Lucene search
+L

353 matches found

Cvelist
Cvelist
•added 2023/04/07 12:13 p.m.•37 views

CVE-2023-1726 XSS in Proliz OBS

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Proliz OBS allows Stored XSS for an authenticated user. This issue affects OBS: before 23.04.01...

5.4CVSS5.4AI score0.00337EPSS
SaveExploits0References2
CVE
CVE
•added 2023/04/07 12:13 p.m.•79 views

CVE-2023-1726

CVE-2023-1726 affects Proliz OBS prior to 23.04.01, with an XSS vulnerability in stored form that requires an authenticated user. The root cause is improper neutralization of input during web page generation, allowing Stored XSS. Impact is stored XSS for authenticated users; the vulnerability is ...

5.4CVSS6AI score0.00337EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2023/04/07 12:00 a.m.•17 views

Proliz OBS 跨站脚本漏洞

Proliz OBS is a website. A cross-site scripting vulnerability exists in Proliz OBS versions prior to 23.04.01, which stems from the presence of a stored cross-site scripting XSS vulnerability...

5.4CVSS5.3AI score0.00337EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/04/07 12:00 a.m.•14 views

PT-2023-17195

Name of the Vulnerable Software and Affected Versions Proliz OBS versions prior to 23.04.01 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks for authenticated users...

5.4CVSS6AI score0.00337EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/07 12:00 a.m.•5 views

CVE-2023-1726: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Proliz OBS allows Stored XSS for an authenticated user. This issue affects OBS: before 23.04.01...

5.4CVSS5.8AI score0.00337EPSS
SaveExploits0References4
OSV
OSV
•added 2023/03/15 1:15 p.m.•21 views

CVE-2022-45155

An Improper Handling of Exceptional Conditions vulnerability in obs-service-gomodules of openSUSE Factory allows attackers that can influence the call to the service to delete files and directories on the system of the victim. This issue affects: SUSE openSUSE Factory obs-service-gomodules versio...

5.5CVSS5.8AI score0.00206EPSS
SaveExploits1References1
NVD
NVD
•added 2023/03/15 1:15 p.m.•33 views

CVE-2022-45155

An Improper Handling of Exceptional Conditions vulnerability in obs-service-gomodules of openSUSE Factory allows attackers that can influence the call to the service to delete files and directories on the system of the victim. This issue affects: SUSE openSUSE Factory obs-service-gomodules versio...

5.5CVSS5.4AI score0.00206EPSS
SaveExploits1References1
Prion
Prion
•added 2023/03/15 1:15 p.m.•26 views

Design/Logic Flaw

An Improper Handling of Exceptional Conditions vulnerability in obs-service-gomodules of openSUSE Factory allows attackers that can influence the call to the service to delete files and directories on the system of the victim. This issue affects: SUSE openSUSE Factory obs-service-gomodules versio...

1.7CVSS5.5AI score0.00206EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2023/03/15 12:00 a.m.•18 views

openSUSE 安全漏洞

openSUSE is a suite of Linux-based free operating systems and open source community projects from the German company SUSE. A security vulnerability exists in SUSE openSUSE Factory obs-service-gomodules versions prior to 0.6.1, which stems from a vulnerability that allows an attacker to delete fil...

5.5CVSS5.7AI score0.00206EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/03/15 12:00 a.m.•43 views

CVE-2022-45155 obs-service-go_modules: arbitrary directory delete

An Improper Handling of Exceptional Conditions vulnerability in obs-service-gomodules of openSUSE Factory allows attackers that can influence the call to the service to delete files and directories on the system of the victim. This issue affects: SUSE openSUSE Factory obs-service-gomodules versio...

5.5CVSS5.7AI score0.00206EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2023/03/15 12:00 a.m.•20 views

CVE-2022-45155 obs-service-go_modules: arbitrary directory delete

An Improper Handling of Exceptional Conditions vulnerability in obs-service-gomodules of openSUSE Factory allows attackers that can influence the call to the service to delete files and directories on the system of the victim. This issue affects: SUSE openSUSE Factory obs-service-gomodules versio...

