Lucene search
K

23 matches found

Cvelist
Cvelist
added 2026/05/27 2:13 p.m.33 views

CVE-2026-48923

Jenkins AppSpider Plugin 1.0.17 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to connect to an attacker-specified URL...

0.00021EPSS
Exploits0References1
CVE
CVE
added 2026/05/27 2:13 p.m.9 views

CVE-2026-48923

Jenkins AppSpider Plugin 1.0.17 and earlier is affected by a permission-check bypass in a form-validation method. The issue allows attackers with Overall/Read permissions to connect to an attacker-specified URL, enabling potential external requests from the plugin context. The affected component ...

4.3CVSS5.8AI score0.00021EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2025/06/26 2:15 p.m.5 views

CVE-2025-48923

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Toc.Js allows Cross-Site Scripting XSS.This issue affects Toc.Js: from 0.0.0 before 3.2.1...

6.1CVSS0.00182EPSS
Exploits0References1
Circl
Circl
added 2025/06/26 1:51 p.m.0 views

CVE-2025-48923

creationtimestamp| type| source ---|---|--- 2025-06-26 13:51:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19603...

6.1CVSS4.8AI score0.00182EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/26 1:31 p.m.5 views

CVE-2025-48923 Toc.js - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-077

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Toc.Js allows Cross-Site Scripting XSS.This issue affects Toc.Js: from 0.0.0 before 3.2.1...

6.6AI score0.00182EPSS
Exploits0References1
CVE
CVE
added 2025/06/26 1:31 p.m.12 views

CVE-2025-48923

The CVE-2025-48923 entry concerns Drupal Toc.Js (Toc.js) prior to 3.2.1. The vulnerability arises from improper input neutralization during web page generation and insufficient sanitization of data attributes, enabling Cross-site Scripting (XSS). Affected versions: Toc.Js 0.0.0 through 3.2.0. Imp...

6.1CVSS6.6AI score0.00182EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/06/26 1:31 p.m.6 views

CVE-2025-48923 Toc.js - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-077

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Toc.Js allows Cross-Site Scripting XSS.This issue affects Toc.Js: from 0.0.0 before 3.2.1...

0.00182EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2022-48923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: btrfs: prevent copying too big compressed lzo segment Compressed length can be corrupted to ...

5.5CVSS5.9AI score0.00028EPSS
Exploits0References2
SUSE Linux
SUSE Linux
added 2025/02/12 7:3 p.m.0 views

Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005549 fixes several issues. The following security issues were fixed: CVE-2024-45016: netem: fix return value if duplicate enqueue fails bsc1230998. CVE-2022-48912: Fix use-after-free in nfregisternethook bsc1229641 CVE-2022-48923: btrfs: prevent...

8.2CVSS8.2AI score0.00028EPSS
Exploits0References16
OSV
OSV
added 2025/02/12 7:3 p.m.11 views

SUSE-SU-2025:0489-1 Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005549 fixes several issues. The following security issues were fixed: - CVE-2024-45016: netem: fix return value if duplicate enqueue fails bsc1230998. - CVE-2022-48912: Fix use-after-free in nfregisternethook bsc1229641 - CVE-2022-48923: btrfs: preven...

7.8CVSS6.8AI score0.00028EPSS
Exploits0References9
OSV
OSV
added 2025/02/12 4:3 p.m.13 views

SUSE-SU-2025:0486-1 Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024133 fixes several issues. The following security issues were fixed: - CVE-2024-45016: netem: fix return value if duplicate enqueue fails bsc1230998. - CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment bsc1229662 - CVE-2024-47684...

5.5CVSS6.7AI score0.00028EPSS
Exploits0References7
SUSE Linux
SUSE Linux
added 2025/02/12 4:3 p.m.0 views

Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024133 fixes several issues. The following security issues were fixed: CVE-2024-45016: netem: fix return value if duplicate enqueue fails bsc1230998. CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment bsc1229662 CVE-2024-47684: tcp:...

8.2CVSS8.2AI score0.00028EPSS
Exploits0References12
OSV
OSV
added 2025/02/12 3:33 p.m.10 views

SUSE-SU-2025:0462-1 Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005544 fixes several issues. The following security issues were fixed: - CVE-2024-45016: netem: fix return value if duplicate enqueue fails bsc1230998. - CVE-2022-48912: Fix use-after-free in nfregisternethook bsc1229641 - CVE-2022-48923: btrfs: preven...

7.8CVSS6.8AI score0.00028EPSS
Exploits0References9
SUSE Linux
SUSE Linux
added 2025/02/12 11:33 a.m.0 views

Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024119 fixes several issues. The following security issues were fixed: CVE-2024-45016: netem: fix return value if duplicate enqueue fails bsc1230998. CVE-2022-48912: Fix use-after-free in nfregisternethook bsc1229641 CVE-2022-48923: btrfs: prevent...

8.2CVSS8.2AI score0.00028EPSS
Exploits0References16
Tenable Nessus
Tenable Nessus
added 2024/10/11 12:0 a.m.70 views

SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:3592-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3592-1 advisory. The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were...

7.8CVSS7.5AI score0.00346EPSS
Exploits6References413
OpenVAS
OpenVAS
added 2024/10/11 12:0 a.m.21 views

openSUSE Security Advisory (SUSE-SU-2024:3587-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.6AI score0.00346EPSS
Exploits6References179
OpenVAS
OpenVAS
added 2024/10/11 12:0 a.m.42 views

openSUSE Security Advisory (SUSE-SU-2024:3592-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.6AI score0.00346EPSS
Exploits6References167
OpenVAS
OpenVAS
added 2024/10/09 12:0 a.m.22 views

openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2024:3547-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.00231EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/09 12:0 a.m.30 views

SUSE SLES15 Security Update : kernel (SUSE-SU-2024:3547-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3547-1 advisory. The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...

7.8CVSS7AI score0.00231EPSS
Exploits0References37
RedhatCVE
RedhatCVE
added 2024/08/22 6:56 p.m.14 views

CVE-2022-48923

A flaw was found in the btrfs module in the Linux kernel. A too-big compressed lzo segment can cause an out-of-bounds write when copied due to a missing check of its size, potentially causing a general protection fault and a denial of service...

5.5CVSS6AI score0.00028EPSS
Exploits0References4
Rows per page
Query Builder