Lucene search
+L

4517 matches found

osv_ubuntu
osv_ubuntu
•added 2025/01/11 1:15 p.m.•20 views

UBUNTU-CVE-2024-56372

In the Linux kernel, the following vulnerability has been resolved: net: tun: fix tunnapiallocfrags syzbot reported the following crash 1 Issue came with the blamed commit. Instead of going through all the iov components, we keep using the first one and end up with a malformed skb. 1 kernel BUG a...

5.5CVSS6.2AI score0.00247EPSS
SaveExploits0References22
GithubExploit
GithubExploit
•added 2025/01/10 4:16 p.m.•113 views

Exploit for Cross-site Scripting in Microweber

CVE-2024-33299 Stored Cross Site Scripting vulnerability in Mi...

4.7CVSS6.2AI score0.01156EPSS
SaveExploits2
Cvelist
Cvelist
•added 2025/01/10 12:00 a.m.•44 views

CVE-2024-33299

Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint /admin/module/view?type=users...

0.01156EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2025/01/10 12:00 a.m.•25 views

MonicaHQ security vulnerabilities

MonicaHQ is a relationship management system from MonicaHQ, Inc. A security vulnerability exists in MonicaHQ version v4.1.2 that stems from the firstname and lastname parameters in the Add New Relationship feature containing multiple client-side injections...

6.5CVSS5.8AI score0.00315EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/10 12:00 a.m.•8 views

CVE-2024-33299: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint /admin/module/view?type=users...

4.7CVSS6.9AI score0.01156EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2025/01/10 12:00 a.m.•29 views

PT-2025-3085

Name of the Vulnerable Software and Affected Versions MonicaHQ version 4.1.2 Description The issue is related to multiple Client-Side Injection vulnerabilities found in MonicaHQ. These vulnerabilities occur via the first name and last name parameters in the Add a new relationship feature...

6.5CVSS5.9AI score0.00315EPSS
SaveExploits2References9
Mend
Mend
•added 2025/01/10 12:00 a.m.•13 views

CVE-2024-33299

Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint /admin/module/view?type=users...

5.1CVSS6.9AI score0.01156EPSS
SaveExploits2References4
BDU FSTEC
BDU FSTEC
•added 2025/01/04 12:00 a.m.•22 views

Job Recruitment System fln_update() Code Execution

The vulnerability of the flnupdate function in the alledits.php /parse/alledits.php personnel recruitment system is related to the failure to take measures to neutralize special elements when processing the parameters fname and lname. Exploiting this vulnerability can allow an intruder to gain...

7.5CVSS8.1AI score0.00643EPSS
SaveExploits1References6Affected Software1
Circl
Circl
•added 2025/01/01 12:18 a.m.•15 views

CVE-2024-23415

creationtimestamp| type| source ---|---|--- 2025-01-01 00:18:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lenbxjo4k32i...

7AI score
SaveExploits0References1
Circl
Circl
•added 2025/01/01 12:18 a.m.•16 views

CVE-2024-23412

creationtimestamp| type| source ---|---|--- 2025-01-01 00:18:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lenbxcugva25...

7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•13 views

PT-2025-36288

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the tracing code called by the SCLP interrupt handler. Early exits occur if the SCCB address associated with an interrupt is NULL, after physical to...

7.3CVSS6.5AI score0.00165EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2025/01/01 12:00 a.m.•12 views

October 6, 2020, update for Visio 2016 (KB4484333)

October 6, 2020, update for Visio 2016 KB4484333 Applies To Visio Standard 2016 Visio Professional 2016 This article describes update 4484333 for Microsoft Visio 2016 that was released on October 6, 2020. Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer...

6AI score
SaveExploits0
Circl
Circl
•added 2024/12/31 3:17 p.m.•18 views

GHSA-RJ9M-QF65-F5GG

creationtimestamp| type| source ---|---|--- 2024-12-31 15:17:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113748100084170494...

7.2AI score
SaveExploits0References1
Circl
Circl
•added 2024/12/31 10:41 a.m.•22 views

CVE-2024-56235

creationtimestamp| type| source ---|---|--- 2024-12-31 10:41:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113747013095469324 2024-12-31 12:52:11+00:00| seen| https://t.me/cvedetector/13988...

6.5CVSS8.6AI score0.00241EPSS
SaveExploits0References2
Circl
Circl
•added 2024/12/31 10:05 a.m.•36 views

CVE-2024-56213

creationtimestamp| type| source ---|---|--- 2024-12-31 10:05:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113746873154772102 2024-12-31 12:02:03+00:00| seen| https://t.me/cvedetector/13983...

8.8CVSS8.6AI score0.00574EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2024/12/29 3:48 a.m.•13 views

SUSE CVE-2024-56687

In the Linux kernel, the following vulnerability has been resolved: usb: musb: Fix hardware lockup on first Rx endpoint request There is a possibility that a request's callback could be invoked from usbepqueue call trace below, supplemented with missing calls: req-complete from...

4.7CVSS6.1AI score0.00163EPSS
SaveExploits0References13
osv_ubuntu
osv_ubuntu
•added 2024/12/28 10:15 a.m.•27 views

UBUNTU-CVE-2024-56687

In the Linux kernel, the following vulnerability has been resolved: usb: musb: Fix hardware lockup on first Rx endpoint request There is a possibility that a request's callback could be invoked from usbepqueue call trace below, supplemented with missing calls: req-complete from...

5.5CVSS6.3AI score0.00163EPSS
SaveExploits0References20
Cvelist
Cvelist
•added 2024/12/28 9:46 a.m.•35 views

CVE-2024-56687 usb: musb: Fix hardware lockup on first Rx endpoint request

In the Linux kernel, the following vulnerability has been resolved: usb: musb: Fix hardware lockup on first Rx endpoint request There is a possibility that a request's callback could be invoked from usbepqueue call trace below, supplemented with missing calls: req-complete from...

0.00163EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2024/12/28 9:46 a.m.•22 views

CVE-2024-56687 usb: musb: Fix hardware lockup on first Rx endpoint request

In the Linux kernel, the following vulnerability has been resolved: usb: musb: Fix hardware lockup on first Rx endpoint request There is a possibility that a request's callback could be invoked from usbepqueue call trace below, supplemented with missing calls: req-complete from...

5.5CVSS6AI score
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2024/12/28 9:46 a.m.•6 views

CVE-2024-56687 usb: musb: Fix hardware lockup on first Rx endpoint request

In the Linux kernel, the following vulnerability has been resolved: usb: musb: Fix hardware lockup on first Rx endpoint request There is a possibility that a request's callback could be invoked from usbepqueue call trace below, supplemented with missing calls: req-complete from...

6.1AI score0.00163EPSS
SaveExploits0References5
Rows per page
Query Builder