Lucene search
+L

4098 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/02 12:00 a.m.•5 views

CVE-2024-4036: Improper Neutralization of Input During Web Page Generation

The Sydney Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the style parameter in all versions up to, and including, 1.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access and above...

6.4CVSS6AI score0.00602EPSS
SaveExploits0References1
OSV
OSV
•added 2024/04/30 8:15 p.m.•17 views

CVE-2024-33437

An issue in CSS Exfil Protection v.1.1.0 allows a remote attacker to obtain sensitive information due to missing support for CSS Style Rules...

7.5CVSS5.8AI score0.00757EPSS
SaveExploits1References2
NVD
NVD
•added 2024/04/30 8:15 p.m.•28 views

CVE-2024-33437

An issue in CSS Exfil Protection v.1.1.0 allows a remote attacker to obtain sensitive information due to missing support for CSS Style Rules...

7.5CVSS6.1AI score0.00757EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/04/30 12:00 a.m.•19 views

CSS Exfil Protection 安全漏洞

CSS Exfil Protection is a browser plugin from the individual developer Mike Gualtieri. A security vulnerability exists in CSS Exfil Protection version v.1.1.0, which stems from a lack of support for CSS style rules and could allow a remote attacker to obtain sensitive information...

7.5CVSS6.6AI score0.00757EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/30 12:00 a.m.•7 views

CVE-2024-33437: Exposure of Sensitive Information to an Unauthorized Actor

An issue in CSS Exfil Protection v.1.1.0 allows a remote attacker to obtain sensitive information due to missing support for CSS Style Rules...

7.5CVSS5.8AI score0.00757EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/04/30 12:00 a.m.•13 views

CVE-2024-33437

An issue in CSS Exfil Protection v.1.1.0 allows a remote attacker to obtain sensitive information due to missing support for CSS Style Rules...

6.5AI score0.00757EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/04/30 12:00 a.m.•45 views

CVE-2024-33437

An issue in CSS Exfil Protection v.1.1.0 allows a remote attacker to obtain sensitive information due to missing support for CSS Style Rules...

6.3AI score0.00757EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/04/30 12:00 a.m.•16 views

CSS Exfil Protection 安全漏洞

CSS Exfil Protection is a browser plugin from the individual developer Mike Gualtieri. A security vulnerability exists in CSS Exfil Protection version v.1.1.0, which stems from a lack of support for CSS variables and allows an attacker to obtain sensitive information...

5.3CVSS6.6AI score0.00551EPSS
SaveExploits1References3
Mend
Mend
•added 2024/04/30 12:00 a.m.•4 views

CVE-2024-33437

An issue in CSS Exfil Protection v.1.1.0 allows a remote attacker to obtain sensitive information due to missing support for CSS Style Rules...

8.7CVSS0.00757EPSS
SaveExploits1References2
OSV
OSV
•added 2024/04/25 5:15 p.m.•16 views

AZL-44739 CVE-2024-2467 affecting package perl-Crypt-OpenSSL-RSA 0.33-1

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages. The...

5.9CVSS6.2AI score0.00516EPSS
SaveExploits0References1
OSV
OSV
•added 2024/04/25 5:15 p.m.•33 views

CVE-2024-2467

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages. The...

5.9CVSS6.3AI score
SaveExploits0References4
NVD
NVD
•added 2024/04/25 5:15 p.m.•33 views

CVE-2024-2467

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages. The...

5.9CVSS5.4AI score0.00516EPSS
SaveExploits0References4
OSV
OSV
•added 2024/04/25 5:15 p.m.•21 views

AZL-43687 CVE-2024-2467 affecting package perl-Crypt-OpenSSL-RSA 0.31-6

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages. The...

5.9CVSS6.2AI score0.00516EPSS
SaveExploits0References1
OSV
OSV
•added 2024/04/25 5:15 p.m.•19 views

DEBIAN-CVE-2024-2467

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages. The...

5.9CVSS5.9AI score0.00516EPSS
SaveExploits0References1
OSV
OSV
•added 2024/04/25 5:15 p.m.•19 views

UBUNTU-CVE-2024-2467

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages. The...

5.9CVSS5.8AI score0.00516EPSS
SaveExploits0References3
Mend
Mend
•added 2024/04/25 4:45 p.m.•6 views

CVE-2024-2467

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages. The...

8.2CVSS0.00516EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/04/25 4:45 p.m.•100 views

CVE-2024-2467 Perl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack)

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages. The...

5.9CVSS5.6AI score0.00516EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/04/25 4:45 p.m.•312 views

CVE-2024-2467 Perl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack)

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages. The...

5.9CVSS6.4AI score0.00516EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/04/25 12:00 a.m.•17 views

Crypt-OpenSSL-RSA 安全漏洞

Crypt-OpenSSL-RSA is a library by the individual developer Todd Rinaldo. Crypt-OpenSSL-RSA suffers from a security vulnerability that stems from the presence of a timing-based side-channel flaw that is sufficient to recover plaintext over the network in a Bleichenbacher-style attack...

5.9CVSS6.8AI score0.00516EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/25 12:00 a.m.•6 views

CVE-2024-2467: Observable Timing Discrepancy

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages. The...

5.9CVSS5.8AI score0.00516EPSS
SaveExploits0References2
Rows per page
Query Builder