Lucene search
+L

12127 matches found

Patchstack
Patchstack
•added 2023/07/18 12:00 a.m.•18 views

WordPress Performance Kit Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Performance Kit Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b28c91b23fa9 Credits Rafie Muhammad Patchstack Required...

6.2AI score0.00272EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
•added 2023/07/18 12:00 a.m.•41 views

SUSE: Security Advisory (SUSE-SU-2023:2860-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.2AI score0.01287EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2023/07/18 12:00 a.m.•13 views

SUSE: Security Advisory (SUSE-SU-2023:2853-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2023/07/18 12:00 a.m.•38 views

SUSE: Security Advisory (SUSE-SU-2023:2861-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7AI score0.03906EPSS
SaveExploits1References13
OpenVAS
OpenVAS
•added 2023/07/18 12:00 a.m.•12 views

SUSE: Security Advisory (SUSE-SU-2023:2862-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References4
CNNVD
CNNVD
•added 2023/07/18 12:00 a.m.•21 views

SolarWinds Database Performance Analyzer Cross-Site Script Vulnerability

SolarWinds Database Performance Analyzer is an application from SolarWinds USA. A security vulnerability exists in SolarWinds Database Performance Analyzer version 2023.2 that stems from insufficient input validation. An attacker can exploit this vulnerability to perform cross-site scripting...

6.1CVSS5.9AI score0.00502EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
•added 2023/07/17 3:48 p.m.•34 views

Security Bulletin: IBM Performance Tools for i is vulnerable to local privilege escalation (CVE-2023-30989)

Summary IBM Performance Tools for i is vulnerable to local privilege escalation as described in the vulnerability details section. IBM Performance Tools for i has addressed the vulnerability as described in the remediation/fixes section. Vulnerability Details CVEID:CVE-2023-30989 DESCRIPTION: IBM...

8.4CVSS8.2AI score0.00168EPSS
SaveExploits0Affected Software5
osv_suse
osv_suse
•added 2023/07/17 7:52 a.m.•14 views

SUSE-SU-2023:2850-1 Security update for MozillaFirefox, MozillaFirefox-branding-SLE

This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues: Changes in MozillaFirefox and MozillaFirefox-branding-SLE: This update provides Firefox Extended Support Release 115.0 ESR New: - Required fields are now highlighted in PDF forms. - Improved performance on...

8.8CVSS8.6AI score0.00755EPSS
SaveExploits1References16
osv_suse
osv_suse
•added 2023/07/17 7:49 a.m.•16 views

SUSE-SU-2023:2849-1 Security update for MozillaFirefox, MozillaFirefox-branding-SLE

This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues: Changes in MozillaFirefox and MozillaFirefox-branding-SLE: This update provides Firefox Extended Support Release 115.0 ESR New: - Required fields are now highlighted in PDF forms. - Improved performance on...

8.8CVSS8.6AI score0.00755EPSS
SaveExploits1References16
OpenVAS
OpenVAS
•added 2023/07/17 12:00 a.m.•32 views

SUSE: Security Advisory (SUSE-SU-2023:2849-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.7AI score0.00755EPSS
SaveExploits1References15
OpenVAS
OpenVAS
•added 2023/07/17 12:00 a.m.•31 views

SUSE: Security Advisory (SUSE-SU-2023:2844-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8AI score0.0385EPSS
SaveExploits4References4
NVD
NVD
•added 2023/07/16 11:15 p.m.•42 views

CVE-2023-30989

IBM Performance Tools for i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain all object access to the host operating system. IBM X-Force ID: 254017...

8.4CVSS0.00168EPSS
SaveExploits0References2
Prion
Prion
•added 2023/07/16 11:15 p.m.•37 views

Privilege escalation

IBM Performance Tools for i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain all object access to the host operating system. IBM X-Force ID: 254017...

4.3CVSS7.8AI score0.00168EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/07/16 10:40 p.m.•18 views

CVE-2023-30989 IBM i privilege escalation

IBM Performance Tools for i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain all object access to the host operating system. IBM X-Force ID: 254017...

8.4CVSS7AI score0.00168EPSS
SaveExploits0References2
CVE
CVE
•added 2023/07/16 10:40 p.m.•78 views

CVE-2023-30989

CVE-2023-30989 affects IBM Performance Tools for IBM i (versions 7.2–7.5). The vulnerability is a local privilege escalation where a user with command-line access can elevate privileges to gain full host object access. Root cause details indicate a privilege escalation path within IBM i component...

8.4CVSS8.2AI score0.00168EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/07/16 10:40 p.m.•54 views

CVE-2023-30989 IBM i privilege escalation

IBM Performance Tools for i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain all object access to the host operating system. IBM X-Force ID: 254017...

8.4CVSS8.5AI score0.00168EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/07/16 12:00 a.m.•27 views

PT-2023-23099 · Ibm · Ibm Performance Tools For I

Name of the Vulnerable Software and Affected Versions: IBM Performance Tools for i versions 7.2 through 7.5 Description: A local privilege escalation issue allows a malicious actor with command line access to the host operating system to elevate privileges and gain all object access to the host...

8.4CVSS7.8AI score0.00168EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/16 12:00 a.m.•9 views

CVE-2023-30989: Improper Privilege Management

IBM Performance Tools for i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain all object access to the host operating system. IBM X-Force ID: 254017...

8.4CVSS7.4AI score0.00168EPSS
SaveExploits0References2
Prion
Prion
•added 2023/07/14 6:15 p.m.•40 views

Design/Logic Flaw

An Incomplete Internal State Distinction vulnerability in the packet forwarding engine PFE of Juniper Networks Junos OS on SRX 4600 and SRX 5000 Series allows an adjacent attacker to cause a Denial of Service DoS. If an SRX is configured in L2 transparent mode the receipt of a specific genuine...

3.3CVSS6.3AI score0.00303EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
•added 2023/07/14 12:00 a.m.•40 views

SUSE: Security Advisory (SUSE-SU-2023:2816-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.3AI score0.01287EPSS
SaveExploits0References5
Rows per page
Query Builder