Lucene search
+L

4006 matches found

Fedora
Fedora
•added 2022/05/07 5:06 a.m.•32 views

[SECURITY] Fedora 36 Update: golang-gioui-0-7.20201225git18d4dbf.fc36

Immediate mode GUI programs in Go for Android, iOS, macOS, Linux, FreeBSD, OpenBSD, Windows, and WebAssembly experimental. See the project page gioui. org for documentation and more information...

7.5CVSS10AI score0.03931EPSS
SaveExploits0
NVD
NVD
•added 2022/05/04 2:15 p.m.•30 views

CVE-2022-25784

Cross-site Scripting XSS vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting. This issue affects: Secomea SiteManager all versions prior to 9.7...

9.1CVSS0.00611EPSS
SaveExploits0References1
Prion
Prion
•added 2022/05/04 2:15 p.m.•37 views

Cross site scripting

Cross-site Scripting XSS vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting. This issue affects: Secomea SiteManager all versions prior to 9.7...

3.5CVSS4.7AI score0.00611EPSS
SaveExploits0References1Affected Software9
Cvelist
Cvelist
•added 2022/05/04 1:56 p.m.•45 views

CVE-2022-25784 User controllable HTML element attribute (potential XSS)

Cross-site Scripting XSS vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting. This issue affects: Secomea SiteManager all versions prior to 9.7...

9.1CVSS8.2AI score0.00611EPSS
SaveExploits0References1
CVE
CVE
•added 2022/05/04 1:56 p.m.•116 views

CVE-2022-25784

CVE-2022-25784: XSS in the Web GUI of Secomea SiteManager that lets a logged-in user inject scripts. Affected: SiteManager all versions prior to 9.7. Root cause described as a cross-site scripting vulnerability in the Web GUI; exploitation requires a logged-in user. The connected documents confir...

9.1CVSS5AI score0.00611EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/04 12:00 a.m.•10 views

CVE-2022-25784: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting. This issue affects: Secomea SiteManager all versions prior to 9.7...

9.1CVSS5.3AI score0.00611EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/05/04 12:00 a.m.•8 views

PT-2022-17511

Name of the Vulnerable Software and Affected Versions Secomea SiteManager versions prior to 9.7 Description A Cross-site Scripting XSS issue in the Web GUI of SiteManager allows a logged-in user to inject scripting. Recommendations For versions prior to 9.7, update to version 9.7 or later to...

9.1CVSS0.00611EPSS
SaveExploits0References4
GithubExploit
GithubExploit
•added 2022/05/02 11:56 p.m.•311 views

Exploit for Incorrect Authorization in Polkit_Project Polkit

Exploit for CVE-2021-3560 Polkit - Local Privilege Escalatio...

7.8CVSS7.7AI score0.23708EPSS
SaveExploits38
OpenVAS
OpenVAS
•added 2022/04/29 12:00 a.m.•33 views

Fedora: Security Advisory for golang-gioui (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
Fedora
Fedora
•added 2022/04/28 5:55 a.m.•28 views

[SECURITY] Fedora 34 Update: golang-gioui-0-7.20201225git18d4dbf.fc34

Immediate mode GUI programs in Go for Android, iOS, macOS, Linux, FreeBSD, OpenBSD, Windows, and WebAssembly experimental. See the project page gioui. org for documentation and more information...

7.5CVSS10AI score0.03931EPSS
SaveExploits0
Fedora
Fedora
•added 2022/04/28 5:53 a.m.•38 views

[SECURITY] Fedora 35 Update: golang-gioui-0-7.20201225git18d4dbf.fc35

Immediate mode GUI programs in Go for Android, iOS, macOS, Linux, FreeBSD, OpenBSD, Windows, and WebAssembly experimental. See the project page gioui. org for documentation and more information...

7.5CVSS10AI score0.03931EPSS
SaveExploits0
Github Security Blog
Github Security Blog
•added 2022/04/22 8:39 p.m.•52 views

Improper Input Validation in GeoServer

Impact The GeoServer security mechanism can perform an unchecked JNDI lookup, which in turn can be used to perform class deserialization and result in arbitrary code execution. The same can happen while configuring data stores with data sources located in JNDI, or while setting up the disk quota...

7.2CVSS0.9AI score0.0156EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/20 12:00 a.m.•33 views

GUI temperature control software Buffer Overflow

The vulnerability of GUI temperature control software relates to the possibility of writing beyond the buffer boundaries when processing configuration files in the .gd1 format. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00814EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2022/04/20 12:00 a.m.•27 views

GUI temperature control software Memory Use After Free

The vulnerability of GUI temperature control software relates to the use of memory after release, during the processing of configuration files in the .gd1 format. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00855EPSS
SaveExploits0References4
Prion
Prion
•added 2022/04/13 10:15 p.m.•42 views

Deserialization of untrusted data

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The GeoServer security mechanism can perform an unchecked JNDI lookup, which in turn can be used to perform class deserialization and result in arbitrary code execution. The same can...

6.5CVSS7.2AI score0.0156EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2022/04/13 9:20 p.m.•9 views

CVE-2022-24847

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The GeoServer security mechanism can perform an unchecked JNDI lookup, which in turn can be used to perform class deserialization and result in arbitrary code execution. The same can...

8.6CVSS0.0156EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2022/04/13 9:20 p.m.•44 views

CVE-2022-24847 Improper Input Validation in GeoServer

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The GeoServer security mechanism can perform an unchecked JNDI lookup, which in turn can be used to perform class deserialization and result in arbitrary code execution. The same can...

7.2CVSS7.3AI score
SaveExploits0References3
NVD
NVD
•added 2022/04/06 10:15 a.m.•30 views

CVE-2021-24009

Multiple improper neutralization of special elements used in an OS command vulnerabilities CWE-78 in the Web GUI of FortiWAN before 4.5.9 may allow an authenticated attacker to execute arbitrary commands on the underlying system's shell via specifically crafted HTTP requests...

9CVSS0.01515EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/04/06 10:15 a.m.•21 views

CVE-2021-24009

Multiple improper neutralization of special elements used in an OS command vulnerabilities CWE-78 in the Web GUI of FortiWAN before 4.5.9 may allow an authenticated attacker to execute arbitrary commands on the underlying system's shell via specifically crafted HTTP requests...

8.8CVSS7.6AI score0.01515EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/04/06 10:15 a.m.•11 views

CVE-2021-24009

Multiple improper neutralization of special elements used in an OS command vulnerabilities CWE-78 in the Web GUI of FortiWAN before 4.5.9 may allow an authenticated attacker to execute arbitrary commands on the underlying system's shell via specifically crafted HTTP requests...

9CVSS7.4AI score0.01515EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder