Lucene search
+L

5805 matches found

BDU FSTEC
BDU FSTEC
added 2022/02/07 12:00 a.m.15 views

The vulnerability of the Windows File History backup application on Windows operating systems arises from memory object processing errors, allowing attackers to exploit their privileges.

The vulnerability of the Windows File History backup application on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00525EPSS
SaveExploits0References4
Prion
Prion
added 2022/02/04 11:15 p.m.21 views

Design/Logic Flaw

Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemeral messages and assets might still be accessible...

2.1CVSS3.8AI score0.00307EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/02/04 10:32 p.m.73 views

CVE-2022-23605

CVE-2022-23605 affects Wire Webapp: expired ephemeral messages were not reliably removed from local chat history and, in affected versions prior to 2022-01-27-production.0, ephemeral messages/assets could be accessible via the local search function. Viewing a message in chat view triggers deletio...

4.4CVSS3.7AI score0.00307EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/02/04 10:32 p.m.47 views

CVE-2022-23605 Expired Ephemeral Messages not reliably removed in wire-webapp

Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemeral messages and assets might still be accessible...

4.4CVSS4.9AI score0.00307EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/02/04 10:32 p.m.8 views

CVE-2022-23605 Expired Ephemeral Messages not reliably removed in wire-webapp

Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemeral messages and assets might still be accessible...

4.4CVSS4.6AI score0.00307EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2022/02/04 6:33 a.m.591 views

Exploit for Out-of-bounds Write in Polkit_Project Polkit

pwnKit About: Title: pwnKit Description: Privilege esc...

7.8CVSS7.7AI score0.94921EPSS
SaveExploits154
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.38 views

Mageia: Security Advisory (MGASA-2019-0324)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.6AI score0.09543EPSS
SaveExploits6References11
Malwarebytes
Malwarebytes
added 2022/01/26 2:21 p.m.23 views

Google sued over deceptive location tracking

Four Attorneys General AG from the District of Columbia and the states of Indiana, Texas, and Washington have filed separate lawsuits agains Google for allegedly misleading its users into believing that they are no longer tracking their location when they deliberately pause the "Location History"...

7.2AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/01/24 8:15 a.m.5 views

CVE-2021-25015

The myCred WordPress plugin before 2.4 does not sanitise and escape the search query before outputting it back in the history dashboard page, leading to a Reflected Cross-Site Scripting issue...

6.1CVSS6.3AI score0.00887EPSS
SaveExploits2References3
OSV
OSV
added 2022/01/24 8:15 a.m.10 views

CVE-2021-25015

The myCred WordPress plugin before 2.4 does not sanitise and escape the search query before outputting it back in the history dashboard page, leading to a Reflected Cross-Site Scripting issue...

6.1CVSS6.4AI score0.00887EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2022/01/24 12:00 a.m.10 views

WordPress plugin 跨站脚本漏洞

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. a cross-site scripting vulnerability exists in versions of WordPress prior to myCred plugin 2.4, which...

6.1CVSS5.7AI score0.00887EPSS
SaveExploits2References3
Microsoft CVE
Microsoft CVE
added 2022/01/21 8:00 a.m.4013 views

WinVerifyTrust Signature Validation Vulnerability

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...

8.8CVSS7.5AI score0.44647EPSS
SaveExploits1
PyPA
PyPA
added 2022/01/18 11:15 p.m.10 views

PYSEC-2022-41

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions The path parameter of the requested URL is not sanitized before being passed to the QT frontend. This path is used in all componen...

8.7CVSS6.8AI score0.00789EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2022/01/18 11:15 p.m.7 views

UBUNTU-CVE-2022-21690

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions The path parameter of the requested URL is not sanitized before being passed to the QT frontend. This path is used in all componen...

8.7CVSS6.7AI score0.00789EPSS
SaveExploits1References4
OSV
OSV
added 2022/01/18 10:15 p.m.9 views

UBUNTU-CVE-2022-21688

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Affected versions of the desktop application were found to be vulnerable to denial of service via an undisclosed vulnerability in the QT image parsing...

7.5CVSS5.9AI score0.00787EPSS
SaveExploits0References4
OSV
OSV
added 2022/01/18 10:15 p.m.17 views

PYSEC-2022-39

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Affected versions of the desktop application were found to be vulnerable to denial of service via an undisclosed vulnerability in the QT image parsing...

7.5CVSS1.4AI score0.00787EPSS
SaveExploits0References2
PyPA
PyPA
added 2022/01/18 10:15 p.m.10 views

PYSEC-2022-39

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Affected versions of the desktop application were found to be vulnerable to denial of service via an undisclosed vulnerability in the QT image parsing...

7.5CVSS6.9AI score0.00787EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/01/18 9:45 p.m.47 views

CVE-2022-21688 Out-of-bounds Read in Onionshare

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Affected versions of the desktop application were found to be vulnerable to denial of service via an undisclosed vulnerability in the QT image parsing...

7.5CVSS7.8AI score0.00787EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/01/12 12:00 a.m.9 views

PT-2022-13015 · Snipe-It · Snipe-It

Name of the Vulnerable Software and Affected Versions: snipe-it affected versions not specified Description: The issue is related to Missing Authorization and Improper Access Control, which may allow unauthorized access. There is no information provided about the estimated number of potentially...

6.3CVSS5.6AI score0.00639EPSS
SaveExploits1References10
Microsoft KB
Microsoft KB
added 2022/01/11 8:00 a.m.126 views

January 11, 2022—KB5009543 (OS Builds 19042.1466, 19043.1466, and 19044.1466)

None None...

10CVSS6.8AI score0.9279EPSS
SaveExploits29
Rows per page
Query Builder