Lucene search
+L

71 matches found

Circl
Circl
added 2023/09/14 10:34 p.m.9 views

CVE-2018-4756

creationtimestamp| type| source ---|---|--- 2023-09-14 22:34:40+00:00| seen| https://t.me/cibsecurity/70500...

4.8AI score
SaveExploits0References1
NVD
NVD
added 2023/09/04 9:15 a.m.23 views

CVE-2023-4756

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV...

5.9CVSS5.5AI score0.00297EPSS
SaveExploits1References2
OSV
OSV
added 2023/09/04 9:15 a.m.2 views

DEBIAN-CVE-2023-4756

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV...

5.5CVSS5.5AI score0.00297EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2023/09/04 9:15 a.m.23 views

CVE-2023-4756

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV...

5.9CVSS6.2AI score0.00297EPSS
SaveExploits1References3
OSV
OSV
added 2023/09/04 8:24 a.m.21 views

CVE-2023-4756 Stack-based Buffer Overflow in gpac/gpac

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV...

5.9CVSS5.5AI score0.00297EPSS
SaveExploits1References4
Circl
Circl
added 2023/02/06 10:23 p.m.6 views

CVE-2022-4756

creationtimestamp| type| source ---|---|--- 2023-02-06 22:23:38+00:00| seen| https://t.me/cibsecurity/57583 2025-03-25 21:25:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8778...

5.4CVSS5.5AI score0.00605EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/02/06 7:59 p.m.26 views

CVE-2022-4756 YouTube Channel < 3.23.0 - Contributor+ Stored XSS via Shortcode

The My YouTube Channel WordPress plugin before 3.23.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

5.5AI score0.00605EPSS
SaveExploits1References1
CVE
CVE
added 2023/02/06 7:59 p.m.63 views

CVE-2022-4756

The CVE-2022-4756 vulnerability affects the My YouTube Channel WordPress plugin (versions prior to 3.23.0). Shortcode attributes are not validated or escaped before being output, enabling Stored Cross-Site Scripting by users with low privileges (Contributor) that could impact high-privilege users...

5.4CVSS5.3AI score0.00605EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/06 7:59 p.m.7 views

CVE-2022-4756 YouTube Channel < 3.23.0 - Contributor+ Stored XSS via Shortcode

The My YouTube Channel WordPress plugin before 3.23.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

6.1AI score0.00605EPSS
SaveExploits1References1
Patchstack
Patchstack
added 2023/01/11 12:0 a.m.18 views

WordPress YouTube Channel Plugin < 3.23.0 is vulnerable to Cross Site Scripting (XSS)

Software YouTube Channel Type Plugin Vulnerable versions 3.23.0 Fixed in 3.23.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4756 Patch priority Medium CVSS severity Medium 6.3 Developer Aleksandar Urošević PSID 3866f6e0ecf5 Credits Lana Codes...

5.4CVSS5.9AI score0.00605EPSS
SaveExploits1References4Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2013:1287-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS8.7AI score0.08073EPSS
SaveExploits12References2
Tenable Nessus
Tenable Nessus
added 2021/02/01 12:0 a.m.46 views

CentOS 8 : varnish:6 (CESA-2020:4756)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4756 advisory. - varnish: denial of service handling certain crafted HTTP/1 requests CVE-2019-15892 - varnish: not clearing pointer between two client requests leads ...

7.8CVSS6.1AI score0.05789EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2020/12/11 4:18 p.m.21 views

Security Bulletin: A vulnerability in IBM Spectrum Scale packaged in IBM Elastic Storage Server could cause a denial of service (CVE-2020-4756)

Summary A security vulnerability has been identified in all levels of IBM Elastic Storage Server that could allow a local attacker to cause a denial of service. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2020-4756 DESCRIPTION: IBM Spectrum Scale V4.2.0.0 through...

6.2CVSS1.2AI score0.00353EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/11/12 12:0 a.m.52 views

Oracle Linux 8 : varnish:6 (ELSA-2020-4756)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4756 advisory. - Resolves: 1790907 - CVE-2019-20637 varnish: not clearing pointer between two client requests leads to information disclosure - Resolves: 1763958 -...

7.8CVSS6.2AI score0.05789EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2020/11/04 3:0 p.m.18 views

Security Bulletin: A vulnerability has been identified in IBM Spectrum Scale where an unprivileged local user may cause a denial of service (CVE-2020-4756)

Summary A security vulnerability has been identified in all levels of IBM Spectrum Scale that could allow a local attacker to cause a denial of service. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2020-4756 DESCRIPTION: IBM Spectrum Scale could allow a local attack...

6.2CVSS1.3AI score0.00353EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/10/20 3:59 p.m.20 views

Security Bulletin: A vulnerability in IBM Spectrum Scale packaged in IBM Elastic Storage System could cause a denial of service (CVE-2020-4756)

Summary A security vulnerability has been identified in all levels of IBM Elastic Storage System that could allow a local attacker to cause a denial of service. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2020-4756 DESCRIPTION: IBM Spectrum Scale could allow a loca...

6.2CVSS2.6AI score0.00353EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2020/10/20 3:15 p.m.5 views

CVE-2020-4756

IBM Spectrum Scale V4.2.0.0 through V4.2.3.23 and V5.0.0.0 through V5.0.5.2 as well as IBM Elastic Storage System 6.0.0 through 6.0.1.0 could allow a local attacker to invoke a subset of ioctls on the device with invalid arguments that could crash the keneral and cause a denial of service. IBM...

5.5CVSS6.4AI score0.00353EPSS
SaveExploits0References3
CVE
CVE
added 2020/10/20 2:15 p.m.46 views

CVE-2020-4756

Summary of CVE-2020-4756 : Affects IBM Spectrum Scale versions 4.2.0.0–4.2.3.23 and 5.0.0.0–5.0.5.2, and IBM Elastic Storage System 6.0.0–6.0.1.0. A local attacker could invoke a subset of ioctls with invalid arguments, potentially crashing the kernel and causing a denial of service. Remediation ...

6.2CVSS5.1AI score0.00353EPSS
SaveExploits0References3Affected Software2
Tenable Nessus
Tenable Nessus
added 2020/08/31 12:0 a.m.32 views

Debian DSA-4756-1 : lilypond - security update

Faidon Liambotis discovered that Lilypond, a program for typesetting sheet music, did not restrict the inclusion of Postscript and SVG commands when operating in safe mode, which could result in the execution of arbitrary code when rendering a typesheet file with embedded Postscript code. C Tenab...

9.8CVSS8.6AI score0.02371EPSS
SaveExploits0References3
Veracode
Veracode
added 2019/05/02 5:17 a.m.34 views

Man-in-the-Middle Attack

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. It was found that the MySQL client library permitted but did not require a client to use SSL/TLS when establishing a secure connection to a MySQL server using the "--ssl" option. A man-in-the-middle...

5.9CVSS6.3AI score0.07083EPSS
SaveExploits1References21Affected Software2
Rows per page
Query Builder