Lucene search
K

4126 matches found

OSV
OSV
added 2023/08/02 12:15 a.m.0 views

UBUNTU-CVE-2023-1210

An issue has been discovered in GitLab affecting all versions starting from 12.9 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible to leak a user's email via an error message for groups that restrict membership by email...

4.3CVSS5.7AI score0.0051EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/08/02 12:0 a.m.3 views

PT-2023-20633 · Unknown · Cacheservice

Name of the Vulnerable Software and Affected Versions: cacheservice affected versions not specified Description: The cacheservice API could be exploited to indirectly inject parameters with SQL syntax that was not properly sanitized, allowing attackers to execute arbitrary SQL queries when creati...

7.8CVSS7.9AI score0.004EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2023/08/01 11:36 p.m.14 views

CVE-2023-1210

Removed by vendor...

4.3CVSS5.8AI score0.0051EPSS
Exploits0
OSV
OSV
added 2023/08/01 11:15 p.m.23 views

CVE-2023-3730

Use after free in Tab Groups in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.2AI score
Exploits0References4
OSV
OSV
added 2023/08/01 11:15 p.m.7 views

DEBIAN-CVE-2023-3730

Use after free in Tab Groups in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.2AI score0.00709EPSS
Exploits1References1
NVD
NVD
added 2023/08/01 11:15 p.m.22 views

CVE-2023-3730

Use after free in Tab Groups in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9AI score0.00709EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2023/08/01 11:15 p.m.47 views

CVE-2023-3730

Use after free in Tab Groups in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS7.2AI score0.00709EPSS
Exploits1References1
CVE
CVE
added 2023/08/01 10:39 p.m.144 views

CVE-2023-3730

CVE-2023-3730: Use-after-free in Tab Groups of Google Chrome/Chromium prior to 115.0.5790.98. Root cause is a Tab Groups use-after-free in Chrome/Chromium, enabling potential heap corruption when a user interacts with specific UI. Affected products include Google Chrome and Chromium-based browser...

8.8CVSS8.8AI score0.00709EPSS
Exploits1References4Affected Software1
Debian CVE
Debian CVE
added 2023/08/01 10:39 p.m.36 views

CVE-2023-3730

Use after free in Tab Groups in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.4AI score0.00709EPSS
Exploits1
OSV
OSV
added 2023/07/31 3:15 p.m.23 views

CVE-2023-38307

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting XSS vulnerability was discovered in the Users and Groups functionality. The vulnerability occurs when an authenticated user adds a new user and inserts an XSS payload into the user's real name...

5.4CVSS4.9AI score0.00405EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2023/07/31 3:15 p.m.2 views

CVE-2023-38307

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting XSS vulnerability was discovered in the Users and Groups functionality. The vulnerability occurs when an authenticated user adds a new user and inserts an XSS payload into the user's real name...

5.4CVSS6.1AI score0.00405EPSS
Exploits1References3
OSV
OSV
added 2023/07/31 3:15 p.m.20 views

CVE-2023-38304

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting XSS vulnerability was discovered in the Users and Groups functionality, allowing an attacker to store a malicious payload in the Group Name field when creating a new group...

5.4CVSS5.6AI score0.00407EPSS
Exploits1References2
NVD
NVD
added 2023/07/31 3:15 p.m.17 views

CVE-2023-38304

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting XSS vulnerability was discovered in the Users and Groups functionality, allowing an attacker to store a malicious payload in the Group Name field when creating a new group...

5.4CVSS5.2AI score0.00407EPSS
Exploits1References2
NVD
NVD
added 2023/07/31 3:15 p.m.21 views

CVE-2023-38307

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting XSS vulnerability was discovered in the Users and Groups functionality. The vulnerability occurs when an authenticated user adds a new user and inserts an XSS payload into the user's real name...

5.4CVSS5.1AI score0.00405EPSS
Exploits1References2
Prion
Prion
added 2023/07/31 3:15 p.m.24 views

Cross site scripting

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting XSS vulnerability was discovered in the Users and Groups functionality, allowing an attacker to store a malicious payload in the Group Name field when creating a new group...

4.9CVSS5.2AI score0.00407EPSS
Exploits1References2Affected Software1
Prion
Prion
added 2023/07/31 3:15 p.m.17 views

Cross site scripting

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting XSS vulnerability was discovered in the Users and Groups functionality. The vulnerability occurs when an authenticated user adds a new user and inserts an XSS payload into the user's real name...

4.9CVSS5AI score0.00405EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/31 12:0 a.m.2 views

PT-2023-4162 · Webmin +1 · Webmin +1

Name of the Vulnerable Software and Affected Versions: Webmin version 2.021 Description: The issue is related to the lack of protection of the web page structure in the Webmin control panel, allowing a remote attacker to conduct a cross-site scripting XSS attack. This can be exploited to achieve...

5.5CVSS5.8AI score0.00708EPSS
Exploits1References11
Positive Technologies
Positive Technologies
added 2023/07/31 12:0 a.m.3 views

PT-2023-4161 · Webmin +1 · Webmin +1

Name of the Vulnerable Software and Affected Versions: Webmin version 2.021 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability in the Users and Groups functionality of Webmin. This vulnerability allows an attacker to store a malicious payload in the Group Name...

5.5CVSS5.2AI score0.00407EPSS
Exploits1References10
CNNVD
CNNVD
added 2023/07/31 12:0 a.m.2 views

Webmin 跨站脚本漏洞

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin version 2.021, which stems from a Stored Cross-Site Scripting XSS vulnerability found in the Users and Groups functionality that allows an...

5.4CVSS5.6AI score0.00407EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/07/31 12:0 a.m.2 views

Webmin 跨站脚本漏洞

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin version 2.021 that stems from the discovery of a Stored Cross-Site Scripting XSS vulnerability in the Users and Groups feature. The...

5.4CVSS5.6AI score0.00405EPSS
Exploits1References3
Rows per page
Query Builder