Lucene search
K

8 matches found

Patchstack
Patchstack
added 2025/08/20 2:11 p.m.2 views

WordPress Varnish/Nginx Proxy Caching plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan Patchstack Alliance in WordPress Plugin Varnish/Nginx Proxy Caching versions = 1.8.3...

5.9CVSS5.9AI score0.00043EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 4:42 a.m.4 views

CVE-2023-48360

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer...

5.5CVSS6.8AI score0.00057EPSS
Exploits0
Circl
Circl
added 2024/01/02 9:26 a.m.0 views

CVE-2023-48360

creationtimestamp| type| source ---|---|--- 2024-01-02 09:26:18+00:00| seen| https://t.me/ctinow/161608 2024-01-03 01:34:59+00:00| seen| https://t.me/cibsecurity/74173 2024-01-22 16:37:39+00:00| seen| https://t.me/ctinow/171283...

5.5CVSS5.5AI score0.00057EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/01/02 7:24 a.m.1 views

CVE-2023-48360 multimedia player has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer...

4CVSS7AI score0.00057EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/01/02 7:24 a.m.14 views

CVE-2023-48360 multimedia player has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer...

4CVSS5.7AI score0.00057EPSS
Exploits0References1
CVE
CVE
added 2024/01/02 7:24 a.m.40 views

CVE-2023-48360

OpenHarmony CVE-2023-48360 affects OpenHarmony v3.2.2 and earlier, where a local attacker can crash the multimedia player by modifying a released pointer (use-after-free). The issue is characterized as a local impact with availability impact, caused by reusing a pointer released from the multimed...

5.5CVSS5.5AI score0.00057EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/03/27 12:0 a.m.53 views

CVE-2022-48360

CVE-2022-48360 concerns the facial recognition module, where a vulnerability in file permission control could lead to confidentiality exposure. The NVD entry lists a CVSS v3.1 base score of 7.5 (HIGH) with network attack vector, low attack complexity, no privileges required, and no user interacti...

7.5CVSS7.5AI score0.00112EPSS
Exploits0References2Affected Software2
0day.today
0day.today
added 2021/06/11 12:0 a.m.43 views

NSClient++ 0.5.2.35 Remote Code Execution Exploit

This Metasploit module allows an attacker with knowledge of the admin password of NSClient++ to start a privileged shell. For this module to work, both web interface of NSClient++ and ExternalScripts feature should be enabled. This module requires Metasploit: https://metasploit.com/download Curre...

7.3AI score
Exploits0
Rows per page
Query Builder