Lucene search
+L

4859 matches found

NVD
NVD
•added 2023/01/17 10:15 a.m.•28 views

CVE-2023-22298

Open redirect vulnerability in pgAdmin 4 versions prior to v6.14 allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL...

6.1CVSS6.2AI score0.00918EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/01/17 12:00 a.m.•8 views

PT-2023-1231 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to a buffer overflow in memory when handling HTML content, which can be exploited by a remote attacker to bypass security restrictions and elevate...

8.3CVSS7.1AI score0.00884EPSS
SaveExploits0References8
OSV
OSV
•added 2023/01/17 12:00 a.m.•33 views

CVE-2023-22298

Open redirect vulnerability in pgAdmin 4 versions prior to v6.14 allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL...

6.1CVSS6.2AI score
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2023/01/13 9:30 p.m.•38 views

webbrowser-rs allows attackers to access arbitrary files via supplying a crafted URL

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...

9.8CVSS8.8AI score0.01349EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2023/01/13 9:15 p.m.•20 views

DEBIAN-CVE-2022-45299

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...

9.8CVSS8.7AI score0.01349EPSS
SaveExploits1References1
NVD
NVD
•added 2023/01/13 9:15 p.m.•43 views

CVE-2022-45299

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...

9.8CVSS9.3AI score0.01349EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2023/01/13 9:15 p.m.•34 views

CVE-2022-45299

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...

9.8CVSS7.3AI score0.01349EPSS
SaveExploits1References2
OSV
OSV
•added 2023/01/13 9:15 p.m.•14 views

UBUNTU-CVE-2022-45299

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...

9.8CVSS7.4AI score0.01349EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/01/13 12:00 a.m.•55 views

CVE-2022-45299

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...

9.5AI score0.01349EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/13 12:00 a.m.•4 views

CVE-2022-45299: Improper Limitation of a Pathname to a Restricted Directory

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...

9.8CVSS5.9AI score0.01349EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/01/13 12:00 a.m.•13 views

CVE-2022-45299

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...

9.3AI score0.01349EPSS
SaveExploits1References1
Mend
Mend
•added 2023/01/13 12:00 a.m.•5 views

CVE-2022-45299

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL...

9.8CVSS0.01349EPSS
SaveExploits1References7
NVD
NVD
•added 2023/01/10 4:15 a.m.•39 views

CVE-2023-22320

OpenAM Web Policy Agent OpenAM Consortium Edition provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerabilityCWE-22. Furthermore, a crafted URL may be evaluated incorrectly...

7.5CVSS7.4AI score0.00728EPSS
SaveExploits0References2
Prion
Prion
•added 2023/01/10 4:15 a.m.•22 views

Path traversal

OpenAM Web Policy Agent OpenAM Consortium Edition provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerabilityCWE-22. Furthermore, a crafted URL may be evaluated incorrectly...

5CVSS7.4AI score0.00728EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2023/01/10 12:00 a.m.•71 views

CVE-2023-22320

OpenAM Web Policy Agent OpenAM Consortium Edition provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerabilityCWE-22. Furthermore, a crafted URL may be evaluated incorrectly...

7.5CVSS7AI score0.00728EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/01/10 12:00 a.m.•43 views

CVE-2023-22320

OpenAM Web Policy Agent OpenAM Consortium Edition provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerabilityCWE-22. Furthermore, a crafted URL may be evaluated incorrectly...

7.6AI score0.00728EPSS
SaveExploits0References2
OSV
OSV
•added 2022/12/19 8:15 p.m.•14 views

CVE-2022-44474

Adobe Experience Manager version 6.5.14 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

5.4CVSS5.7AI score0.00493EPSS
SaveExploits0References1
OSV
OSV
•added 2022/12/19 8:15 p.m.•15 views

CVE-2022-44465

Adobe Experience Manager version 6.5.14 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

5.4CVSS5.7AI score0.00493EPSS
SaveExploits0References1
OSV
OSV
•added 2022/12/19 8:15 p.m.•13 views

CVE-2022-42356

Adobe Experience Manager version 6.5.14 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

5.4CVSS5.7AI score0.00493EPSS
SaveExploits0References1
OSV
OSV
•added 2022/12/19 8:15 p.m.•20 views

CVE-2022-42362

Adobe Experience Manager version 6.5.14 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

5.4CVSS5.7AI score0.00493EPSS
SaveExploits0References1
Rows per page
Query Builder