Lucene search
+L

3901 matches found

Github Security Blog
Github Security Blog
added 2023/01/13 9:30 p.m.28 views

webbrowser-rs allows attackers to access arbitrary files via supplying a crafted URL

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...

9.8CVSS8.8AI score0.01349EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2023/01/13 9:15 p.m.12 views

DEBIAN-CVE-2022-45299

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...

9.8CVSS8.7AI score0.01349EPSS
SaveExploits1References1
NVD
NVD
added 2023/01/13 9:15 p.m.37 views

CVE-2022-45299

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...

9.8CVSS9.3AI score0.01349EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2023/01/13 9:15 p.m.30 views

CVE-2022-45299

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...

9.8CVSS7.3AI score0.01349EPSS
SaveExploits1References2
OSV
OSV
added 2023/01/13 9:15 p.m.9 views

UBUNTU-CVE-2022-45299

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...

9.8CVSS7.4AI score0.01349EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/01/13 12:00 a.m.49 views

CVE-2022-45299

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...

9.5AI score0.01349EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2023/01/13 12:00 a.m.9 views

CVE-2022-45299

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...

9.3AI score0.01349EPSS
SaveExploits1References1
NVD
NVD
added 2023/01/10 4:15 a.m.35 views

CVE-2023-22320

OpenAM Web Policy Agent OpenAM Consortium Edition provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerabilityCWE-22. Furthermore, a crafted URL may be evaluated incorrectly...

7.5CVSS7.4AI score0.00722EPSS
SaveExploits0References2
Prion
Prion
added 2023/01/10 4:15 a.m.19 views

Path traversal

OpenAM Web Policy Agent OpenAM Consortium Edition provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerabilityCWE-22. Furthermore, a crafted URL may be evaluated incorrectly...

5CVSS7.4AI score0.00722EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/01/10 12:00 a.m.34 views

CVE-2023-22320

OpenAM Web Policy Agent OpenAM Consortium Edition provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerabilityCWE-22. Furthermore, a crafted URL may be evaluated incorrectly...

7.6AI score0.00722EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2023/01/10 12:00 a.m.66 views

CVE-2023-22320

OpenAM Web Policy Agent OpenAM Consortium Edition provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerabilityCWE-22. Furthermore, a crafted URL may be evaluated incorrectly...

7.5CVSS7AI score0.00722EPSS
SaveExploits0References3
OSV
OSV
added 2022/12/19 8:15 p.m.8 views

CVE-2022-44474

Adobe Experience Manager version 6.5.14 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

5.4CVSS5.7AI score0.0048EPSS
SaveExploits0References1
OSV
OSV
added 2022/12/19 8:15 p.m.6 views

CVE-2022-44465

Adobe Experience Manager version 6.5.14 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

5.4CVSS5.7AI score0.0048EPSS
SaveExploits0References1
OSV
OSV
added 2022/12/19 8:15 p.m.10 views

CVE-2022-42354

Adobe Experience Manager version 6.5.14 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

5.4CVSS5.7AI score0.0048EPSS
SaveExploits0References1
OSV
OSV
added 2022/12/19 8:15 p.m.11 views

CVE-2022-42362

Adobe Experience Manager version 6.5.14 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

5.4CVSS5.7AI score0.0048EPSS
SaveExploits0References1
OSV
OSV
added 2022/12/19 8:15 p.m.7 views

CVE-2022-42350

Adobe Experience Manager version 6.5.14 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

5.4CVSS5.7AI score0.0048EPSS
SaveExploits0References1
OSV
OSV
added 2022/12/19 8:15 p.m.8 views

CVE-2022-42356

Adobe Experience Manager version 6.5.14 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

5.4CVSS5.7AI score0.0048EPSS
SaveExploits0References1
OSV
OSV
added 2022/12/19 8:15 p.m.9 views

CVE-2022-30679

Adobe Experience Manager version 6.5.14 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

5.4CVSS5.7AI score0.0048EPSS
SaveExploits0References1
Prion
Prion
added 2022/12/19 3:15 a.m.20 views

Open redirect

Open redirect vulnerability in DENSHI NYUSATSU CORE SYSTEM v6 R4 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL...

5.8CVSS6.2AI score0.00537EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/19 12:00 a.m.7 views

CVE-2022-46288

Open redirect vulnerability in DENSHI NYUSATSU CORE SYSTEM v6 R4 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL...

7AI score0.00537EPSS
SaveExploits0References2
Rows per page
Query Builder