Lucene search
+L

6600 matches found

CNVD
CNVD
•added 2022/12/20 12:00 a.m.•81 views

Apache Zeppelin input validation error vulnerability

Apache Zeppelin is a Web-based open source notebook application from the Apache Foundation that supports interactive data analysis and collaborative documentation. Apache Zeppelin is vulnerable to an input validation error that results from improper input validation in its Move folder to Trash...

6.5CVSS2.9AI score0.01641EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2022/12/16 5:15 p.m.•28 views

DEBIAN-CVE-2022-4558

A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack...

6.1CVSS4.1AI score0.00612EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2022/12/16 5:15 p.m.•21 views

UBUNTU-CVE-2022-4558

A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack...

6.1CVSS3.8AI score0.00612EPSS
SaveExploits0References4
Prion
Prion
•added 2022/12/16 5:15 p.m.•28 views

Cross site scripting

A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack...

5.8CVSS6AI score0.00612EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2022/12/16 12:00 a.m.•29 views

CVE-2022-4558 Alinto SOGo Folder/Mail NSString+Utilities.m cross site scripting

A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack...

3.5CVSS4.2AI score
SaveExploits0References5
Mend
Mend
•added 2022/12/16 12:00 a.m.•5 views

CVE-2022-4558

A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack...

6.1CVSS0.00612EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2022/12/16 12:00 a.m.•17 views

Apache Zeppelin 输入验证错误漏洞

Apache Zeppelin is a Web-based open source notebook application from the Apache Foundation that supports interactive data analysis and collaborative documentation. Apache Zeppelin is vulnerable to an input validation error that results from improper input validation in its Move folder to Trash...

6.5CVSS6.5AI score0.01641EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/12/16 12:00 a.m.•47 views

CVE-2022-4558 Alinto SOGo Folder/Mail NSString+Utilities.m cross site scripting

A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack...

3.5CVSS6.2AI score0.00612EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/16 12:00 a.m.•5 views

CVE-2022-4558: Improper Neutralization

A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack...

6.1CVSS3.8AI score0.00612EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2022/12/16 12:00 a.m.•72 views

CVE-2022-4558

A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack...

6.1CVSS6AI score0.00612EPSS
SaveExploits0
osv_cve
osv_cve
•added 2022/12/13 4:15 p.m.•16 views

CVE-2022-43722

A vulnerability has been identified in SICAM PAS/PQS All versions V7.0. Affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom malicious DLL in this folder which is then run with SYSTEM rights when a service is started that...

7.8CVSS5.7AI score0.00223EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/12/13 12:00 a.m.•16 views

Siemens Simcenter STAR-CCM+ 安全漏洞

Siemens Simcenter STAR-CCM is a complete multi-physics field solution from Siemens Germany that simulates products and designs working under real-world conditions. a security vulnerability exists in Siemens Simcenter STAR-CCM, which stems from improperly assigning file permissions to installation...

7.8CVSS7AI score0.00211EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/12/13 12:00 a.m.•13 views

Siemens SICAM PAS/PQS 代码问题漏洞

Siemens SICAM PAS/PQS is a software from Siemens with an operating system for energy automation and power quality. A security vulnerability exists in Siemens SICAM PAS/PQS versions prior to V7.0 that stems from a failure to properly protect the containing folder. An attacker can exploit the...

7.8CVSS6.7AI score0.00223EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/12/13 12:00 a.m.•15 views

PT-2022-27016 · Unknown · Sicam Pas/Pqs

Name of the Vulnerable Software and Affected Versions: SICAM PAS/PQS versions prior to V7.0 Description: A vulnerability has been identified where the affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom malicious DLL in this...

7.8CVSS7.4AI score0.00223EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/12/13 12:00 a.m.•13 views

PT-2022-27576 · Alinto +2 · Alinto Sogo +2

Name of the Vulnerable Software and Affected Versions: Alinto SOGo versions up to 5.7.1 Description: A problematic issue has been found, affecting an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. ...

6.1CVSS5.8AI score0.00612EPSS
SaveExploits1References16
NVD
NVD
•added 2022/12/12 2:15 p.m.•39 views

CVE-2022-45968

Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder even a password protected one...

8.8CVSS0.0102EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/12/12 12:00 a.m.•19 views

CVE-2022-45968

Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder even a password protected one...

8.8CVSS8.8AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/12/12 12:00 a.m.•17 views

PT-2022-27703 · Alist · Alist

Name of the Vulnerable Software and Affected Versions: Alist version 3.4.0 Description: The issue allows a user with only file upload permission to upload any file to any folder, including those that are password protected. Recommendations: For Alist version 3.4.0, update to version 3.5.1 to...

8.8CVSS7.4AI score0.0102EPSS
SaveExploits1References10
Cvelist
Cvelist
•added 2022/12/12 12:00 a.m.•43 views

CVE-2022-45968

Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder even a password protected one...

9AI score0.0102EPSS
SaveExploits1References1
NVD
NVD
•added 2022/12/08 4:15 p.m.•46 views

CVE-2022-39912

Improper handling of insufficient permissions vulnerability in setSecureFolderPolicy in PersonaManagerService prior to Android T13 allows local attackers to set some setting value in Secure folder...

6.2CVSS0.00116EPSS
SaveExploits0References1
Rows per page
Query Builder