Lucene search
+L

61 matches found

OSV
OSV
added 2 days ago4 views

MINI-V3FG-6263-QH2C

Bulletin has no description...

5.9CVSS4.7AI score0.0025EPSS
SaveExploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2007-5739

Malware in sbrugna...

10CVSS6.1AI score0.01694EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/05/23 4:57 a.m.6 views

CVE-2023-6263

An issue was discovered by IPVM team in Network Optix NxCloud before 23.1.0.40440. It was possible to add a fake VMS server to NxCloud by using the exact identification of a legitimate VMS server. As result, it was possible to retrieve authorization headers from legitimate users when the legitima...

8.3CVSS6.9AI score0.00489EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2016-6263

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The stringpreputf8nfkcnormalize function in lib/nfkc.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service out-of-bounds read...

7.5CVSS7.2AI score0.0391EPSS
SaveExploits0References2
OSV
OSV
added 2024/07/15 9:53 p.m.10 views

CGA-6263-3393-PRQ6

Bulletin has no description...

7.5CVSS7.1AI score0.01414EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2024/07/03 7:32 a.m.15 views

CVE-2024-6263 WP Lightbox 2 <= 3.0.6.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

The WP Lightbox 2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all versions up to, and including, 3.0.6.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access...

6.4CVSS5.8AI score0.00342EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/07/03 7:32 a.m.28 views

CVE-2024-6263 WP Lightbox 2 <= 3.0.6.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

The WP Lightbox 2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all versions up to, and including, 3.0.6.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access...

6.4CVSS0.00342EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/07/03 12:0 a.m.12 views

WordPress WP Lightbox 2 Plugin <= 3.0.6.6 is vulnerable to Cross Site Scripting (XSS)

Software WP Lightbox 2 Type Plugin Vulnerable versions = 3.0.6.6 Fixed in 3.0.6.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6263 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8a2088ef7bb8 Credits Webbernaut Required...

6.4CVSS5.8AI score0.00342EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.23 views

RHEL 7 : libidn (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libidn: Out-of-bounds read when reading zero byte as input CVE-2016-6262 - The idnatoascii4i function in...

7.9AI score0.06513EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.24 views

RHEL 5 : libidn (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libidn: Out-of-bounds read when reading zero byte as input CVE-2016-6262 - The idnatoascii4i function in...

8AI score0.06513EPSS
SaveExploits0References3
NVD
NVD
added 2023/11/22 6:15 p.m.19 views

CVE-2023-6263

An issue was discovered by IPVM team in Network Optix NxCloud before 23.1.0.40440. It was possible to add a fake VMS server to NxCloud by using the exact identification of a legitimate VMS server. As result, it was possible to retrieve authorization headers from legitimate users when the legitima...

8.3CVSS0.00489EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/11/22 5:56 p.m.21 views

CVE-2023-6263 Server Spoofing Vulnerability in NxCloud

An issue was discovered by IPVM team in Network Optix NxCloud before 23.1.0.40440. It was possible to add a fake VMS server to NxCloud by using the exact identification of a legitimate VMS server. As result, it was possible to retrieve authorization headers from legitimate users when the legitima...

8.3CVSS8.4AI score0.00489EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/22 5:56 p.m.41 views

CVE-2023-6263

The vulnerability CVE-2023-6263 affects Network Optix NxCloud prior to 23.1.0.40440. An attacker could add a fake VMS server by using the exact identification of a legitimate VMS server, allowing retrieval of authorization headers from legitimate users when their client connects to the fake VMS s...

8.3CVSS8AI score0.00489EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2023/08/01 12:0 a.m.26 views

Ubuntu: Security Advisory (USN-6263-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.8AI score0.01812EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/07/31 12:0 a.m.33 views

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : OpenJDK vulnerabilities (USN-6263-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6263-1 advisory. Motoyasu Saburi discovered that OpenJDK incorrectly handled special characters in file name parameters. An...

7.5CVSS6.2AI score0.01812EPSS
SaveExploits0References8
F5 Networks
F5 Networks
added 2023/02/21 6:35 p.m.36 views

K25353544: libidn vulnerability CVE-2016-6263

Security Advisory Description The stringpreputf8nfkcnormalize function in lib/nfkc.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service out-of-bounds read and crash via crafted UTF-8 data. CVE-2016-6263 Impact This vulnerability may allow attackers to cause a...

7.5CVSS7.6AI score0.0391EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.21 views

Mageia: Security Advisory (MGASA-2016-0269)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7AI score0.06721EPSS
SaveExploits0References6
Rosalinux
Rosalinux
added 2021/07/02 5:14 p.m.38 views

Advisory ROSA-SA-2021-1873

Software: libidn 1.28 OS: Cobalt 7.9 CVE-ID: CVE-2015-2059 CVE-Crit: MEDIUM CVE-DESC: The stringpreputf8toucs4 function in libin prior to 1.31, used in jabberd2, allows context-sensitive attackers to read system memory and possibly exert other undefined influence via invalid UTF-8 characters in a...

7.5CVSS7.1AI score0.06721EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2016:2079-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.1AI score0.06721EPSS
SaveExploits0References7
CVE
CVE
added 2020/06/10 12:44 p.m.73 views

CVE-2020-6263

CVE-2020-6263 affects SAP NetWeaver AS Java when standalone clients connect via P4 Protocol. Affected components include SAP-JEECOR (7.00, 7.01), SERVERCOR (7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50), and CORE-TOOLS (7.00–7.50). The root cause is that, for operations requiring user identity, authe...

9.8CVSS9.5AI score0.01441EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder