Lucene search
+L

74 matches found

Patchstack
Patchstack
added 2023/01/06 12:0 a.m.12 views

WordPress WP Extended Search Plugin <= 2.1.1 is vulnerable to Cross Site Scripting (XSS)

Software WP Extended Search Type Plugin Vulnerable versions = 2.1.1 Fixed in 2.1.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4649 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID 8a685d2ed687 Credits István Márton...

5.4CVSS5.9AI score0.00484EPSS
Exploits2References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/02/09 12:0 a.m.34 views

AlmaLinux 8 : gcc-toolset-10-binutils (ALSA-2021:4649)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4649 advisory. - An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control...

8.3CVSS7.7AI score0.12205EPSS
Exploits4References2
Tenable Nessus
Tenable Nessus
added 2021/11/18 12:0 a.m.43 views

CentOS 8 : gcc-toolset-10-binutils (CESA-2021:4649)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4649 advisory. - Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 Note that Nessus has not tested for thi...

8.3CVSS7.5AI score0.12205EPSS
Exploits4References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2012:1391-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.08738EPSS
Exploits11References2
Tenable Nessus
Tenable Nessus
added 2021/02/01 12:0 a.m.20 views

CentOS 8 : evolution (CESA-2020:4649)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4649 advisory. - evolution-data-server: Response injection via STARTTLS in SMTP and POP3 CVE-2020-14928 Note that Nessus has not tested for this issue but has instead relied...

5.9CVSS6.9AI score0.02808EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2021/01/13 12:0 a.m.16 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : xdg-utils regression (USN-4649-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4649-2 advisory. USN-4649-1 fixed vulnerabilities in xdg-utils. That update caused a regression by removing the --attach functionality in thunderbird and...

5.6AI score
Exploits0References1
OpenVAS
OpenVAS
added 2020/11/27 12:0 a.m.11 views

Ubuntu: Security Advisory (USN-4649-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.6AI score0.01443EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2020/11/26 12:0 a.m.44 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : xdg-utils vulnerability (USN-4649-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4649-1 advisory. Jens Mueller discovered that xdg-utils incorrectly handled certain URI. An attacker could possibly use this issue to expose sensitive...

6.5CVSS6.9AI score0.01443EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2020/11/04 12:0 a.m.30 views

RHEL 8 : evolution (RHSA-2020:4649)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4649 advisory. Evolution is a GNOME application that provides integrated email, calendar, contact management, and communications functionality. The...

5.9CVSS7AI score0.02808EPSS
Exploits1References9
Circl
Circl
added 2020/11/03 4:40 p.m.7 views

CVE-2020-4649

creationtimestamp| type| source ---|---|--- 2020-11-03 16:40:21+00:00| seen| https://t.me/cibsecurity/15805...

4.3CVSS4.7AI score0.00806EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2020/04/14 12:0 a.m.34 views

Debian DSA-4649-1 : haproxy - security update

Felix Wilhelm of Google Project Zero discovered that HAProxy, a TCP/HTTP reverse proxy, did not properly handle HTTP/2 headers. This would allow an attacker to write arbitrary bytes around a certain location on the heap, resulting in denial-of-service or potential arbitrary code execution. C...

8.8CVSS7.6AI score0.60727EPSS
Exploits0References4
Cvelist
Cvelist
added 2018/03/16 2:4 p.m.10 views

CVE-2017-4649

...

Exploits0
CVE
CVE
added 2018/03/16 2:4 p.m.45 views

CVE-2017-4649

CVE-2017-4649 is rejected/not used; this entry does not represent an active vulnerability.

7.3AI score
Exploits0
Apple
Apple
added 2017/11/30 10:28 a.m.99 views

About the security content of OS X El Capitan v10.11.6 and Security Update 2016-004 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

10CVSS0.8AI score0.89058EPSS
Exploits28Affected Software5
CVE
CVE
added 2017/08/29 3:0 p.m.54 views

CVE-2015-4649

Aruba Networks ClearPass Policy Manager is affected by CVE-2015-4649 in versions before 6.4.7 and 6.5.x before 6.5.2. The issue allows remote authenticated administrators to gain root privileges via unspecified vectors (a different issue from CVE-2015-3654). The connected CNVD entries corroborate...

9CVSS6.9AI score0.01722EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2016/07/22 3:0 a.m.15 views

CVE-2016-4649

Audio in Apple OS X before 10.11.6 allows local users to cause a denial of service NULL pointer dereference via unspecified vectors...

5.5CVSS5.6AI score0.00325EPSS
Exploits0References4
CVE
CVE
added 2016/07/22 1:0 a.m.56 views

CVE-2016-4649

CVE-2016-4649 is documented in Apple’s security content for OS X El Capitan v10.11 and later, affecting the Audio component. The issue is a local denial of service caused by a NULL pointer dereference via unspecified vectors. Apple’s page groups this with other audio CVEs and notes OS X 10.11.6 s...

5.5CVSS6.1AI score0.00325EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2016/07/22 1:0 a.m.18 views

CVE-2016-4649

Audio in Apple OS X before 10.11.6 allows local users to cause a denial of service NULL pointer dereference via unspecified vectors...

5.6AI score0.00325EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.257 views

Oracle: Security Advisory (ELSA-2011-2015)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.03477EPSS
Exploits8References2
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.40 views

Oracle: Security Advisory (ELSA-2011-0498)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.03477EPSS
Exploits8References2
Rows per page
Query Builder