49 matches found
phpMyFAQ < 3.2.0 - Cross-site Scripting
Cross-site Scripting XSS Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2. id: CVE-2023-5863 info: name: phpMyFAQ ' - 'phpMyFAQ' condition: and - type: word part: header words: - "tex...
CVE-2026-5863 vulnerabilities
Vulnerabilities for packages: chromium...
SUSE CVE-2026-5863
Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
Linux Distros Unpatched Vulnerability : CVE-2026-5863
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HT...
CVE-2026-5863
Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-5863
Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-5863
Summary: CVE-2026-5863 is an insecure implementation in the V8 engine of Google Chrome/Chromium prior to 147.0.7727.55 that could allow remote code execution via a crafted HTML page. The current public docs list the issue and indicate high impact, but do not provide exploitation details. Public u...
CVE-2025-5863 Tenda AC5 SetRebootTimer formSetRebootTimer stack-based overflow
A vulnerability was found in Tenda AC5 15.03.06.47. It has been classified as critical. Affected is the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to stack-based buffer overflow. It is possible to launch the attack remotely. T...
CVE-2025-5863
creationtimestamp| type| source ---|---|--- 2025-06-08 13:50:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114648062576412340 2025-06-09 06:00:56+00:00| seen| Telegram/poES1g0SOI4ioDWBJAZ2lqmWmRFskP6WFqyJMceX7ywyv4c...
CVE-2017-5863
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control...
ABB Cylon Aspect 3.08.01 vstatConfigurationDownload.php Configuration Download Vulnerability
ABB Cylon Aspect version 3.08.01 suffers from an unauthenticated configuration download vulnerability. This can be exploited to download the CSV DB that contains the configuration mappings information via the VMobileImportExportServlet by directly calling the vstatConfigurationDownload.php script...
CVE-2024-5863
CVE-2024-5863 affects the Easy Image Collage WordPress plugin. The issue is a missing capability check in ajax_image_collage() across versions up to and including 1.13.5, allowing authenticated users with Contributor-level access and above to erase content in arbitrary posts (data loss). Wordfenc...
CVE-2024-5863 Easy Image Collage <= 1.13.5 - Missing Authorization to Authenticated (Contributor+) Data Clearance
The Easy Image Collage plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the ajaximagecollage function in all versions up to, and including, 1.13.5. This makes it possible for authenticated attackers, with Contributor-level access and above, to...
WordPress Easy Image Collage Plugin <= 1.13.5 is vulnerable to Broken Access Control
Software Easy Image Collage Type Plugin Vulnerable versions = 1.13.5 Fixed in 1.13.6 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-5863 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 9f1bcb932e47 Credits Lucio Sá Required privile...
FreeBSD : phpmyfaq -- multiple vulnerabilities (4f370c80-79ce-11ee-be8e-589cfc0f81b0)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 4f370c80-79ce-11ee-be8e-589cfc0f81b0 advisory. - Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2...
phpMyFAQ < 3.2.2 Multiple Vulnerabilities
phpMyFAQ is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyfaq:phpmyfaq"; if description...
CVE-2023-5863
CVE-2023-5863 is a reflected XSS vulnerability in phpMyFAQ prior to 3.2.2. The issue arises from insufficient filtering/escaping in the action parameter of admin/index.php?action=, allowing an attacker to inject script via reflected input. Exploitation can enable arbitrary Web script execution or...
CVE-2023-5863 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq
Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2...
Rocky Linux 8 : grafana (RLSA-2023:5863)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:5863 advisory. - A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total...
Oracle Linux 8 : grafana (ELSA-2023-5863)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-5863 advisory. - Resolve CVE-2023-44487 Rapid Reset Attack Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...