Lucene search
K

6 matches found

Vulnrichment
Vulnrichment
added 2024/11/22 8:24 p.m.11 views

CVE-2024-9710 PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability

PostHog databaseschema Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PostHog. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7.1CVSS6.4AI score0.01203EPSS
Exploits0References2
Veracode
Veracode
added 2024/01/21 10:28 a.m.28 views

Type Confusion

Google Chrome is vulnerable to Type confusion The vulnerability is due to the access of resource using incompatible type which allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS6.5AI score0.00139EPSS
Exploits0References5Affected Software3
Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:0 a.m.26 views

Ivanti Avalanche validateAMCWSConnection Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the validateAMCWSConnection method. The issue results from the lack of proper...

7.5CVSS6.2AI score0.31725EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/04/11 12:0 a.m.37 views

Microsoft SharePoint WSSXmlUrlResolver Server-Side Request Forgery Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The specific flaw exists within the WSSXmlUrlResolver class. The issue results from the lack of proper validati...

7.1CVSS6.2AI score0.09091EPSS
Exploits3References1
Zero Day Initiative
Zero Day Initiative
added 2022/10/17 12:0 a.m.50 views

Microsoft Exchange Autodiscover Server-Side Request Forgery Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the Autodiscover service. The issue results from the lack of proper validation of a URI prio...

6.3CVSS2.4AI score0.94147EPSS
Exploits9References1
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.16 views

Ubuntu: Security Advisory (USN-2413-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.4CVSS6.8AI score0.0035EPSS
Exploits0References2
Rows per page
Query Builder