Lucene search
K

76 matches found

Vulnrichment
Vulnrichment
added 2022/05/04 5:5 p.m.17 views

CVE-2022-20764 Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities

Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service DoS condition, view sensitive data on an affected device, or redirect users to an attacker-controlled destinatio...

6.5CVSS7.1AI score0.00942EPSS
Exploits0References1
CVE
CVE
added 2022/05/04 5:5 p.m.95 views

CVE-2022-20764

Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software are affected by multiple vulnerabilities in the web engine that can allow a remote attacker to cause a denial of service, disclose sensitive data, or redirect users to attacker-controlled destinations. The Cisco advisory Cis...

8.1CVSS7.4AI score0.00942EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2022/05/04 5:5 p.m.22 views

CVE-2022-20764 Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities

Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service DoS condition, view sensitive data on an affected device, or redirect users to an attacker-controlled destinatio...

6.5CVSS8.2AI score0.00942EPSS
Exploits0References1
Cisco
Cisco
added 2022/05/04 4:0 p.m.33 views

Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities

Multiple vulnerabilities in the web engine of Cisco Telepresence CE Software and RoomOS Software could allow a remote attacker to cause a denial of service DoS condition, redirect users to an attacker controlled destination or view sensitive data on an affected device. For more information about...

6.5CVSS6.2AI score
Exploits0References1
vulnersOsv
vulnersOsv
added 2022/05/01 6:24 p.m.3 views

berkano:bean-displaytag (>=20050615.234814 <=20050616.015551), berkano:berkano-util (>=20050725.114415 <=dev-20050723) +28 more potentially affected by CVE-2007-4556 via opensymphony:xwork (>=1.0.3 <=1.2.2)

opensymphony:xwork MAVEN version =1.0.3, =20050615.234814, =20050725.114415, =2.1.5, =1.1.3, =1.0-alpha-1, =1.1-beta-1, =1.1-beta-1, =1.0-beta-2, =1.0-beta-3 - org.codehaus.jet:jet-web-engine =1.0-beta-2 and more Source cves: CVE-2007-4556 Source advisory: OSV:GHSA-H7MF-QRM9-2848...

6.8CVSS5.4AI score0.25749EPSS
Exploits0
OpenVAS
OpenVAS
added 2022/04/20 12:0 a.m.38 views

Debian: Security Advisory (DSA-5115-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.9AI score0.03518EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/04/04 12:0 a.m.2 views

Twisted 环境问题漏洞

Twisted is an event-driven open source web engine written in the Python language. Twisted suffers from an environmental issue vulnerability that stems from the fact that prior to version 22.4.0rc1, the Twisted Web HTTP 1.1 server was located in the Twisted. Web HTTP module, which parses several...

8.1CVSS7.6AI score0.028EPSS
Exploits0References22
Veracode
Veracode
added 2021/07/29 5:6 a.m.2 views

Remote Code Execution (RCE)

webkit2gtk is vulnerable to remote code execution. The vulnerability exists due to an integer overflow...

8.8CVSS7.7AI score0.03469EPSS
Exploits0References6Affected Software17
Tenable Nessus
Tenable Nessus
added 2021/06/01 12:0 a.m.53 views

Debian DSA-4923-1 : webkit2gtk - security update

The following vulnerabilities have been discovered in the webkit2gtk web engine : - CVE-2021-1788 Francisco Alonso discovered that processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2021-1844 Clement Lecigne and Alison Huffman discovered that processing...

9.8CVSS7.8AI score0.0712EPSS
Exploits0References9
ThreatPost
ThreatPost
added 2021/03/03 9:17 p.m.103 views

Google Patches Actively Exploited Flaw in Chrome Browser

Google has fixed a high-severity vulnerability in its Chrome browser and is warning Chrome users that an exploit exists in the wild for the flaw. The vulnerability is one of 47 security fixes that the tech giant rolled out on Tuesday in Chrome 89.0.4389.72, including patches for eight high-severi...

6.8CVSS8.5AI score0.26525EPSS
Exploits5References6
Tenable Nessus
Tenable Nessus
added 2021/02/19 12:0 a.m.30 views

Debian DSA-4854-1 : webkit2gtk - security update

The following vulnerabilities have been discovered in the webkit2gtk web engine : - CVE-2020-13558 Marcin Noga discovered that processing maliciously crafted web content may lead to arbitrary code execution. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

8.8CVSS8AI score0.01792EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2020/11/25 12:0 a.m.72 views

Debian DSA-4797-1 : webkit2gtk - security update

The following vulnerabilities have been discovered in the webkit2gtk web engine : - CVE-2020-9948 Brendan Draper discovered that processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2020-9951 Marcin Noga discovered that processing maliciously crafted web content...

8.8CVSS7.3AI score0.04446EPSS
Exploits1References11
OSV
OSV
added 2020/04/29 2:14 p.m.0 views

USN-4347-1 webkit2gtk vulnerability

A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

9.3CVSS7AI score0.0405EPSS
Exploits0References2
Debian
Debian
added 2020/04/16 9:0 p.m.84 views

[SECURITY] [DSA 4658-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4658-1 [email protected] https://www.debian.org/security/ Alberto Garcia April 16, 2020 https://www.debian.org/security/faq -...

8.8CVSS9AI score0.02827EPSS
Exploits0
CNVD
CNVD
added 2020/03/20 12:0 a.m.1 views

Google Chrome V8 Improperly Implemented Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A V8 mal-implementation vulnerability exists in versions prior to Google Chrome 80.0.3987.149. A remote attacker can exploit this vulnerability to cause heap damage...

6.5CVSS8.4AI score0.02861EPSS
Exploits1References1
CNVD
CNVD
added 2020/03/17 12:0 a.m.1 views

Twisted Input Validation Error Vulnerability

Twisted is an event-driven open source web engine written in the Python language. An input validation error vulnerability exists in Twisted version 19.10.0 and earlier. The vulnerability stems from a network system or product that does not properly validate incoming data. No details of the...

9.8CVSS9.5AI score0.04083EPSS
Exploits1References1
CNVD
CNVD
added 2020/03/17 12:0 a.m.1 views

Twisted Input Validation Error Vulnerability (CNVD-2020-21499)

Twisted is an event-driven open source web engine written in the Python language. An input validation error vulnerability exists in Twisted version 19.10.0 and prior versions. The vulnerability stems from a network system or product that does not properly validate incoming data. No detailed...

9.8CVSS9.5AI score0.03298EPSS
Exploits1References1
RedHat Linux
RedHat Linux
added 2019/12/17 1:2 p.m.3 views

webkitgtk: Multiple memory corruption issues leading to arbitrary code execution

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to arbitrary code execution...

8.8CVSS6.9AI score0.06983EPSS
Exploits2References5
OpenVAS
OpenVAS
added 2019/11/14 12:0 a.m.43 views

Debian: Security Advisory (DSA-4563-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS8.5AI score0.02563EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2019/11/06 12:0 a.m.52 views

Debian: Security Advisory (DSA-4558-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.8AI score0.10591EPSS
Exploits2References6
Rows per page
Query Builder