Lucene search
+L

34 matches found

CVE
CVE
added 2023/01/12 12:00 a.m.120 views

CVE-2022-3573

CVE-2022-3573 affects GitLab CE/EE, with versions 15.4 up to before 15.5.7; 15.6 before 15.6.4; and 15.7 before 15.7.2. The issue stems from improper filtering of query parameters on the wiki changes page, allowing an attacker to execute arbitrary JavaScript on self-hosted instances that do not e...

5.4CVSS5.4AI score0.00585EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/11/01 8:15 p.m.4 views

CVE-2022-32899

The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS Ventura 13, watchOS 9. An app may be able to execute arbitrary code with kernel privileges...

7.8CVSS6AI score0.00426EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2022/10/24 12:00 a.m.1 views

PT-2022-26586 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.7 iPadOS versions prior to 15.7 macOS versions prior to Ventura 13 Description: The issue allows an app to potentially gain elevated privileges. This was addressed by removing the vulnerable code. Recommendations: For...

7.8CVSS7.6AI score0.003EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2022/09/13 12:00 a.m.183 views

Apple iOS < 15.7 Multiple Vulnerabilities (HT213445)

Binary data appleios157check.nbin...

8.8CVSS6AI score0.05603EPSS
SaveExploits2References21
NVD
NVD
added 2020/11/30 7:15 p.m.28 views

CVE-2020-6317

In certain situations, an attacker with regular user credentials and local access to an ASE cockpit installation can access sensitive information which appears in the installation log files. This information although sensitive is of limited utility and cannot be used to further access, modify or...

3.5CVSS3.6AI score0.00356EPSS
SaveExploits0References2
Prion
Prion
added 2020/11/30 7:15 p.m.28 views

Design/Logic Flaw

In certain situations, an attacker with regular user credentials and local access to an ASE cockpit installation can access sensitive information which appears in the installation log files. This information although sensitive is of limited utility and cannot be used to further access, modify or...

2.7CVSS3.9AI score0.00356EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2020/11/30 7:15 p.m.4 views

CVE-2020-6317

In certain situations, an attacker with regular user credentials and local access to an ASE cockpit installation can access sensitive information which appears in the installation log files. This information although sensitive is of limited utility and cannot be used to further access, modify or...

3.5CVSS4.5AI score0.00356EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2017/10/23 8:29 a.m.10 views

CVE-2017-14328

Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to trigger a buffer overflow leading to a reboot...

7.5CVSS6.1AI score0.01326EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2016/11/29 12:00 a.m.291 views

Extreme ExtremeXOS OpenSSH Vulnerabilities (VN-2016-001)

Extreme ExtremeXOS is prone to multiple OpenSSH vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.1CVSS7.1AI score0.63194EPSS
SaveExploits3References1
Packet Storm
Packet Storm
added 2015/11/25 12:00 a.m.43 views

SAP Sybase Adapter Server Enterprise XXE Injection

SAP Sybase Adaptive Server Enterprise is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks. SAP Sybase Adaptive Server Enterprise 15.7 ESD 2 is vulnerable; other versions may also be...

4CVSS0.08201EPSS
SaveExploits3
exploitpack
exploitpack
added 2015/11/25 12:00 a.m.19 views

SAP Sybase Adaptive Server Enterprise - XML External Entity Information Disclosure

SAP Sybase Adaptive Server Enterprise - XML External Entity Information Disclosure source: https://www.securityfocus.com/bid/63193/info SAP Sybase Adaptive Server Enterprise is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive...

0.1AI score
SaveExploits0
zdt
zdt
added 2015/11/25 12:00 a.m.56 views

SAP Sybase Adaptive Server Enterprise XML External Entity Information Disclosure Vulnerability

SAP Sybase Adaptive Server Enterprise suffers from an XXE injection vulnerability. source: http://www.securityfocus.com/bid/63193/info SAP Sybase Adaptive Server Enterprise is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive...

4CVSS6.9AI score0.08201EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2013/11/20 12:00 a.m.34 views

SAP Sybase Adaptive Server Enterprise Information Disclosure (SAP Note 1887341)

Information in protected files on machines running SAP Sybase ASE may be disclosed to an attacker. This information may be used by the attacker to further target specialized attacks on the system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70973;...

4CVSS5.4AI score0.08201EPSS
SaveExploits3References3
CERT
CERT
added 2013/10/17 12:00 a.m.43 views

SAP Sybase Adaptive Server Enterprise vulnerable to XML injection

Overview SAP Sybase Adaptive Server Enterprise Version 15.7 ESD 2 and possibly earlier versions contains an XML injection vulnerability CWE-91. Description CWE-611:Improper Restriction of XML External Entity Reference 'XXE' SAP Sybase Adaptive Server Enterprise ASE Version 15.7 ESD 2 contains an...

4CVSS6.8AI score0.08201EPSS
SaveExploits3References2
Rows per page
Query Builder