Lucene search
+L

83 matches found

Tenable Nessus
Tenable Nessus
added 2022/11/16 12:00 a.m.33 views

AlmaLinux 9 : firefox (ALSA-2022:5767)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2022:5767 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

8.8CVSS7.6AI score0.00748EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/26 10:21 p.m.17 views

Security Bulletin: IBM TS3500 Tape Library Update for Security Vulnerability in Web User Interface (CVE-2012-5767)

Abstract Download an update to the TS3500 Tape Library which contains a fix for a security vulnerability that could allow unauthorized access to restricted actions. Content DESCRIPTION: An authorized user of the TS3500 web user interface could exploit a vulnerability that would give that user a...

6.5CVSS6.2AI score0.01066EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/08/02 12:00 a.m.28 views

Oracle Linux 9 : firefox (ELSA-2022-5767)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-5767 advisory. 91.12.0-2.0.1 - Removed Upstream references 91.12.0-1 - Update to 91.12.0 build1 Tenable has extracted the preceding description block directly from th...

8.8CVSS7.6AI score0.00748EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2022/08/01 12:00 a.m.29 views

RHEL 9 : firefox (RHSA-2022:5767)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:5767 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

8.8CVSS7.7AI score0.00748EPSS
SaveExploits0References8
CVE
CVE
added 2021/06/11 9:01 p.m.49 views

CVE-2017-5767

CVE-2017-5767 is rejected/not used; this entry does not represent an active vulnerability.

7.3AI score
SaveExploits0
Cvelist
Cvelist
added 2021/06/11 9:01 p.m.12 views

CVE-2017-5767

...

SaveExploits0
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.35 views

SUSE: Security Advisory (SUSE-SU-2016:2013-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8AI score0.09674EPSS
SaveExploits2References8
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.41 views

SUSE: Security Advisory (SUSE-SU-2016:2080-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8AI score0.09844EPSS
SaveExploits11References15
Tenable Nessus
Tenable Nessus
added 2020/08/27 12:00 a.m.30 views

WordPress Plugin 'Email Subscribers & Newsletters' Multiple Vulnerabilities

The WordPress application running on the remote host has a version of the 'Email Subscribers & Newsletters' plugin that is affected by multiple vulnerabilities. - A cross-site request forgery CSRF vulnerability exists in the sendtestemail component. An unauthenticated, remote attacker can exploit...

6.5CVSS5.9AI score0.01966EPSS
SaveExploits4References4
NVD
NVD
added 2020/07/17 10:15 p.m.37 views

CVE-2020-5767

Cross-site request forgery in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 allows a remote attacker to send forged emails by tricking legitimate users into clicking a crafted link...

6.5CVSS0.00917EPSS
SaveExploits2References1
CVE
CVE
added 2020/07/17 9:22 p.m.79 views

CVE-2020-5767

CVE-2020-5767 concerns a cross-site request forgery in the WordPress plugin “Email Subscribers & Newsletters” by Icegram, specifically version 4.4.8. The vulnerability allows a remote attacker to cause the affected WordPress user to send forged emails by tricking them into visiting a crafted link...

6.5CVSS6.4AI score0.00917EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2020/07/17 9:22 p.m.44 views

CVE-2020-5767

Cross-site request forgery in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 allows a remote attacker to send forged emails by tricking legitimate users into clicking a crafted link...

6.4AI score0.00917EPSS
SaveExploits2References1
Veracode
Veracode
added 2019/05/02 6:02 a.m.64 views

Stack-Based Buffer Overflow

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS9AI score0.36974EPSS
SaveExploits79References17Affected Software3
Veracode
Veracode
added 2019/05/02 6:02 a.m.57 views

Out-Of-Bounds Read

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS9AI score0.36974EPSS
SaveExploits79References16Affected Software3
Veracode
Veracode
added 2019/05/02 6:02 a.m.54 views

Denial Of Service (DoS) Through Memory Corruption

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS9AI score0.36974EPSS
SaveExploits79References16Affected Software3
Veracode
Veracode
added 2019/05/02 6:02 a.m.63 views

Arbitrary Code Execution

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS9AI score0.36974EPSS
SaveExploits79References15Affected Software3
Veracode
Veracode
added 2019/05/02 6:02 a.m.62 views

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS9AI score0.36974EPSS
SaveExploits79References19Affected Software3
Veracode
Veracode
added 2019/05/02 6:02 a.m.60 views

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS9AI score0.36974EPSS
SaveExploits79References6Affected Software3
NVD
NVD
added 2019/02/19 5:29 p.m.19 views

CVE-2019-5767

Insufficient protection of permission UI in WebAPKs in Google Chrome on Android prior to 72.0.3626.81 allowed an attacker who convinced the user to install a malicious application to access privacy/security sensitive web APIs via a crafted APK...

6.5CVSS6.7AI score0.01278EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2019/02/19 5:29 p.m.27 views

CVE-2019-5767

Insufficient protection of permission UI in WebAPKs in Google Chrome on Android prior to 72.0.3626.81 allowed an attacker who convinced the user to install a malicious application to access privacy/security sensitive web APIs via a crafted APK...

6.5CVSS6.9AI score0.01278EPSS
SaveExploits0References1
Rows per page
Query Builder