Lucene search
+L

3063 matches found

OSV
OSV
•added 2022/12/22 8:15 p.m.•12 views

CVE-2022-29910

When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings.Note: This issue only affected Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 100...

6.1CVSS7.4AI score0.0036EPSS
SaveExploits1References2
Prion
Prion
•added 2022/12/22 8:15 p.m.•28 views

Design/Logic Flaw

If an attacker loaded a font using FontFace on a background worker, a use-after-free could have occurred, leading to a potentially exploitable crash. This vulnerability affects Firefox 107...

5CVSS7.8AI score0.00637EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2022/12/22 12:00 a.m.•84 views

CVE-2022-45407

If an attacker loaded a font using FontFace on a background worker, a use-after-free could have occurred, leading to a potentially exploitable crash. This vulnerability affects Firefox 107...

7.5CVSS8.9AI score0.00637EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/22 12:00 a.m.•4 views

CVE-2022-45407: Use After Free

If an attacker loaded a font using FontFace on a background worker, a use-after-free could have occurred, leading to a potentially exploitable crash. This vulnerability affects Firefox 107...

7.5CVSS6AI score0.00637EPSS
SaveExploits0References3
Mageia
Mageia
•added 2022/12/13 10:09 p.m.•53 views

Updated rxvt-unicode packages fix security vulnerability

rxvt-unicode 9.25 and 9.26 are vulnerable to remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set. CVE-2022-4170...

9.8CVSS2.9AI score0.02222EPSS
SaveExploits0References2
OSV
OSV
•added 2022/12/13 4:15 p.m.•20 views

CVE-2022-20470

In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS5.9AI score0.0019EPSS
SaveExploits0References1
OSV
OSV
•added 2022/12/13 4:15 p.m.•18 views

UBUNTU-CVE-2022-20470

In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS5.9AI score0.0019EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2022/12/13 12:00 a.m.•8 views

CVE-2022-20470

In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

8AI score0.0019EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/12/13 12:00 a.m.•20 views

PT-2022-14688 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to improper input validation in the bindRemoteViewsService function of AppWidgetServiceImpl.java. This could allow bypassing background activity launch...

7.8CVSS7.6AI score0.0019EPSS
SaveExploits0References5
NVD
NVD
•added 2022/12/09 6:15 p.m.•25 views

CVE-2022-4170

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...

9.8CVSS0.02222EPSS
SaveExploits0References3
Prion
Prion
•added 2022/12/09 6:15 p.m.•21 views

Remote code execution

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...

7.5CVSS9.4AI score0.02222EPSS
SaveExploits0References3Affected Software3
UbuntuCve
UbuntuCve
•added 2022/12/09 6:15 p.m.•32 views

CVE-2022-4170

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...

9.8CVSS7.4AI score0.02222EPSS
SaveExploits0References3
OSV
OSV
•added 2022/12/09 6:15 p.m.•24 views

UBUNTU-CVE-2022-4170

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...

9.8CVSS7.5AI score0.02222EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2022/12/09 12:00 a.m.•10 views

CVE-2022-4170

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...

9.6AI score0.02222EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/09 12:00 a.m.•4 views

CVE-2022-4170: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...

9.8CVSS6AI score0.02222EPSS
SaveExploits0References2
NVD
NVD
•added 2022/12/03 6:15 p.m.•27 views

CVE-2022-4277

A vulnerability was found in Shaoxing Background Management System. It has been declared as critical. This vulnerability affects unknown code of the file /Default/Bd. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed t...

9.8CVSS0.0069EPSS
SaveExploits1References2
Prion
Prion
•added 2022/12/03 6:15 p.m.•32 views

Sql injection

A vulnerability was found in Shaoxing Background Management System. It has been declared as critical. This vulnerability affects unknown code of the file /Default/Bd. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed t...

7.5CVSS9.7AI score0.0069EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/12/03 12:00 a.m.•37 views

CVE-2022-4277 Shaoxing Background Management System Bd sql injection

A vulnerability was found in Shaoxing Background Management System. It has been declared as critical. This vulnerability affects unknown code of the file /Default/Bd. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed t...

6.3CVSS9.9AI score0.0069EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/12/03 12:00 a.m.•19 views

xsjczx Shaoxing Background Management System SQL注入漏洞

The xsjczx Shaoxing Background Management System is a background management system from the Chinese company xsjczx punctuation information technology. A SQL injection vulnerability exists in xsjczx Shaoxing Background Management System, which originates from unknown code in the file /Default/Bd,...

9.8CVSS8.5AI score0.0069EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/03 12:00 a.m.•4 views

CVE-2022-4277: Improper Neutralization

A vulnerability was found in Shaoxing Background Management System. It has been declared as critical. This vulnerability affects unknown code of the file /Default/Bd. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed t...

9.8CVSS5.5AI score0.0069EPSS
SaveExploits1References3
Rows per page
Query Builder