5.5CVSS5.5AI score0.00206EPSS
SaveExploits1References1
CVE
CVE
•added 2023/03/15 12:00 a.m.•83 views

CVE-2022-45155

The CVE-2022-45155 issue affects openSUSE Factory’s obs-service-go_modules prior to 0.6.1. The root cause is an Improper Handling of Exceptional Conditions in obs-service-go_modules, enabling an attacker who can influence the service call to delete files and directories on the victim’s system. Co...

5.5CVSS5.9AI score0.00206EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/03/15 12:00 a.m.•3 views

PT-2023-14621

Name of the Vulnerable Software and Affected Versions SUSE openSUSE Factory obs-service-go modules versions prior to 0.6.1 Description An Improper Handling of Exceptional Conditions issue in obs-service-go modules of openSUSE Factory allows attackers that can influence the call to the service to...

5.5CVSS0.00206EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/15 12:00 a.m.•5 views

CVE-2022-45155: Improper Handling of Exceptional Conditions

An Improper Handling of Exceptional Conditions vulnerability in obs-service-gomodules of openSUSE Factory allows attackers that can influence the call to the service to delete files and directories on the system of the victim. This issue affects: SUSE openSUSE Factory obs-service-gomodules versio...

5.5CVSS5.8AI score0.00206EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2023/03/04 3:33 a.m.•20 views

SUSE CVE-2022-45155

An Improper Handling of Exceptional Conditions vulnerability in obs-service-gomodules of openSUSE Factory allows attackers that can influence the call to the service to delete files and directories on the system of the victim. This issue affects: SUSE openSUSE Factory obs-service-gomodules versio...

5.5CVSS6.8AI score0.00206EPSS
SaveExploits1References3
F5 Networks
F5 Networks
•added 2023/02/21 7:40 p.m.•54 views

K73455417: obs-service-extract_file package vulnerability CVE-2016-4007

Security Advisory Description Multiple unspecified vulnerabilities in the obs-service-extractfile package before 0.3-5.1 in openSUSE Leap 42.1 and before 0.3-3.1 in openSUSE 13.2 allow attackers to execute arbitrary commands via a service definition, related to executing unzip with "illegal...

10CVSS9.6AI score0.02474EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/02/15 5:56 a.m.•21 views

SUSE CVE-2010-3782

obs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api implementation...

8.8CVSS6.9AI score0.01091EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2023/02/15 5:04 a.m.•10 views

SUSE CVE-2016-4007

Multiple unspecified vulnerabilities in the obs-service-extractfile package before 0.3-5.1 in openSUSE Leap 42.1 and before 0.3-3.1 in openSUSE 13.2 allow attackers to execute arbitrary commands via a service definition, related to executing unzip with "illegal options."...

9.8CVSS7.8AI score0.02474EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2023/02/15 4:26 a.m.•10 views

SUSE CVE-2018-12476

Relative Path Traversal vulnerability in obs-service-tarscm of SUSE Linux Enterprise Server 15; openSUSE Factory allows remote attackers with control over a repository to overwrite files on the machine of the local user if a malicious service is executed. This issue affects: SUSE Linux Enterprise...

7.5CVSS6.6AI score0.01026EPSS
SaveExploits0References7
HackRead
HackRead
•added 2023/01/17 10:22 a.m.•25 views

Google Ads Malware Wipes NFT Influencer’s Crypto Wallet

By Habiba Rashid NFT influencer @NFTGOD downloaded malware through Google Ads while attempting to download OBS, an open-source video streaming software. This is a post from HackRead.com Read the original post: Google Ads Malware Wipes NFT Influencers Crypto Wallet...

2AI score
SaveExploits0
Rows per page
Query Builder