Lucene search
+L

4759 matches found

Github Security Blog
Github Security Blog
added 2023/08/09 1:04 p.m.57 views

.NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2023-38178: .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 7.0. This advisory also provides guidance on what developers can do to update their applications to...

7.5CVSS6.7AI score0.0259EPSS
SaveExploits0References4Affected Software8
OSV
OSV
added 2023/08/04 12:15 a.m.9 views

CVE-2023-36138

PHPJabbers Cleaning Business Software 1.0 is vulnerable to Cross Site Scripting XSS via the theme parameter of preview.php...

6.1CVSS5.8AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/08/04 12:15 a.m.6 views

CVE-2023-36137

There is a Cross Site Scripting XSS vulnerability in the "theme" parameter of preview.php in PHPJabbers Class Scheduling System 1.0...

6.1CVSS5.7AI score0.00357EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2023/08/04 12:15 a.m.6 views

CVE-2023-36138

PHPJabbers Cleaning Business Software 1.0 is vulnerable to Cross Site Scripting XSS via the theme parameter of preview.php...

6.1CVSS5.7AI score0.00444EPSS
SaveExploits0References4
OSV
OSV
added 2023/08/04 12:15 a.m.9 views

CVE-2023-36137

There is a Cross Site Scripting XSS vulnerability in the "theme" parameter of preview.php in PHPJabbers Class Scheduling System 1.0...

6.1CVSS5.8AI score0.00357EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/03 12:00 a.m.8 views

PHPJabbers Cleaning Business Software Cross-Site Scripting Vulnerability

Cleaning Business Software is an open source cleaning business software by PHPJabbers. PHPJabbers Cleaning Business Software version 1.0 has a security vulnerability that stems from a cross-site scripting XSS vulnerability in the theme parameter of preview.php...

6.1CVSS5.8AI score0.00444EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/08/03 12:00 a.m.8 views

Class Scheduling System Cross-Site Scripting Vulnerability

Class Scheduling System is a class scheduling system by jkev Personal Developer. A security vulnerability exists in Class Scheduling System version 1.0 due to a cross-site scripting XSS vulnerability in the theme parameter of preview.php...

6.1CVSS5.7AI score0.00357EPSS
SaveExploits0References4
OSV
OSV
added 2023/08/02 1:15 a.m.15 views

UBUNTU-CVE-2023-3994

An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A Regular Expression Denial of Service was possible via sending crafted payloads which use...

7.5CVSS7AI score0.00958EPSS
SaveExploits0References4
OSV
OSV
added 2023/08/02 12:15 a.m.11 views

UBUNTU-CVE-2023-3364

An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A Regular Expression Denial of Service was possible via sending crafted payloads which use...

7.5CVSS5.7AI score0.44494EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/08/02 12:00 a.m.13 views

GitLab Security Breach

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A security vulnerability exists in GitLab CE/EE versions 9.3 through 16.0.8,...

7.5CVSS6.9AI score0.00958EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/08/02 12:00 a.m.11 views

PT-2023-27166 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 9.3 through 16.0.7 GitLab CE/EE versions 16.1 through 16.1.2 GitLab CE/EE versions 16.2 through 16.2.1 Description: An issue has been discovered in GitLab CE/EE, where a Regular Expression Denial of Service was possible...

7.5CVSS7.5AI score0.00958EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
added 2023/08/02 12:00 a.m.43 views

CVE-2023-3994

An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A Regular Expression Denial of Service was possible via sending crafted payloads which use...

7.5CVSS6.9AI score0.00958EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2023/08/01 11:15 p.m.7 views

CVE-2023-33564

There is a Cross Site Scripting XSS vulnerability in the "theme" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3...

6.1CVSS5.8AI score0.00497EPSS
SaveExploits0References4
OSV
OSV
added 2023/08/01 11:15 p.m.8 views

CVE-2023-33564

There is a Cross Site Scripting XSS vulnerability in the "theme" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3...

6.1CVSS5.8AI score0.00497EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/08/01 11:15 p.m.18 views

CVE-2023-33560

There is a Cross Site Scripting XSS vulnerability in "cid" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3...

6.1CVSS6.4AI score0.00497EPSS
SaveExploits0References4
OSV
OSV
added 2023/08/01 11:15 p.m.10 views

CVE-2023-33560

There is a Cross Site Scripting XSS vulnerability in "cid" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3...

6.1CVSS5.8AI score0.00497EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/01 12:00 a.m.8 views

PHPJabbers Time Slots Booking Calendar Cross Site Scripting Vulnerability

PHPJabbers Time Slots Booking Calendar is a booking system from PHPJabbers. A cross-site scripting vulnerability exists in PHPJabbers Time Slots Booking Calendar v3.3, which stems from a cross-site scripting XSS vulnerability in the theme parameter of Preview.php...

6.1CVSS5.8AI score0.00497EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/08/01 12:00 a.m.15 views

GitLab Resource Management Error Vulnerability

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A resource management error vulnerability exists in GitLab CE/EE, which stems...

7.5CVSS7AI score0.44494EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/08/01 12:00 a.m.9 views

PHPJabbers Time Slots Booking Calendar Cross Site Scripting Vulnerability

PHPJabbers Time Slots Booking Calendar is a booking system from PHPJabbers. A cross-site scripting vulnerability exists in PHPJabbers Time Slots Booking Calendar v3.3, which stems from a cross-site scripting XSS vulnerability in the cid parameter of Preview.php...

6.1CVSS5.8AI score0.00497EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/08/01 12:00 a.m.5 views

PT-2023-24426 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 8.14 through 16.0.7 GitLab CE/EE versions 16.1 through 16.1.2 GitLab CE/EE versions 16.2 through 16.2.1 Description: A Regular Expression Denial of Service issue was discovered, allowing attackers to send crafted payload...

7.5CVSS6.9AI score0.44494EPSS
SaveExploits0References10
Rows per page
Query Builder