Lucene search
+L

1150 matches found

Patchstack
Patchstack
added 2022/02/28 12:0 a.m.9 views

WordPress Accessibility Checker by Equalize Digital plugin < 1.2.8 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Accessibility Checker by Equalize Digital plugin versions 1.2.8. Solution Update the WordPress Accessibility Checker by Equalize Digital plugin to the latest available version at least 1.2.8...

3.6AI score
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/02/21 12:0 a.m.9 views

编号撤回

libsolv is a library for checking package dependencies. libsolv is vulnerable to a heap overflow vulnerability, which stems from the existence of two memory vulnerabilities in libsolv located in the resolveweak function in src/solver.c. No detailed vulnerability details are currently available...

5.6AI score
SaveExploits0
vulnersOsv
vulnersOsv
added 2022/02/09 11:34 p.m.8 views

aadhaar-detection (=0.5.0), accuinsight (>=1.0.84 <=1.0.87) +38 more potentially affected by unknown CVE via tensorflow (>=2.7.0 <=2.7.0rc1)

tensorflow PYPI version =2.7.0, =1.0.84, =3.0.22, =0.1.11, =0.1.11, =0.1.11, =0.1.0, =0.0.1, =0.1.5.dev202303131412, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WCV5-VRVR-3RX2...

5.8AI score
SaveExploits0
Virtuozzo
Virtuozzo
added 2022/02/07 12:0 a.m.26 views

Virtuozzo Hybrid Infrastructure 5.0 (5.0.0-137)

In this release, Virtuozzo Hybrid Infrastructure provides a wide range of new features that enhance service providers' interoperability and help expand their services. The improvements cover compute services, object storage, security, and monitoring. Additionally, this release delivers stability...

0.9AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2022/02/01 11:37 a.m.33 views

Security Bulletin: Vulnerability in IBM Java Runtime affects IBM Spectrum Protect Snapshot on AIX and Linux (CVE-2020-27221)

Summary Vulnerabilities in IBM® Runtime Environment Java™ were disclosed as part of the IBM Java SDK updates in January 2021. IBM® Runtime Environment Java™ is used by IBM Spectrum Protect Snapshot which may be affected by CVE-2020-27221 on AIX and Linux. UPDATED: 26 May 2021 - Added Fix for 4.1...

9.8CVSS9.8AI score0.01532EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.32 views

Mageia: Security Advisory (MGASA-2020-0309)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.3CVSS7.1AI score0.0435EPSS
SaveExploits0References5
Citrix
Citrix
added 2022/01/14 12:0 a.m.8 views

Citrix Workspace App not updating to 2112 via the update checker

When Citrix Workspace Apps checks for updates, it reports that 2109 is up to date despite CWA 2112.1 is available for download...

7.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/01/10 12:0 a.m.13 views

The vulnerability of Google Chrome’s spelling checker function allows a hacker to circumvent existing restrictions.

The vulnerability of Google Chrome’s spelling checker function is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions by using a specially created HTML page...

8.8CVSS7.6AI score0.00931EPSS
SaveExploits0References13Affected Software8
ATTACKERKB
ATTACKERKB
added 2021/11/22 4:56 p.m.3 views

CVE-2021-23718

The package ssrf-agent before 1.0.5 are vulnerable to Server-side Request Forgery SSRF via the defaultIpChecker function. It fails to properly validate if the IP requested is private...

7.5CVSS7AI score0.01564EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/11/22 12:0 a.m.7 views

Ssrf-Agent 代码问题漏洞

Ssrf-Agent is a Chinese welefen personal developer used to prevent Ssrf in Https requests. Ssrf-agent suffers from a security vulnerability that stems from the vulnerability to server-side request forgery SSRF attacks via the defaultIpChecker function. If the requested IP is private, it cannot be...

7.5CVSS7.3AI score0.01564EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2021/10/12 6:49 p.m.43 views

SilverStripe GraphQL Server permission checker not inherited by query subclass.

Default SilverStripe GraphQL Server aka silverstripe/graphql 3.x through 3.4.1 permission checker not inherited by query subclass...

4.3CVSS3.2AI score0.00786EPSS
SaveExploits1References7Affected Software1
NVD
NVD
added 2021/10/07 3:15 p.m.39 views

CVE-2021-28661

Default SilverStripe GraphQL Server aka silverstripe/graphql 3.x through 3.4.1 permission checker not inherited by query subclass...

4.3CVSS0.00786EPSS
SaveExploits1References2
OSV
OSV
added 2021/10/07 3:15 p.m.30 views

CVE-2021-28661

Default SilverStripe GraphQL Server aka silverstripe/graphql 3.x through 3.4.1 permission checker not inherited by query subclass...

4.3CVSS6.8AI score0.00786EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/10/07 3:15 p.m.5 views

CVE-2021-28661

Default SilverStripe GraphQL Server aka silverstripe/graphql 3.x through 3.4.1 permission checker not inherited by query subclass...

4.3CVSS5.3AI score0.00786EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2021/10/07 2:6 p.m.42 views

CVE-2021-28661

Default SilverStripe GraphQL Server aka silverstripe/graphql 3.x through 3.4.1 permission checker not inherited by query subclass...

4.9AI score0.00786EPSS
SaveExploits1References2
CVE
CVE
added 2021/10/07 2:6 p.m.77 views

CVE-2021-28661

The CVE-2021-28661 entry concerns the SilverStripe GraphQL Server (silverstripe/graphql) versions 3.x through 3.4.1, where the permission checker is not inherited by a query subclass. This is identified as a permission-related issue in the GraphQL server component, with the underlying root cause ...

4.3CVSS4.5AI score0.00786EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2021/10/07 12:0 a.m.10 views

PT-2021-17888 · Silverstripe · Silverstripe Graphql Server

Name of the Vulnerable Software and Affected Versions: SilverStripe GraphQL Server versions 3.x through 3.4.1 Description: The issue concerns a permission checker not being inherited by a query subclass in the SilverStripe GraphQL Server. Recommendations: For versions 3.x through 3.4.1, update to...

4.3CVSS4.2AI score0.00786EPSS
SaveExploits1References12
Kitploit
Kitploit
added 2021/09/21 11:30 a.m.66 views

MailRipV2 - Improved SMTP Checker / SMTP Cracker With Proxy-Support, Inbox Test And Many More Features

Your SMTP checker / SMTP cracker for mailpass combolists including features like: proxy-support SOCKS4 / SOCKS5 with automatic proxy-scraper and checker, e-mail delivery / inbox check and DNS lookup for unknown SMTP-hosts. Made for easy usage and always working! Overview Legal Notices You are ONL...

7.4AI score
SaveExploits0References1
Snyk
Snyk
added 2021/09/13 10:54 a.m.6 views

Server-side Request Forgery (SSRF)

Overview ssrf-agent is a prevent SSRF in https request Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the defaultIpChecker function. It fails to properly validate if the IP requested is private. PoC by Sayooj B Kumar // run a service on your localhost con...

7.5CVSS6.8AI score0.01564EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2021/09/01 12:0 a.m.52 views

openSUSE 15 Security Update : spectre-meltdown-checker (openSUSE-SU-2021:1212-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:1212-1 advisory. - Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker...

5.6CVSS7.4AI score0.92621EPSS
SaveExploits10References4
Rows per page
Query Builder