Lucene search
+L

8876 matches found

Vulnrichment
Vulnrichment
added 2023/05/31 12:00 a.m.9 views

CVE-2023-3020 Cross-site Scripting (XSS) - Reflected in mkucej/i-librarian-free

Cross-site Scripting XSS - Reflected in GitHub repository mkucej/i-librarian-free prior to 5.10.4...

9CVSS6.4AI score0.0062EPSS
SaveExploits1References2
CVE
CVE
added 2023/05/31 12:00 a.m.63 views

CVE-2023-3021

CVE-2023-3021 concerns the i-librarian-free web application (GitHub repo mkucej/i-librarian-free) and is a Stored XSS vulnerability present in versions prior to 5.10.4. The available connected data indicate an stored XSS issue in the application, with exploitation illustrated in a Huntr entry des...

5.4CVSS4.7AI score0.00449EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2023/05/31 12:00 a.m.7 views

i-librarian 跨站脚本漏洞

i-librarian is an online service by Martin Kucej Personal Developer that will organize your PDF files and office document sets. A cross-site scripting vulnerability exists in i-librarian-free versions prior to 5.10.4. An attacker could exploit this vulnerability to perform cross-site scripting...

9CVSS7.3AI score0.0062EPSS
SaveExploits1References3
OSV
OSV
added 2023/05/31 12:00 a.m.16 views

CVE-2023-3020 Cross-site Scripting (XSS) - Reflected in mkucej/i-librarian-free

Cross-site Scripting XSS - Reflected in GitHub repository mkucej/i-librarian-free prior to 5.10.4...

9CVSS8.3AI score
SaveExploits0References4
CVE
CVE
added 2023/05/31 12:00 a.m.104 views

CVE-2023-3020

CVE-2023-3020 affects the web app i-librarian-free (GitHub: mkucej/i-librarian-free) and is a reflected Cross-site Scripting (XSS) vulnerability present in versions prior to 5.10.4 . The issue arises from reflecting unsanitized user input in the search/query flow (evidenced by “Reflected XSS at s...

9CVSS6.3AI score0.0062EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2023/05/31 12:00 a.m.37 views

CVE-2023-3021 Cross-site Scripting (XSS) - Stored in mkucej/i-librarian-free

Cross-site Scripting XSS - Stored in GitHub repository mkucej/i-librarian-free prior to 5.10.4...

4.1CVSS5.5AI score0.00449EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/05/31 12:00 a.m.14 views

i-librarian 跨站脚本漏洞

i-librarian is an online service by Martin Kucej Personal Developer that will organize your PDF files and office document sets. A cross-site scripting vulnerability exists in i-librarian-free versions prior to 5.10.4. An attacker could exploit this vulnerability to perform cross-site scripting...

5.4CVSS4.8AI score0.00449EPSS
SaveExploits1References3
OSV
OSV
added 2023/05/31 12:00 a.m.23 views

CVE-2023-3021 Cross-site Scripting (XSS) - Stored in mkucej/i-librarian-free

Cross-site Scripting XSS - Stored in GitHub repository mkucej/i-librarian-free prior to 5.10.4...

4.1CVSS4.6AI score
SaveExploits0References4
Cvelist
Cvelist
added 2023/05/31 12:00 a.m.31 views

CVE-2023-3020 Cross-site Scripting (XSS) - Reflected in mkucej/i-librarian-free

Cross-site Scripting XSS - Reflected in GitHub repository mkucej/i-librarian-free prior to 5.10.4...

9CVSS6.2AI score0.0062EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2023/05/30 4:16 p.m.37 views

Security Bulletin: IBM Db2 Mirror for i is vulnerable to attacker obtaining sensitive information due to Java string processing in IBM Toolbox for Java (CVE-2022-43928)

Summary IBM Db2 Mirror for i setup and GUI use the IBM Toolbox for Java to access IBM i interfaces. IBM Toolbox for Java could allow sensitive information stored as Java strings to be obtained by an attacker as described in the vulnerability details section. IBM Db2 Mirror for i has addressed the...

6.5CVSS5.5AI score0.00638EPSS
SaveExploits0Affected Software4
Spring Security Advisories
Spring Security Advisories
added 2023/05/25 12:00 a.m.20 views

A Bootiful Podcast: Java Developer Advocate Billy Korando on the latest and greatest in Java

Hi, Spring fans! In this installment, Josh Long @starbuxman talks to Java Developer Advocate Billy Korando, recorded live from the amazing Spring I/O show in Barcelona, Spain!...

6.9AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2023/05/23 2:29 p.m.32 views

Security Bulletin: IBM Java SDK and IBM Java Runtime for IBM i are vulnerable to exposing sensitive information due to flaws and configurations (CVE-2023-30441).

Summary IBM® SDK Java™ Technology Edition and IBM® Runtime Environment Java™ used by IBM i are vulnerable to exposing sensitive information using a combination of flaws and configurations as described in the vulnerability details section. The vulnerability is fixed by applying an IBM i Group PTF...

7.5CVSS7.5AI score0.00604EPSS
SaveExploits0Affected Software5
AlmaLinux
AlmaLinux
added 2023/05/16 12:00 a.m.41 views

Moderate: sysstat security and bug fix update

The sysstat packages provide the sar and iostat commands. These commands enable system monitoring of disk, network, and other I/O activity. Security Fixes: sysstat: arithmetic overflow in allocatestructures on 32 bit systems CVE-2022-39377 For more details about the security issues, including the...

7.8CVSS7.1AI score0.01152EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/05/16 12:00 a.m.6 views

WordPress plugin I Recommend This 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.9CVSS4.9AI score0.00392EPSS
SaveExploits0References2
OSV
OSV
added 2023/05/16 12:00 a.m.34 views

ALSA-2023:2800 Moderate: sysstat security and bug fix update

The sysstat packages provide the sar and iostat commands. These commands enable system monitoring of disk, network, and other I/O activity. Security Fixes: sysstat: arithmetic overflow in allocatestructures on 32 bit systems CVE-2022-39377 For more details about the security issues, including the...

7.8CVSS7.8AI score0.01152EPSS
SaveExploits1References4
Openbugbounty
Openbugbounty
added 2023/05/13 9:32 a.m.10 views

i-mas.com Cross Site Scripting vulnerability OBB-3329617

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2023/05/12 1:38 p.m.46 views

Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to cross-site scripting (CVE-2022-0225)

Summary IBM i Modernization Engine for Lifecycle Integration platform component is vulnerable to cross-site scripting as described in the Vulnerability Details section. These components are used in IBM i Modernization Engine for Lifecycle Integration for infrastructure support in the platform. IB...

5.4CVSS7.3AI score0.03137EPSS
SaveExploits1Affected Software1
NVD
NVD
added 2023/05/11 1:15 p.m.33 views

CVE-2023-0859

Arbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers. :Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/...

5.3CVSS4.3AI score0.00544EPSS
SaveExploits0References4
NVD
NVD
added 2023/05/11 1:15 p.m.29 views

CVE-2023-0856

Buffer overflow in IPP sides attribute process of Office / Small Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. :Satera LBP660C Series/LBP620C Series/MF740C...

9.8CVSS9.9AI score0.01139EPSS
SaveExploits0References4
NVD
NVD
added 2023/05/11 1:15 p.m.35 views

CVE-2023-0852

Buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. :Satera LBP660C Series/LBP620C...

9.8CVSS9.9AI score0.01139EPSS
SaveExploits0References4
Rows per page
Query Builder