Lucene search
+L

10506 matches found

osv_ubuntu
osv_ubuntu
•added 2020/11/02 9:15 p.m.•13 views

UBUNTU-CVE-2020-28034

WordPress before 5.5.2 allows XSS associated with global variables...

6.1CVSS7.3AI score0.01721EPSS
SaveExploits0References3
Prion
Prion
•added 2020/11/02 9:15 p.m.•22 views

Cross site scripting

WordPress before 5.5.2 allows XSS associated with global variables...

4.3CVSS7.3AI score0.01721EPSS
SaveExploits0References6Affected Software3
UbuntuCve
UbuntuCve
•added 2020/11/02 12:00 a.m.•35 views

CVE-2020-28034

WordPress before 5.5.2 allows XSS associated with global variables...

6.1CVSS6.7AI score0.01721EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2020/10/31 12:59 a.m.•70 views

CVE-2020-28034

WordPress before 5.5.2 allows XSS associated with global variables...

6.1CVSS7.4AI score0.01721EPSS
SaveExploits0
Mend
Mend
•added 2020/10/31 12:59 a.m.•5 views

CVE-2020-28034

WordPress before 5.5.2 allows XSS associated with global variables...

6.1CVSS0.01721EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/31 12:00 a.m.•4 views

CVE-2020-28034: Improper Neutralization of Input During Web Page Generation

WordPress before 5.5.2 allows XSS associated with global variables...

6.1CVSS5.8AI score0.01721EPSS
SaveExploits0References2
osv_suse
osv_suse
•added 2020/10/29 3:44 p.m.•17 views

SUSE-SU-2020:3094-1 Security update for pacemaker

This update for pacemaker fixes the following issues: - attrd: handle shutdown more cleanly bsc1173668 - executor: restrict certain IPC requests to Pacemaker daemons CVE-2020-25654, bsc1177916 - extra: quote shell variables in agent code where appropriate bsc1175557 - fencer: restrict certain IPC...

9CVSS6.8AI score0.01868EPSS
SaveExploits0References6
Patchstack
Patchstack
•added 2020/10/29 12:00 a.m.•60 views

WordPress <= 5.5.1 - Cross-Site Scripting (XSS) via Global Variables vulnerability

Cross-Site Scripting XSS via Global Variables vulnerability found by Marc Montas in WordPress versions = 5.5.1. Solution Update the WordPress to the latest available version at least 5.5.2...

6.1CVSS2.8AI score0.01721EPSS
SaveExploits0References1Affected Software1
VulnCheck KEV
VulnCheck KEV
•added 2020/10/29 12:00 a.m.•17 views

VulnCheck KEV: CVE-2020-28034

WordPress before 5.5.2 allows XSS associated with global variables...

6.1CVSS6.7AI score0.01721EPSS
SaveIn wildExploits0References2
FreeBSD
FreeBSD
•added 2020/10/29 12:00 a.m.•27 views

wordpress -- multiple issues

wordpress developers reports: Ten security issues affect WordPress versions 5.5.1 and earlier. If you havent yet updated to 5.5, all WordPress versions since 3.7 have also been updated to fix the following security issues: -Props to Alex Concha of the WordPress Security Team for their work in...

0.8AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2020/10/29 12:00 a.m.•34 views

Ubuntu 16.04 LTS / 18.04 LTS : Pam-python regression (USN-4552-3)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4552-3 advisory. USN-4552-1 and USN-4552-2 fixed a vulnerability in Pam-python. The update introduced a regression which prevented PAM modules written in Python from...

7.8CVSS7.3AI score0.00356EPSS
SaveExploits0References2
osv_usn
osv_usn
•added 2020/10/28 4:23 p.m.•24 views

USN-4552-3 pam-python regression

USN-4552-1 and USN-4552-2 fixed a vulnerability in Pam-python. The update introduced a regression which prevented PAM modules written in Python from importing python modules from site-specific directories. We apologize for the inconvenience. Original advisory details: Malte Kraus discovered that...

7.8CVSS7.2AI score0.00356EPSS
SaveExploits0References2
Veracode
Veracode
•added 2020/10/28 11:04 a.m.•45 views

Information Disclosure

podman is vulnerable to information disclosure. The vulnerability exists through environment variables leak between containers when started via Varlink or Docker-compatible REST API...

5.3CVSS3.1AI score0.01402EPSS
SaveExploits0References9Affected Software1
RedHat Linux
RedHat Linux
•added 2020/10/27 2:53 p.m.•116 views

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.6.1 package security update

An update for jenkins-2-plugins, openshift-clients, podman, runc, and skopeo is now available for Red Hat OpenShift Container Platform 4.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

9.9CVSS6.5AI score0.04861EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2020/10/27 2:53 p.m.•18 views

podman: environment variables leak between containers when started via Varlink or Docker-compatible REST API

An information disclosure flaw was found in containers/podman. When using the deprecated Varlink API or the Docker-compatible REST API, if multiple containers are created in a short duration, the environment variables from the first container leak into subsequent containers. This flaw allows an...

5.3CVSS7.1AI score0.01402EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2020/10/22 12:00 a.m.•44 views

Ubuntu 16.04 LTS : Pam-python vulnerability (USN-4552-2)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4552-2 advisory. Malte Kraus discovered that Pam-python mishandled certain environment variables. A local attacker could potentially use this vulnerability to execute programs as...

7.8CVSS7.5AI score0.00356EPSS
SaveExploits0References2
Ubuntu
Ubuntu
•added 2020/10/21 7:28 p.m.•80 views

USN-4552-2: Pam-python vulnerability

Malte Kraus discovered that Pam-python mishandled certain environment variables. A local attacker could potentially use this vulnerability to execute programs as root...

7.8CVSS7.2AI score0.00356EPSS
SaveExploits0
osv_usn
osv_usn
•added 2020/10/21 7:28 p.m.•25 views

USN-4552-2 pam-python vulnerability

Malte Kraus discovered that Pam-python mishandled certain environment variables. A local attacker could potentially use this vulnerability to execute programs as root...

7.8CVSS7.1AI score0.00356EPSS
SaveExploits0References2
NVD
NVD
•added 2020/10/16 5:15 p.m.•31 views

CVE-2020-9934

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6. A local user may be able to view sensitive user information...

5.5CVSS0.03208EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2020/10/16 5:15 p.m.•12 views

CVE-2020-9934

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6. A local user may be able to view sensitive user information...

5.5CVSS7AI score0.03208EPSS
SaveExploits1References3
Rows per page
Query Builder