 12:19 a.m.6 views

CVE-2024-43764

creationtimestamp| type| source ---|---|--- 2025-01-03 00:19:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113761554266808559 2025-01-03 01:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lesg46s67225 2025-01-03 01:52:31+00:00| seen|...

7.8CVSS4.8AI score0.00007EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/01/02 11:58 p.m.12 views

CVE-2024-43764

In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00007EPSS
Exploits0References2
Circl
Circl
added 2023/02/08 2:24 p.m.2 views

CVE-2022-43764

creationtimestamp| type| source ---|---|--- 2023-02-08 14:24:55+00:00| seen| https://t.me/cibsecurity/57764...

9.8CVSS8.7AI score0.01028EPSS
Exploits0References1
CVE
CVE
added 2023/02/08 10:12 a.m.52 views

CVE-2022-43764

CVE-2022-43764 affects B&R APROL, specifically the Tbase server. The vulnerability stems from insufficient validation of input parameters when changing configuration, which can cause a buffer overflow. Impact as documented includes Denial-of-Service conditions and potential execution of arbitrary...

9.8CVSS9.6AI score0.01028EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/08 10:12 a.m.6 views

CVE-2022-43764 Buffer overflow when changing configuration on Tbase Server

Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code...

9.8CVSS7.2AI score0.01028EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/02/08 10:12 a.m.10 views

CVE-2022-43764 Buffer overflow when changing configuration on Tbase Server

Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code...

9.8CVSS9.7AI score0.01028EPSS
Exploits0References1
Circl
Circl
added 2022/01/14 12:24 a.m.2 views

CVE-2021-43764

creationtimestamp| type| source ---|---|--- 2022-01-14 00:24:12+00:00| seen| https://t.me/cibsecurity/35471...

8CVSS5.5AI score0.02421EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/01/13 8:27 p.m.14 views

CVE-2021-43764 Adobe Experience Manager Stored XSS in the Spin Set

AEM's Cloud Service offering, as well as version 6.5.10.0 and below are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they...

8CVSS7.4AI score0.02421EPSS
Exploits0References1
CVE
CVE
added 2022/01/13 8:27 p.m.52 views

CVE-2021-43764

CVE-2021-43764 affects Adobe Experience Manager (AEM) Cloud Service and on-premises 6.5.x up to 6.5.10.0, via a stored XSS in vulnerable form fields. Exploitation would execute malicious JavaScript in victims’ browsers when loading pages containing the vulnerable field. Mitigation: apply APSB21-1...

8CVSS5.6AI score0.02421EPSS
Exploits0References1Affected Software2
CVE
CVE
added 1976/01/01 12:0 a.m.42 views

CVE-2023-43764

CVE-2023-43762: Unauthenticated Remote Code Execution via the web server (backend) affecting WithSecure Policy Manager 15 and Policy Manager Proxy 15. CVE-2023-43764 is a duplicate/withdrawn entry; reference CVE-2023-43762. No exploitation details or mitigations are provided in the supplied docum...

9.4AI score
Exploits0
Rows per page
Query Builder