Lucene search
+L

17058 matches found

CNVD
CNVD
added 2022/06/24 12:00 a.m.60 views

Samsung Members dynamic receiver code issue vulnerability

Samsung Members is a community platform app from Samsung, a South Korean company. a code issue vulnerability exists in versions prior to Samsung Members 4.2.005. The vulnerability stems from the fact that dynamic receivers in Samsung Members are not properly protected and can be exploited by...

2.1CVSS4.5AI score0.00217EPSS
SaveExploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/06/23 5:15 p.m.5 views

CVE-2022-34186

Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape the name and description of Moded Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS6.2AI score0.00775EPSS
SaveExploits0References2
NVD
NVD
added 2022/06/23 5:15 p.m.29 views

CVE-2022-34186

Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape the name and description of Moded Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS0.00775EPSS
SaveExploits0References1
OSV
OSV
added 2022/06/23 5:15 p.m.29 views

CVE-2022-34186

Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape the name and description of Moded Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS5.3AI score
SaveExploits0References1
Prion
Prion
added 2022/06/23 5:15 p.m.31 views

Cross site scripting

Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape the name and description of Moded Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

3.5CVSS5.2AI score0.00775EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:00 a.m.12 views

The vulnerability of the Dynamic Voltage and Frequency Scaling (DVFS) technology implemented in Intel microprocessor software allows attackers to launch attacks through external channels and disclose sensitive information.

The vulnerability of the Dynamic Voltage and Frequency Scaling DVFS technology implemented in Intel microprocessor software is related to errors during the dynamic frequency adjustment process. Exploiting this vulnerability can allow a remote attacker to launch an attack through external channels...

6.3CVSS6.8AI score0.11687EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:00 a.m.12 views

The vulnerability of the Adobe InCopy text creation and editing software lies in buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS8AI score0.06227EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:00 a.m.14 views

The vulnerability of the Dynamic Voltage and Frequency Scaling (DVFS) technology implemented in AMD’s microprogramming system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Dynamic Voltage and Frequency Scaling DVFS technology implemented in AMD’s microprogramming system lies in improper protection of physical peripheral channels. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protecte...

6.3CVSS6.8AI score0.01105EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:00 a.m.11 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.06227EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:00 a.m.15 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.6AI score0.06227EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:00 a.m.10 views

The vulnerability of the Adobe InCopy text creation and editing software lies in buffer overflows in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS8AI score0.06227EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2022/06/22 2:41 p.m.42 views

CVE-2022-34186

Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape the name and description of Moded Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

6.8AI score0.00775EPSS
SaveExploits0References1
CVE
CVE
added 2022/06/22 2:41 p.m.100 views

CVE-2022-34186

The CVE-2022-34186 entry concerns the Jenkins Dynamic Extended Choice Parameter Plugin (version 1.0.1 and earlier), where the plugin does not escape the name and description of Moded Extended Choice parameters on parameter views. This creates a stored XSS vulnerability exploitable by attackers wi...

5.4CVSS5.2AI score0.00775EPSS
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2022/06/22 7:17 a.m.10 views

dynamic-chiropractic.com Cross Site Scripting vulnerability OBB-2663843

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
CNNVD
CNNVD
added 2022/06/22 12:00 a.m.15 views

Jenkins Plugin Dynamic Extended Choice Parameter 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. Jenkins Dynamic Extended Choice Parameter Plugin version 1.0.1 and prior...

5.4CVSS5.6AI score0.00775EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/06/22 12:00 a.m.7 views

PT-2022-22054 · Jenkins · Jenkins Dynamic Extended Choice Parameter Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Dynamic Extended Choice Parameter Plugin versions 1.0.1 and earlier Description: The issue is a stored cross-site scripting XSS vulnerability that occurs because the plugin does not escape the name and description of Moded Extended...

8CVSS5.7AI score0.00775EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2022/06/22 12:00 a.m.17 views

The vulnerability of the Microsoft PowerPoint presentation preparation program arises from overflowing buffers in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft PowerPoint presentation preparation program arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document...

9.3CVSS6.2AI score0.62598EPSS
SaveExploits1References3
OSV
OSV
added 2022/06/20 9:10 p.m.8 views

MAL-2022-2131 Malicious code in commonweb-dynamic-routing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71b93dd72fab608c353b277edc3606970d23565abb0aa6f79b894e88f1da1d1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:26 p.m.7 views

MAL-2022-2637 Malicious code in dynamic-virtualized-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00ad5dca37ce4e1a6a3af411200d84a6cb4666b6b8a7541346fe19de8b16c4fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:26 p.m.5 views

Malicious code in dynamic-virtualized-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00ad5dca37ce4e1a6a3af411200d84a6cb4666b6b8a7541346fe19de8b16c4fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Rows per page
Query Builder