Lucene search
+L

4274 matches found

Tenable Nessus
Tenable Nessus
added 2022/03/03 12:00 a.m.99 views

Ubuntu 18.04 LTS / 20.04 LTS : PHP vulnerabilities (USN-5300-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5300-2 advisory. USN-5300-1 fixed vulnerabilities in PHP. This update provides the corresponding updates for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Tenable ha...

9.8CVSS7AI score0.25951EPSS
SaveExploits5References6
RedhatCVE
RedhatCVE
added 2022/03/02 2:50 p.m.40 views

CVE-2022-0691

An authorization bypass flaw was found in url-parse. This flaw allows a local unauthenticated attacker to add a backspace character \b while submitting a URL. This vulnerability can enable bypassing any hostname checks...

9.8CVSS2.7AI score0.0222EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2022/02/26 12:00 a.m.34 views

SUSE: Security Advisory (SUSE-SU-2022:0577-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.7AI score0.25951EPSS
SaveExploits3References2
RedhatCVE
RedhatCVE
added 2022/02/24 6:57 a.m.67 views

CVE-2022-0685

A flaw was found in vim. The vulnerability occurs due to a crash when using a special multi-byte character and leads to an out-of-range vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with -s...

8.4CVSS4.9AI score0.01708EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2022/02/23 12:00 a.m.69 views

Ubuntu 16.04 ESM : PHP vulnerabilities (USN-5300-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5300-1 advisory. It was discovered that PHP incorrectly handled certain scripts. An attacker could possibly use this issue to cause a denial of service. CVE-2015-9253,...

9.8CVSS7.2AI score0.25951EPSS
SaveExploits6References7
Veracode
Veracode
added 2022/02/17 9:52 a.m.44 views

Privilege Escalation

libexpat.so is vulnerable to privilege escalation. The vulnerability exists in the namespace-separator Character Handler in the xmlparse.c allowing an unauthorized user to access the system account...

9.8CVSS8.8AI score0.35867EPSS
SaveExploits0References14Affected Software23
Debian CVE
Debian CVE
added 2022/02/16 12:40 a.m.78 views

CVE-2022-25235

xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context...

9.8CVSS8.7AI score0.04955EPSS
SaveExploits0
OSV
OSV
added 2022/02/16 12:40 a.m.39 views

CVE-2022-25235

xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context...

9.8CVSS2.5AI score
SaveExploits0References12
OSV
OSV
added 2022/02/11 6:15 p.m.11 views

CVE-2021-31932

Nokia BTS TRS web console FTMW20FP22019.08.160010 allows Authentication Bypass. A malicious unauthenticated user can get access to all the functionalities exposed via the web panel, circumventing the authentication process, by using URL encoding for the . dot character...

9.8CVSS5.8AI score0.21639EPSS
SaveExploits3References1
CNNVD
CNNVD
added 2022/02/11 12:00 a.m.15 views

Nokia BTS TRS web console 安全漏洞

Nokia BTS TRS web console is Nokia Transfer Module Authentication from Nokia Finland. A security vulnerability exists in the Nokia BTS TRS web console, which originates in the Nokia BTS TRS web console FTMW20FP22019.08.160010 version, that allows an unauthenticated, malicious user to bypass the...

9.8CVSS8.4AI score0.21639EPSS
SaveExploits3References3
Tenable Nessus
Tenable Nessus
added 2022/02/09 12:00 a.m.40 views

AlmaLinux 8 : gcc-toolset-11-binutils (ALSA-2021:4594)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4594 advisory. - An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control...

8.3CVSS7.7AI score0.12881EPSS
SaveExploits4References2
CNNVD
CNNVD
added 2022/02/07 12:00 a.m.12 views

Synology DiskStation Manager SQL注入漏洞

Synology DiskStation Manager DSM is an operating system used on network storage servers NAS by Synology Inc. of Taiwan, China. A SQL injection vulnerability exists in Synology DiskStation Manager, which stems from the failure of the product's Log Management function to handle special characters i...

9.8CVSS8.6AI score0.00875EPSS
SaveExploits0References2
Snyk
Snyk
added 2022/01/31 12:48 p.m.11 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in Admin section. It have the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie. Details Cross-site scripting or XSS is a code vulnerability that...

6.5CVSS5.3AI score
SaveExploits0References2
wpexploit
wpexploit
added 2022/01/31 12:00 a.m.704 views

Better Notifications for WP < 1.8.7 - Email Address Disclosure

The plugin does not have authorisation and CSRF check in its bnfwsearchusers AJAX action, allowing any authenticated users to call it and query for user e-mail prefixes finding the first letter, then the second one, then the third one etc.. import sys import string import urllib.parse import...

4.3CVSS0.6AI score0.00429EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.33 views

Mageia: Security Advisory (MGASA-2020-0451)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.12706EPSS
SaveExploits3References10
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.27 views

Mageia: Security Advisory (MGASA-2019-0211)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.8AI score0.20271EPSS
SaveExploits2References5
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.12 views

Mageia: Security Advisory (MGASA-2020-0175)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.9AI score0.10047EPSS
SaveExploits2References4
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.28 views

Mageia: Security Advisory (MGASA-2019-0156)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.8AI score0.58204EPSS
SaveExploits9References4
VulnCheck KEV
VulnCheck KEV
added 2022/01/26 12:00 a.m.14 views

VulnCheck KEV: CVE-2017-14723

Before version 4.8.2, WordPress mishandled % characters and additional placeholder values in $wpdb-prepare, and thus did not properly address the possibility of plugins and themes enabling SQL injection attacks...

9.8CVSS7.4AI score0.05951EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2022/01/13 6:50 a.m.50 views

CVE-2019-11721

The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar. This allows for domain spoofing attacks as do not display as punycode text, allowing for user confusion. This vulnerability affects Firefox 68...

6.5CVSS3.1AI score0.01393EPSS
SaveExploits1References4
Rows per page
Query Builder