Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

16175 matches found

Tenable Nessus
Tenable Nessus•added 2022/11/28 12:00 a.m.•41 views

Debian dla-3212 : python-twisted - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3212 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3212-1 [email protected] https://www.debian.org/lts/security/...

5.4CVSS6.3AI score0.01244EPSS
SaveExploits1References4
OSV
OSV•added 2022/11/25 8:15 p.m.•2 views

DEBIAN-CVE-2022-39332

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application via user status and information. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for...

5.4CVSS5.7AI score0.00945EPSS
SaveExploits1References1
OSV
OSV•added 2022/11/25 8:15 p.m.•5 views

DEBIAN-CVE-2022-39333

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for this issue...

6.1CVSS6.3AI score0.00942EPSS
SaveExploits1References1
NVD
NVD•added 2022/11/25 8:15 p.m.•22 views

CVE-2022-39332

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application via user status and information. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for...

5.4CVSS0.00945EPSS
SaveExploits1References4
NVD
NVD•added 2022/11/25 8:15 p.m.•21 views

CVE-2022-39333

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for this issue...

6.1CVSS0.00942EPSS
SaveExploits1References4
Prion
Prion•added 2022/11/25 8:15 p.m.•20 views

Design/Logic Flaw

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for this issue...

5.8CVSS6.2AI score0.00942EPSS
SaveExploits1References3Affected Software1
UbuntuCve
UbuntuCve•added 2022/11/25 8:15 p.m.•47 views

CVE-2022-39333

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for this issue...

6.1CVSS6.4AI score0.00942EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve•added 2022/11/25 8:15 p.m.•38 views

CVE-2022-39332

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application via user status and information. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for...

5.4CVSS6.1AI score0.00945EPSS
SaveExploits1References1
Prion
Prion•added 2022/11/25 8:15 p.m.•27 views

Cross site scripting

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the booktitle parameter...

5.8CVSS5.9AI score0.00489EPSS
SaveExploits0References1Affected Software1
OSV
OSV•added 2022/11/25 8:15 p.m.•6 views

UBUNTU-CVE-2022-39332

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application via user status and information. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for...

5.4CVSS5.8AI score0.00945EPSS
SaveExploits1References2
OSV
OSV•added 2022/11/25 8:15 p.m.•8 views

UBUNTU-CVE-2022-39333

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for this issue...

6.1CVSS5.8AI score0.00942EPSS
SaveExploits1References5
OSV
OSV•added 2022/11/25 7:15 p.m.•18 views

DEBIAN-CVE-2022-39331

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application in the notifications. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for this issue...

5.4CVSS5.7AI score0.00923EPSS
SaveExploits1References1
NVD
NVD•added 2022/11/25 7:15 p.m.•20 views

CVE-2022-39331

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application in the notifications. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for this issue...

5.4CVSS0.00923EPSS
SaveExploits1References4
Prion
Prion•added 2022/11/25 7:15 p.m.•27 views

Design/Logic Flaw

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application in the notifications. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for this issue...

4.9CVSS5.4AI score0.00923EPSS
SaveExploits1References3Affected Software1
OSV
OSV•added 2022/11/25 7:15 p.m.•11 views

UBUNTU-CVE-2022-39331

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application in the notifications. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for this issue...

5.4CVSS5.8AI score0.00923EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve•added 2022/11/25 7:15 p.m.•30 views

CVE-2022-39331

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application in the notifications. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for this issue...

5.4CVSS6.1AI score0.00923EPSS
SaveExploits1References1
Prion
Prion•added 2022/11/25 4:15 p.m.•24 views

Cross site scripting

A cross-site scripting XSS vulnerability in /admin/users/index.php of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Display Name field...

4.9CVSS5.2AI score0.01035EPSS
SaveExploits1References1Affected Software1
CVE
CVE•added 2022/11/25 12:00 a.m.•112 views

CVE-2022-39331

CVE-2022-39331 affects the Nextcloud desktop client. An attacker can inject arbitrary HTML into the Desktop Client notifications due to insufficient input sanitisation. Public advisories (OpenSUSE/OpenSUSE SU, Debian LTS) and the Debian/NVD entries reference this issue, with remediation recommend...

5.4CVSS5AI score0.00923EPSS
SaveExploits1References4Affected Software1
CVE
CVE•added 2022/11/25 12:00 a.m.•104 views

CVE-2022-39333

CVE-2022-39333 affects the Nextcloud Desktop Client. An attacker can inject arbitrary HTML into the Desktop Client application, enabling potential HTML/JS injection via the UI. Affected software: Nextcloud Desktop client prior to upgrade. Mitigation: upgrade to Nextcloud Desktop version 3.6.1 or ...

6.1CVSS5.3AI score0.00942EPSS
SaveExploits1References4Affected Software1
OSV
OSV•added 2022/11/25 12:00 a.m.•31 views

CVE-2022-39332 Cross-site scripting (XSS) in Nextcloud Desktop Client

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application via user status and information. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for...

4.6CVSS5.4AI score
SaveExploits0References6
Rows per page
Query Builder