Lucene search
+L

8729 matches found

Prion
Prion
•added 2023/01/16 7:15 p.m.•31 views

Improper access control

A vulnerability was found in Little Apps Little Software Stats. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file inc/class.securelogin.php of the component Password Reset Handler. The manipulation leads to improper access controls. The...

7.5CVSS7.1AI score0.00672EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2023/01/16 6:58 p.m.•21 views

CVE-2015-10057 Little Apps Little Software Stats Password Reset class.securelogin.php access control

A vulnerability was found in Little Apps Little Software Stats. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file inc/class.securelogin.php of the component Password Reset Handler. The manipulation leads to improper access controls. The...

4.6CVSS7AI score0.00672EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2023/01/16 6:58 p.m.•36 views

CVE-2015-10057 Little Apps Little Software Stats Password Reset class.securelogin.php access control

A vulnerability was found in Little Apps Little Software Stats. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file inc/class.securelogin.php of the component Password Reset Handler. The manipulation leads to improper access controls. The...

4.6CVSS9.6AI score0.00672EPSS
SaveExploits0References4
CVE
CVE
•added 2023/01/16 6:58 p.m.•75 views

CVE-2015-10057

A vulnerability (CVE-2015-10057) affects Little Apps Little Software Stats, specifically the Password Reset Handler component inc/class.securelogin.php. The issue is an improper access control in that file, leading to potential unauthorized access. The documented exploitability is described as di...

9.8CVSS6AI score0.00672EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2023/01/16 6:58 p.m.•8 views

CVE-2015-10057

A vulnerability was found in Little Apps Little Software Stats. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file inc/class.securelogin.php of the component Password Reset Handler. The manipulation leads to improper access controls. The...

9.8CVSS0.00672EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/16 12:00 a.m.•7 views

CVE-2015-10057: Improper Access Control

A vulnerability was found in Little Apps Little Software Stats. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file inc/class.securelogin.php of the component Password Reset Handler. The manipulation leads to improper access controls. The...

9.8CVSS4.9AI score0.00672EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/01/16 12:00 a.m.•19 views

PT-2023-10236 · Little Apps · Little Apps Little Software Stats

Name of the Vulnerable Software and Affected Versions: Little Apps Little Software Stats versions prior to 0.2 Description: A critical issue was found in the Password Reset Handler component, specifically in the file inc/class.securelogin.php, leading to improper access controls. The complexity o...

9.8CVSS5AI score0.00672EPSS
SaveExploits0References7
Citrix
Citrix
•added 2023/01/13 12:00 a.m.•17 views

Microsoft Security Update Validation Report January 2023

Microsoft’s January 2023 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwar...

7AI score
SaveExploits0
Fedora
Fedora
•added 2023/01/11 1:22 a.m.•56 views

[SECURITY] Fedora 37 Update: moby-engine-20.10.22-1.fc37

Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between - and they don'...

7.5CVSS6.5AI score0.08746EPSS
SaveExploits0
osv_cve
osv_cve
•added 2023/01/10 8:15 p.m.•31 views

CVE-2023-0137

Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS6.2AI score0.00517EPSS
SaveExploits0References4
NVD
NVD
•added 2023/01/10 8:15 p.m.•36 views

CVE-2023-0137

Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS8.9AI score0.00517EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2023/01/10 8:15 p.m.•17 views

UBUNTU-CVE-2023-0137

Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.5AI score0.00517EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2023/01/10 8:15 p.m.•48 views

CVE-2023-0137

Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.4AI score0.00517EPSS
SaveExploits0References3
Prion
Prion
•added 2023/01/10 8:15 p.m.•37 views

Heap overflow

Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

6.8CVSS8.7AI score0.00517EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2023/01/10 12:00 a.m.•47 views

CVE-2023-0137

Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

9AI score0.00517EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/01/10 12:00 a.m.•5 views

PT-2023-3330

Name of the Vulnerable Software and Affected Versions Google Chrome on Chrome OS versions prior to 109.0.5414.74 Description The issue is related to a heap buffer overflow in Platform Apps, which could be exploited by an attacker who convinces a user to install a malicious extension. This could...

10CVSS0.00517EPSS
SaveExploits0
Mend
Mend
•added 2023/01/10 12:00 a.m.•9 views

CVE-2023-0137

Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS0.00517EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2023/01/10 12:00 a.m.•15 views

PT-2023-1066 · Microsoft · Office Visio +2

Name of the Vulnerable Software and Affected Versions: Microsoft Visio affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to insufficient protection of sensitive data ...

8.5CVSS9.1AI score0.01842EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/01/10 12:00 a.m.•19 views

PT-2023-1067 · Microsoft · Office Visio

Name of the Vulnerable Software and Affected Versions: Microsoft Office Visio affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Office Visio, which can be exploited by remote attackers to execute arbitrary code. This affects not just...

7.8CVSS9.6AI score0.00743EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2023/01/10 12:00 a.m.•17 views

PT-2023-1084 · Microsoft · 365 Apps For Enterprise +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office for Mac and 365 Apps for Enterprise affected versions not specified Description: The issue is related to insufficient input validation, which can allow an attacker to execute arbitrary code. Recommendations: At the moment,...

7.8CVSS9.4AI score0.0094EPSS
SaveExploits0References6
Rows per page
Query Builder