Lucene search
+L

192 matches found

Vulnrichment
Vulnrichment
added 2022/12/11 12:00 a.m.10 views

CVE-2022-4408 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.9...

4.3CVSS5.3AI score0.00479EPSS
SaveExploits1References2
CVE
CVE
added 2022/12/11 12:00 a.m.113 views

CVE-2022-4408

phpMyFAQ is affected up to version 3.1.8 with a stored Cross-site Scripting (XSS) vulnerability. The issue arises from handling user input stored in the database (GitHub repo thorsten/phpmyfaq). Impact is XSS in affected users’ browsers. Remediation: upgrade to version 3.1.9 or later; as a workar...

5.4CVSS4.7AI score0.00479EPSS
SaveExploits1References2Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.27 views

Mageia: Security Advisory (MGASA-2013-0369)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.3CVSS7.8AI score0.0379EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2021/11/17 12:00 a.m.17 views

Oracle Linux 8 : libsolv (ELSA-2021-4408)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4408 advisory. 0.7.19-1 - Update to 0.7.19 - repoaddconda: add flag to skip v2 packages - fix rare segfault in resolvejobrules that could happen if new rules are learnt - fix...

4.3CVSS6.5AI score0.01313EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.17 views

SUSE: Security Advisory (SUSE-SU-2014:0723-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.3CVSS7AI score0.69008EPSS
SaveExploits8References2
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2014:0024-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.3CVSS7.7AI score0.09017EPSS
SaveExploits1References2
OSV
OSV
added 2020/07/27 2:15 p.m.8 views

CVE-2020-4408

The IBM QRadar Advisor 1.1 through 2.5.2 with Watson App for IBM QRadar SIEM does not adequately mask all passwords during input, which could be obtained by a physical attacker nearby. IBM X-Force ID: 179536...

4.6CVSS5.8AI score0.00311EPSS
SaveExploits0References2
CVE
CVE
added 2020/07/27 1:31 p.m.51 views

CVE-2020-4408

The IBM QRadar Advisor with Watson App for IBM QRadar SIEM (versions 1.1–2.5.2) has a vulnerability where not all passwords are properly masked during input, potentially exposed to a physical attacker nearby. IBM’s security bulletin notes CVE-2020-4408 and recommends updating to version 2.5.3 to ...

4.6CVSS4.4AI score0.00311EPSS
SaveExploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/07/23 4:59 p.m.27 views

Security Bulletin: IBM QRadar Advisor with Watson App for IBM QRadar SIEM does not adequately mask all passwords during input (CVE-2020-4408)

Summary The IBM QRadar Advisor with Watson App for IBM QRadar SIEM does not adequately mask all passwords during input, which could be obtained by a physical attacker nearby. Vulnerability Details CVEID: CVE-2020-4408 DESCRIPTION: The IBM QRadar Advisor with Watson App for IBM QRadar SIEM does no...

4.6CVSS1.9AI score0.00311EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/07/06 12:00 a.m.66 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-4408-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4408-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacke...

9.3CVSS8.1AI score0.03034EPSS
SaveExploits4References12
NVD
NVD
added 2019/04/03 6:29 p.m.15 views

CVE-2018-4408

A memory corruption issue was addressed with improved input validation This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...

9.3CVSS7.6AI score0.01061EPSS
SaveExploits0References5
CVE
CVE
added 2019/04/03 5:43 p.m.95 views

CVE-2018-4408

CVE-2018-4408 is an Apple memory-corruption vulnerability caused by insufficient input validation. It affects multiple Apple platforms (iOS, macOS, tvOS, watchOS) with the issue described as a memory corruption due to input validation weaknesses; Apple advisories indicate patches/liberation via i...

9.3CVSS7.4AI score0.01061EPSS
SaveExploits0References5Affected Software4
CVE
CVE
added 2018/03/16 2:04 p.m.24 views

CVE-2017-4408

CVE-2017-4408 is rejected/not used per the Initial Description; it does not represent an active vulnerability entry.

7.3AI score
SaveExploits0
Cvelist
Cvelist
added 2018/03/16 2:04 p.m.9 views

CVE-2017-4408

...

SaveExploits0
CVE
CVE
added 2017/03/13 6:14 a.m.78 views

CVE-2015-4408

The CVE-2015-4408 issue affects Hikvision NVR models DS-76xxNI-E1/2 and DS-77xxxNI-E4 prior to version 3.4.0. A buffer overflow in the ISAPI HTTP handling allows remote authenticated users to cause a denial of service (service interruption) by sending a crafted HTTP request. Impact is specificall...

6.8CVSS6.2AI score0.0128EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/07/21 12:00 a.m.22 views

Moodle 2.1.x < 2.1.8 Multiple Vulnerabilities

Binary data 9407.prm...

5.5CVSS6.8AI score0.014EPSS
SaveExploits0References4
Hacker One
Hacker One
added 2016/03/23 1:34 p.m.18 views

New Relic: Too many included lookups

Your SPF record required more than 10 DNS Lookups to be performed during the test. The number of "include" mechanisms and chained "redirect' modifiers should be kept to a minimum. According to RFC 4408, 'SPF implementations MUST limit the number of mechanisms and modifiers that do DNS Lookups to ...

SaveExploits0
OpenVAS
OpenVAS
added 2015/10/13 12:00 a.m.56 views

SUSE: Security Advisory for Samba (SUSE-SU-2014:0024-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.3CVSS7.7AI score0.09017EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2015/02/26 12:00 a.m.76 views

Fedora Update for samba FEDORA-2015-2519

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.5AI score0.87636EPSS
SaveExploits9References2
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.40 views

Oracle Solaris Third-Party Patch Update : samba (cve_2012_6150_input_validation)

The remote Solaris system is missing necessary patches to address security updates : - The winbindnamelisttosidstringlist function in nsswitch/pamwinbind.c in Samba through 4.1.2 handles invalid requiremembershipof group names by accepting authentication by any user, which allows remote...

8.3CVSS8.1AI score0.0379EPSS
SaveExploits1References5
Rows per page
Query Builder