25 matches found
SUSE CVE-2026-45062
FrankenPHP is a modern application server for PHP. From version 1.11.2 to before version 1.12.3, the splitPos function in cgi.go misuses golang.org/x/text/search with search.IgnoreCase when the request path contains a non-ASCII byte. Two distinct flaws in that fallback let an attacker mislead...
CVE-2026-45062
creationtimestamp| type| source ---|---|--- 2026-05-15 10:55:59+00:00| published-proof-of-concept| https://github.com/php/frankenphp/security/advisories/GHSA-3g8v-8r37-cgjm 2026-05-16 09:50:05+00:00| seen| https://bsky.app/profile/dunglas.dev/post/3mlxl2h6gpc2k 2026-05-17 02:40:31+00:00| seen|...
CVE-2024-45062
A stack based buffer overflow vulnerability is present in OpenPrinting ippusbxd 1.34. A specially configured printer that supports IPP-over-USB can cause a buffer overflow which can lead to a arbitrary code execution in a privileged service. To trigger the vulnerability, a malicious device would...
CVE-2024-45062
creationtimestamp| type| source ---|---|--- 2025-08-19 14:00:05+00:00| seen| https://infosec.place/objects/d55e8fc5-68ed-4fa3-8cac-3aa62665b522...
CVE-2023-45062
creationtimestamp| type| source ---|---|--- 2023-10-18 12:43:43+00:00| seen| https://t.me/cibsecurity/72487...
CVE-2023-45062 WordPress Download canvasio3D Light Plugin <= 2.4.6 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Thomas Scholl canvasio3D Light plugin = 2.4.6 versions...
CVE-2023-45062
CVE-2023-45062 affects the WordPress plugin canvasio3D Light. The vulnerability is an unauthenticated, reflected Cross-Site Scripting (XSS) in canvasio3D Light, with vulnerable versions reported as <= 2.4.6. The root cause is inadequate sanitization/escaping of input parameters before output, ...
WordPress canvasio3D Light Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)
Software canvasio3D Light Type Plugin Vulnerable versions = 2.5.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45062 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2a3783fd52d4 Credits thiennv Required...
Ubuntu: Security Advisory (USN-6141-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GLSA-202305-05 : xfce4-settings: Browser Argument Injection
The remote host is affected by the vulnerability described in GLSA-202305-05 xfce4-settings: Browser Argument Injection - In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper. CVE-2022-45062 Note that Nessus has not teste...
SUSE CVE-2022-45062
In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper...
Fedora: Security Advisory for xfce4-places-plugin (FEDORA-2022-7febff96e0)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for xfce4-settings (FEDORA-2022-7febff96e0)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] [DSA 5296-1] xfce4-settings security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5296-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez December 06, 2022 https://www.debian.org/security/faq -...
Debian DSA-5296-1 : xfce4-settings - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5296 advisory. - In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper. CVE-2022-45062 Note that Nessus has not...
OESA-2022-2105 xfce4-settings security update
This package includes the settings manager applications for the Xfce desktop. Security Fixes: In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper.CVE-2022-45062...
Security fix for the ALT Linux 9 package libexo version 0.12.11-alt3
0.12.11-alt3 built Nov. 18, 2022 Mikhail Efremov in task 310173 Nov. 17, 2022 Mikhail Efremov - exo-helper: Properly quote command parameters fixes: CVE-2022-45062...
Slackware: Security Advisory (SSA:2022-313-02)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-45062
CVE-2022-45062 affects xfce4-settings, specifically the xfce4-mime-helper component, with versions before 4.16.4 and 4.17.x before 4.17.1 vulnerable to argument injection. Public details indicate exploitation via xdg-open, enabling code execution on user machines (via crafted links in PDFs). Reme...
CVE-2021-45062
CVE-2021-45062 affects Adobe Acrobat Reader DC and related builds (e.g., 21.007.20099, 20.004.30017, 17.011.30204 and earlier) via a use-after-free in the processing of Format event actions, leading to arbitrary code execution in the context of the current user. Exploitation requires user interac...