Lucene search
K

8173 matches found

CNVD
CNVD
added 2022/12/16 12:0 a.m.23 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2023-00612)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS5.5AI score0.0048EPSS
Exploits0References1
CNVD
CNVD
added 2022/12/16 12:0 a.m.20 views

Adobe Experience Manager Cross-Site Scripting Vulnerability

Adobe Experience Manager AEM is a content management solution from Adobe that can be used to build websites, mobile applications and forms. The solution supports mobile content management, marketing and sales campaign management, and multi-site management, etc. A cross-site scripting vulnerabilit...

5.4CVSS2.2AI score0.0048EPSS
Exploits0References1
CNVD
CNVD
added 2022/12/16 12:0 a.m.18 views

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2023-00608)

Adobe Experience Manager AEM is a content management solution from Adobe that can be used to build websites, mobile applications and forms. The solution supports mobile content management, marketing and sales campaign management, and multi-site management, etc. A cross-site scripting vulnerabilit...

5.4CVSS2.2AI score0.00708EPSS
Exploits0References1
CNVD
CNVD
added 2022/12/16 12:0 a.m.105 views

Adobe Experience Manager open redirect vulnerability

Adobe Experience Manager AEM is a content management solution from Adobe that can be used to build websites, mobile applications and forms. The solution supports mobile content management, marketing and sales campaign management, and multi-site management, etc. Adobe Experience Manager has an ope...

5.4CVSS4.1AI score0.00469EPSS
Exploits0References1
CNVD
CNVD
added 2022/12/16 12:0 a.m.19 views

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2023-00605)

Adobe Experience Manager AEM is a content management solution from Adobe that can be used to build websites, mobile applications and forms. The solution supports mobile content management, marketing and sales campaign management, and multi-site management, etc. A cross-site scripting vulnerabilit...

5.4CVSS2.2AI score0.0048EPSS
Exploits0References1
CNVD
CNVD
added 2022/12/16 12:0 a.m.31 views

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2023-00609)

Adobe Experience Manager AEM is a content management solution from Adobe that can be used to build websites, mobile applications and forms. The solution supports mobile content management, marketing and sales campaign management, and multi-site management, etc. A cross-site scripting vulnerabilit...

5.4CVSS2.2AI score0.00708EPSS
Exploits0References1
CNVD
CNVD
added 2022/12/16 12:0 a.m.21 views

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2023-00604)

Adobe Experience Manager AEM is a content management solution from Adobe that can be used to build websites, mobile applications and forms. The solution supports mobile content management, marketing and sales campaign management, and multi-site management, etc. A cross-site scripting vulnerabilit...

5.4CVSS2.2AI score0.0048EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2022/12/12 3:30 p.m.133 views

Protobuf Java vulnerable to Uncontrolled Resource Consumption

A parsing issue similar to CVE-2022-3171, but with Message-Type Extensions in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown...

7.5CVSS7.4AI score0.00512EPSS
Exploits0References3Affected Software2
CNNVD
CNNVD
added 2022/12/12 12:0 a.m.2 views

WordPress plugin Easy Forms for MailChimp 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.1CVSS5.5AI score0.00545EPSS
Exploits0References5
OSV
OSV
added 2022/12/10 7:15 p.m.13 views

CVE-2022-4397

A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...

6.5CVSS6.8AI score
Exploits0References2
Veracode
Veracode
added 2022/12/10 1:6 p.m.29 views

Denial Of Service (DoS)

Google Chrome is vulnerable to denial of service. The vulnerability exists due to the use after free in Forms in the library, allowing an attacker to cause heap corruption via a crafted HTML page, leading to an application crash...

8.8CVSS8.4AI score0.00667EPSS
Exploits0References6Affected Software2
OSV
OSV
added 2022/12/08 4:12 p.m.19 views

GHSA-X39J-H85H-3F46 go-merkledag's ProtoNode may be modified such that common method calls may panic

Impact A ProtoNode may be modified in such a way as to cause various encode errors which will trigger a panic on common method calls that don't allow for error returns. A ProtoNode should only be able to encode to valid DAG-PB, attempting to encode invalid DAG-PB forms will result in an error fro...

7.5CVSS7.5AI score0.01254EPSS
Exploits0References12
Microsoft CVE
Microsoft CVE
added 2022/12/05 8:0 a.m.34 views

Chromium: CVE-2022-4181 Use after free in Forms

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.4AI score0.00667EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2022/12/05 12:0 a.m.52 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2022:10229-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10229-1 advisory. - Type confusion in V8 in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a...

8.8CVSS7.3AI score0.23918EPSS
Exploits1References46
Tenable Nessus
Tenable Nessus
added 2022/12/05 12:0 a.m.58 views

Microsoft Edge (Chromium) < 108.0.1462.41 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 108.0.1462.41. It is, therefore, affected by multiple vulnerabilities as referenced in the December 5, 2022 advisory. - Type confusion in V8 in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to...

8.8CVSS7.4AI score0.23918EPSS
Exploits3References51
hivepro
hivepro
added 2022/12/02 11:27 a.m.33 views

Google addressed an array of bugs with Chrome 108

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Google Chromes latest stable channel update for Windows, Mac, and Linux fixes several vulnerabilities. There are eight high-severity security flaws and 14 medium-severity flaws. The most significa...

8.8AI score0.00881EPSS
Exploits1
CNNVD
CNNVD
added 2022/12/02 12:0 a.m.2 views

Rukovoditel 跨站脚本漏洞

Rukovoditel is a set of Web-based open source project management software from the Rukovoditel team. The software has project management, customer relationship management and other functions. Rukovoditel v3.2.1 version of a security vulnerability , the vulnerability stems from the Add New Form...

5.4CVSS5.8AI score0.0094EPSS
Exploits1References3
OSV
OSV
added 2022/11/30 12:15 a.m.1 views

DEBIAN-CVE-2022-4181

Use after free in Forms in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.5AI score0.00667EPSS
Exploits0References1
NVD
NVD
added 2022/11/30 12:15 a.m.15 views

CVE-2022-4181

Use after free in Forms in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00667EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2022/11/30 12:15 a.m.2 views

CVE-2022-4181

Use after free in Forms in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS5.5AI score0.00667EPSS
Exploits0References5
Rows per page
Query Builder