Lucene search
+L

68 matches found

Vulnrichment
Vulnrichment
added 2023/09/25 3:56 p.m.9 views

CVE-2023-4502 Translate WordPress with GTranslate < 3.0.4 - Admin+ Stored XSS

The Translate WordPress with GTranslate WordPress plugin before 3.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisi...

4.7AI score0.00402EPSS
Exploits2References1
NVD
NVD
added 2023/09/14 7:16 p.m.6 views

CVE-2018-4502

Rejected reason: This candidate is unused by its CNA...

6.6AI score
Exploits0
SUSE CVE
SUSE CVE
added 2023/02/15 5:44 a.m.7 views

SUSE CVE-2012-4502

Multiple integer overflows in pktlength.c in Chrony before 1.29 allow remote attackers to cause a denial of service crash via a crafted 1 REQSUBNETSACCESSED or 2 REQCLIENTACCESSES command request to the PKLCommandLength function or crafted 3 RPYSUBNETSACCESSED, 4 RPYCLIENTACCESSES, 5...

5CVSS7.4AI score0.03271EPSS
Exploits0References2
Circl
Circl
added 2022/12/15 7:23 a.m.8 views

CVE-2022-4502

creationtimestamp| type| source ---|---|--- 2022-12-15 07:23:13+00:00| seen| https://t.me/cibsecurity/54593...

7.3CVSS6.9AI score0.00639EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/12/15 12:0 a.m.29 views

CVE-2022-4502 Cross-site Scripting (XSS) - Reflected in openemr/openemr

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2...

7.3CVSS6.5AI score0.00639EPSS
Exploits1References2
CVE
CVE
added 2022/12/15 12:0 a.m.57 views

CVE-2022-4502

CVE-2022-4502 affects OpenEMR (openemr/openemr) with a reflected XSS vulnerability in versions before 7.0.0.2. Connected sources detail two specific PoCs in the Messages module: (1) messages.php parameter go/stage handling that echoes unsafely printed input, and (2) save.php returning a JSON resp...

7.3CVSS6.2AI score0.00639EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/15 12:0 a.m.7 views

CVE-2022-4502 Cross-site Scripting (XSS) - Reflected in openemr/openemr

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2...

7.3CVSS6.2AI score0.00639EPSS
Exploits1References2
OSV
OSV
added 2022/12/15 12:0 a.m.19 views

CVE-2022-4502 Cross-site Scripting (XSS) - Reflected in openemr/openemr

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2...

7.3CVSS7.5AI score0.00639EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2020/09/17 12:0 a.m.30 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : websocket-extensions vulnerability (USN-4502-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4502-1 advisory. It was discovered that websocket-extensions does not properly parse special headers. A remote attacker could use this issue to cause regex...

7.5CVSS7.4AI score0.04404EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2020/05/27 12:0 a.m.25 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : chrony Multiple Vulnerabilities (NS-SA-2020-0027)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has chrony packages installed that are affected by multiple vulnerabilities: - Multiple integer overflows in pktlength.c in Chrony before 1.29 allow remote attackers to cause a denial of service crash via a crafted 1...

7.5CVSS7.8AI score0.03801EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2019/08/17 12:0 a.m.29 views

Debian: Security Advisory (DSA-4502-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.5AI score0.03032EPSS
Exploits0References4
CVE
CVE
added 2018/03/16 2:4 p.m.20 views

CVE-2017-4502

This CVE entry is rejected/not used and does not represent an active vulnerability.

7.3AI score
Exploits0
Cvelist
Cvelist
added 2018/03/16 2:4 p.m.11 views

CVE-2017-4502

...

Exploits0
myhack58
myhack58
added 2016/06/11 12:0 a.m.14 views

The plant controller has a remote vulnerability and no patch-vulnerability warning-the black bar safety net

Power station use of an industrial control system has not patched the vulnerability, an attacker can remotely exploit it to gain network control. Remedy method? Turning off the function or replace the equipment. Power station use of an industrial control system has not patched the vulnerability, ...

0.5AI score
Exploits0
myhack58
myhack58
added 2016/06/03 12:0 a.m.28 views

Easily using Vulnerability CVE-2 0 1 6-4 5 0 2 ranged attack power plants-vulnerability warning-the black bar safety net

! Repair hopeless? You can only deactivate the function or replace the device! Recently,without a patch the vulnerability, CVE-2 0 1 6-4 5 0 2 be found use in industrial control systems,has now been found that power plants use industrial control system may be severely affected,contrive evil...

1.2AI score
Exploits0
CVE
CVE
added 2016/05/31 1:0 a.m.57 views

CVE-2016-4502

The CVE-2016-4502 entry affects Environmental Systems Corporation (ESC) 8832 Data Controller versions 3.02 and earlier. The vulnerability allows remote attackers to bypass authentication and perform unauthorized administrative operations by abusing a modified parameter, enabling privilege escalat...

7.5CVSS8AI score0.0156EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.33 views

openSUSE: Security Advisory for seamonkey (openSUSE-SU-2015:1681-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.5AI score
Exploits0References1
OPENSUSE Linux
OPENSUSE Linux
added 2015/10/05 6:10 p.m.44 views

Security update for seamonkey (important)

seamonkey was updated to fix 25 security issues. These security issues were fixed: - CVE-2015-4520: Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allowed remote attackers to bypass CORS preflight protection mechanisms by leveraging 1 duplicate cache-key generation or 2 retrieval of...

9.3CVSS4.2AI score0.0608EPSS
Exploits0References2
CVE
CVE
added 2015/09/24 1:0 a.m.114 views

CVE-2015-4502

CVE-2015-4502 affects Mozilla Firefox where the JS file js/src/proxy/Proxy.cpp mishandles certain receiver arguments, allowing a crafted web site to bypass intended window access restrictions. The description in the initial document states this as a remote‑level issue enabling a restriction bypas...

4.3CVSS6.3AI score0.02155EPSS
Exploits0References12Affected Software1
OpenVAS
OpenVAS
added 2015/09/24 12:0 a.m.35 views

Ubuntu: Security Advisory (USN-2743-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS9.7AI score0.0608EPSS
Exploits0References2
Rows per page
Query Builder