Lucene search
+L

85 matches found

Vulnrichment
Vulnrichment
added 2023/08/24 6:30 a.m.14 views

CVE-2023-4512 Uncontrolled Recursion in Wireshark

CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file...

5.3CVSS7AI score0.00486EPSS
SaveExploits1References2
CVE
CVE
added 2023/08/24 6:30 a.m.193 views

CVE-2023-4512

CVE-2023-4512 : CBOR dissector crash in Wireshark 4.0.0–4.0.6 allows denial of service via packet injection or crafted capture file. Root cause: CBOR dissector crash; affected component is the Wireshark CBOR dissector. Exploitation context: DoS via specifically crafted traffic or captures; no exp...

7.5CVSS6.2AI score0.00486EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2023/08/24 6:30 a.m.26 views

CVE-2023-4512 Uncontrolled Recursion in Wireshark

CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file...

5.3CVSS6.3AI score0.00486EPSS
SaveExploits1References8
UbuntuCve
UbuntuCve
added 2023/08/24 12:0 a.m.26 views

CVE-2023-4512

CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file...

7.5CVSS6.8AI score0.00486EPSS
SaveExploits1References3
OSV
OSV
added 2023/02/13 3:15 p.m.7 views

CVE-2022-4512

The Better Font Awesome WordPress plugin before 2.0.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.4CVSS5.8AI score0.00762EPSS
SaveExploits2References1
NVD
NVD
added 2023/02/13 3:15 p.m.24 views

CVE-2022-4512

The Better Font Awesome WordPress plugin before 2.0.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

6.8CVSS5.3AI score0.00762EPSS
SaveExploits2References1
CVE
CVE
added 2023/02/13 2:32 p.m.73 views

CVE-2022-4512

The Better Font Awesome WordPress plugin is vulnerable to Stored XSS in versions before 2.0.4 due to insufficient validation/escaping of certain shortcode attributes before output. Impacted scope includes pages/posts embedding the shortcode, with attacker privileges at Contributor or higher able ...

6.8CVSS5.3AI score0.00762EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2023/02/13 2:32 p.m.28 views

CVE-2022-4512 Better Font Awesome < 2.0.4 - Contributor+ Stored XSS

The Better Font Awesome WordPress plugin before 2.0.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.5AI score0.00762EPSS
SaveExploits2References1
Patchstack
Patchstack
added 2023/01/18 12:0 a.m.22 views

WordPress Better Font Awesome Plugin < 2.0.4 is vulnerable to Cross Site Scripting (XSS)

Software Better Font Awesome Type Plugin Vulnerable versions 2.0.4 Fixed in 2.0.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4512 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 3f338a1f451d Credits Lana Codes...

6.8CVSS5.6AI score0.00762EPSS
SaveExploits2References4Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2013:1559-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.12599EPSS
SaveExploits8References2
OpenVAS
OpenVAS
added 2020/09/18 12:0 a.m.23 views

Ubuntu: Security Advisory (USN-4512-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.00441EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/09/17 12:0 a.m.31 views

Ubuntu 18.04 LTS : util-linux vulnerability (USN-4512-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4512-1 advisory. It was discovered that the umount bash completion script shipped in util-linux incorrectly handled certain mountpoints. If a local attacker were able to create...

7.8CVSS7.9AI score0.00441EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2020/07/14 1:10 p.m.25 views

CVE-2020-4512

IBM QRadar SIEM 7.3 and 7.4 could allow a remote privileged user to execute commands...

9.1CVSS7AI score0.0202EPSS
SaveExploits0References2
CVE
CVE
added 2020/07/14 1:10 p.m.54 views

CVE-2020-4512

IBM QRadar SIEM contains a remote command-injection vulnerability (CVE-2020-4512). Affected versions include 7.4.0 (Patch 2) and 7.3.0–7.3.3 (Patch 3). Remediation: upgrade to 7.4.0 Patch 3 or 7.3.3 Patch 4 as documented by IBM. The public description confirms remote privileged execution possibil...

9.1CVSS6.9AI score0.0202EPSS
SaveExploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/07/13 10:32 p.m.20 views

Security Bulletin: IBM QRadar SIEM is vulnerable to command injection (CVE-2020-4512)

Summary IBM QRadar SIEM could allow a remote privileged user to execute commands. Vulnerability Details CVEID: CVE-2020-4512 DESCRIPTION: IBM QRadar SIEM could allow a remote privileged user to execute commands. CVSS Base score: 9.1 CVSS Temporal Score: See:...

9.1CVSS2.2AI score0.0202EPSS
SaveExploits0Affected Software1
UbuntuCve
UbuntuCve
added 2020/02/08 7:15 p.m.29 views

CVE-2012-4512

The CSS parser khtml/css/cssparser.cpp in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service crash and possibly read memory via a crafted font face source, related to "type confusion."...

8.8CVSS7.2AI score0.11656EPSS
SaveExploits6References2
CVE
CVE
added 2020/02/08 6:9 p.m.153 views

CVE-2012-4512

CVE-2012-4512 affects Konqueror’s CSS parser (khtml/css/cssparser.cpp) in KDE 4.7.3. A remote attacker can crash the browser and possibly read memory via a crafted font-face source due to a type-confusion issue. Connected advisories (MiracleLinux AXSA-2012-970:03, SUSE/Security Advisories, Gentoo...

8.8CVSS8AI score0.11656EPSS
SaveExploits6References11Affected Software1
Cvelist
Cvelist
added 2020/02/08 6:9 p.m.27 views

CVE-2012-4512

The CSS parser khtml/css/cssparser.cpp in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service crash and possibly read memory via a crafted font face source, related to "type confusion."...

8.2AI score0.11656EPSS
SaveExploits6References11
Debian CVE
Debian CVE
added 2020/02/08 6:9 p.m.48 views

CVE-2012-4512

Removed by vendor...

8.8CVSS8.7AI score0.11656EPSS
SaveExploits6
OSV
OSV
added 2019/10/09 4:15 p.m.6 views

CVE-2019-4512

IBM Maximo Asset Management 7.6.1.1 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 164554...

4.3CVSS5.8AI score0.00994EPSS
SaveExploits0References2
Rows per page
Query Builder