Lucene search
K

49 matches found

Nuclei
Nuclei
added 8 hours ago29 views

phpMyFAQ < 3.2.0 - Cross-site Scripting

Cross-site Scripting XSS Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2. id: CVE-2023-5863 info: name: phpMyFAQ ' - 'phpMyFAQ' condition: and - type: word part: header words: - "tex...

7.4CVSS6.8AI score0.06224EPSS
Exploits1References2
Wolfi
Wolfi
added 2026/04/17 8:0 p.m.7 views

CVE-2026-5863 vulnerabilities

Vulnerabilities for packages: chromium...

8.8CVSS5.7AI score0.00108EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2026/04/09 11:30 p.m.2 views

SUSE CVE-2026-5863

Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS7.7AI score0.00108EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/09 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-5863

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HT...

8.8CVSS7.6AI score0.00108EPSS
Exploits0References2
NVD
NVD
added 2026/04/08 10:16 p.m.2 views

CVE-2026-5863

Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00108EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2026/04/08 9:20 p.m.3 views

CVE-2026-5863

Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS9AI score0.00108EPSS
Exploits0
CVE
CVE
added 2026/04/08 9:20 p.m.6 views

CVE-2026-5863

Summary: CVE-2026-5863 is an insecure implementation in the V8 engine of Google Chrome/Chromium prior to 147.0.7727.55 that could allow remote code execution via a crafted HTML page. The current public docs list the issue and indicate high impact, but do not provide exploitation details. Public u...

8.8CVSS6.3AI score0.00108EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/09 5:31 a.m.3 views

CVE-2025-5863 Tenda AC5 SetRebootTimer formSetRebootTimer stack-based overflow

A vulnerability was found in Tenda AC5 15.03.06.47. It has been classified as critical. Affected is the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to stack-based buffer overflow. It is possible to launch the attack remotely. T...

9CVSS9.5AI score0.00931EPSS
Exploits1References5
Circl
Circl
added 2025/06/08 1:50 p.m.8 views

CVE-2025-5863

creationtimestamp| type| source ---|---|--- 2025-06-08 13:50:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114648062576412340 2025-06-09 06:00:56+00:00| seen| Telegram/poES1g0SOI4ioDWBJAZ2lqmWmRFskP6WFqyJMceX7ywyv4c...

9.8CVSS8.1AI score0.00931EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:11 a.m.2 views

CVE-2017-5863

Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control...

9.8CVSS7AI score0.00555EPSS
Exploits0References1
0day.today
0day.today
added 2024/11/27 12:0 a.m.153 views

ABB Cylon Aspect 3.08.01 vstatConfigurationDownload.php Configuration Download Vulnerability

ABB Cylon Aspect version 3.08.01 suffers from an unauthenticated configuration download vulnerability. This can be exploited to download the CSV DB that contains the configuration mappings information via the VMobileImportExportServlet by directly calling the vstatConfigurationDownload.php script...

7.2AI score
Exploits0
CVE
CVE
added 2024/06/28 3:29 a.m.49 views

CVE-2024-5863

CVE-2024-5863 affects the Easy Image Collage WordPress plugin. The issue is a missing capability check in ajax_image_collage() across versions up to and including 1.13.5, allowing authenticated users with Contributor-level access and above to erase content in arbitrary posts (data loss). Wordfenc...

5.4CVSS5.6AI score0.00078EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/06/28 3:29 a.m.13 views

CVE-2024-5863 Easy Image Collage <= 1.13.5 - Missing Authorization to Authenticated (Contributor+) Data Clearance

The Easy Image Collage plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the ajaximagecollage function in all versions up to, and including, 1.13.5. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

5.4CVSS5.3AI score0.00078EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/06/28 12:0 a.m.9 views

WordPress Easy Image Collage Plugin <= 1.13.5 is vulnerable to Broken Access Control

Software Easy Image Collage Type Plugin Vulnerable versions = 1.13.5 Fixed in 1.13.6 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-5863 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 9f1bcb932e47 Credits Lucio Sá Required privile...

5.4CVSS6.6AI score0.00078EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/11/03 12:0 a.m.17 views

FreeBSD : phpmyfaq -- multiple vulnerabilities (4f370c80-79ce-11ee-be8e-589cfc0f81b0)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 4f370c80-79ce-11ee-be8e-589cfc0f81b0 advisory. - Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2...

9.8CVSS7.1AI score0.06224EPSS
Exploits2References7
OpenVAS
OpenVAS
added 2023/11/02 12:0 a.m.15 views

phpMyFAQ < 3.2.2 Multiple Vulnerabilities

phpMyFAQ is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyfaq:phpmyfaq"; if description...

9.8CVSS7.2AI score0.06224EPSS
Exploits3References3
CVE
CVE
added 2023/10/31 12:0 a.m.67 views

CVE-2023-5863

CVE-2023-5863 is a reflected XSS vulnerability in phpMyFAQ prior to 3.2.2. The issue arises from insufficient filtering/escaping in the action parameter of admin/index.php?action=, allowing an attacker to inject script via reflected input. Exploitation can enable arbitrary Web script execution or...

7.4CVSS6.1AI score0.06224EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/31 12:0 a.m.15 views

CVE-2023-5863 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2...

7.4CVSS6AI score0.06224EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2023/10/24 12:0 a.m.38 views

Rocky Linux 8 : grafana (RLSA-2023:5863)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:5863 advisory. - A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total...

7.5CVSS7.3AI score0.944EPSS
Exploits19References5
Tenable Nessus
Tenable Nessus
added 2023/10/23 12:0 a.m.58 views

Oracle Linux 8 : grafana (ELSA-2023-5863)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-5863 advisory. - Resolve CVE-2023-44487 Rapid Reset Attack Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

7.5CVSS7.4AI score0.944EPSS
Exploits19References3
Rows per page
Query Builder