Lucene search
+L

38656 matches found

Fedora
Fedora
added 2024/01/22 1:16 a.m.50 views

[SECURITY] Fedora 39 Update: tigervnc-1.13.1-11.fc39

Virtual Network Computing VNC is a remote display system which allows you to view a computing 'desktop' environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. This package contains a client which will allow you ...

9.8CVSS7.6AI score0.02106EPSS
SaveExploits0
Prion
Prion
added 2024/01/22 12:15 a.m.23 views

Cross site scripting

A vulnerability classified as problematic was found in CodeAstro Internet Banking System 1.0. Affected by this vulnerability is an unknown functionality of the file pagesclientsignup.php. The manipulation of the argument Client Full Name leads to cross site scripting. The attack can be launched...

4CVSS6.5AI score0.00562EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2024/01/22 12:00 a.m.10 views

CodeAstro Internet Banking System Input Validation Error Vulnerability

CodeAstro Internet Banking System is a PHP online banking system from CodeAstro. An input validation error vulnerability exists in CodeAstro Internet Banking System version 1.0, which stems from the inclusion of an unknown section in pagesclientsignup.php, where the use of a specific input via th...

6.1CVSS6.8AI score0.00514EPSS
SaveExploits1References4
CVE
CVE
added 2024/01/21 11:31 p.m.46 views

CVE-2024-0773

CVE-2024-0773 affects CodeAstro Internet Banking System 1.0. The vulnerability is an XSS in the pages_client_signup.php file, caused by the manipulation of the Client Full Name parameter. It is exploitable remotely and, per the sources, the exploit has been disclosed publicly. Connected documents...

5.4CVSS5.2AI score0.00562EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/21 11:31 p.m.3 views

CVE-2024-0773 CodeAstro Internet Banking System pages_client_signup.php cross site scripting

A vulnerability classified as problematic was found in CodeAstro Internet Banking System 1.0. Affected by this vulnerability is an unknown functionality of the file pagesclientsignup.php. The manipulation of the argument Client Full Name leads to cross site scripting. The attack can be launched...

4CVSS6.4AI score0.00562EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/01/21 11:31 p.m.33 views

CVE-2024-0773 CodeAstro Internet Banking System pages_client_signup.php cross site scripting

A vulnerability classified as problematic was found in CodeAstro Internet Banking System 1.0. Affected by this vulnerability is an unknown functionality of the file pagesclientsignup.php. The manipulation of the argument Client Full Name leads to cross site scripting. The attack can be launched...

4CVSS5.5AI score0.00562EPSS
SaveExploits1References3
Openbugbounty
Openbugbounty
added 2024/01/21 9:15 p.m.4 views

internet-of-things.cioreview.com Cross Site Scripting vulnerability OBB-3839750

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
CNNVD
CNNVD
added 2024/01/21 12:00 a.m.7 views

CodeAstro Internet Banking System Cross-Site Scripting Vulnerability

CodeAstro Internet Banking System is a PHP online banking system from CodeAstro. A cross-site scripting vulnerability exists in CodeAstro Internet Banking System version 1.0, which stems from the parameter Client Full Name in the file pagesclientsignup.php that can lead to cross-site scripting...

5.4CVSS5.9AI score0.00562EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/01/21 12:00 a.m.14 views

PT-2024-15809 · Unknown · Codeastro Internet Banking System

Name of the Vulnerable Software and Affected Versions: CodeAstro Internet Banking System version 1.0 Description: A problematic vulnerability was found in the CodeAstro Internet Banking System, affecting an unknown functionality of the file pages client signup.php. The manipulation of the Client...

5.4CVSS6.9AI score0.00562EPSS
SaveExploits1References7
Hacker One
Hacker One
added 2024/01/19 6:09 p.m.186 views

Internet Bug Bounty: CVE-2024-21733 Apache Tomcat HTTP Request Smuggling (Client- Side Desync) (CWE: 444)

SECURITY CVE-2024-21733 Apache Tomcat - Information Disclosure Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.0-M11 to 9.0.43 Apache Tomcat 8.5.7 to 8.5.63 Description: Incomplete POST requests triggered an error response that could contain data fr...

5.3CVSS5.8AI score0.14286EPSS
SaveExploits3
Wired Threat Level
Wired Threat Level
added 2024/01/19 1:00 p.m.14 views

How to Opt Out of Comcast’s Xfinity Storing Your Sensitive Data

One of America’s largest internet providers may collect data about your political beliefs, race, and sexual orientation to serve personalized ads...

7.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/01/19 12:00 a.m.11 views

The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to deficiencies in the access control mechanism. Exploiting this vulnerability allows a malicious actor to disclose protected information remotely...

5.4CVSS6.5AI score0.01499EPSS
SaveExploits0References3
Prion
Prion
added 2024/01/18 3:15 p.m.17 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Macroturk Software and Internet Technologies Macro-Bel allows Reflected XSS.This issue affects Macro-Bel: before V.1.0.1...

5.8CVSS7.2AI score0.00314EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/01/18 2:38 p.m.50 views

CVE-2023-7153

CVE-2023-7153 corresponds to a reflected XSS vulnerability in Macro-Bel, a product of MacroTurk Software and Internet Technologies. Affected component is the Macro-Bel web interface, with the root cause described as improper neutralization of input during web page generation. The issue is exploit...

6.1CVSS6.4AI score0.00314EPSS
SaveExploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2024/01/18 2:48 a.m.5 views

SUSE CVE-2023-45229

EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IANA or IATA option in a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality...

6.5CVSS6.8AI score0.00944EPSS
SaveExploits1References10
SUSE CVE
SUSE CVE
added 2024/01/18 2:47 a.m.8 views

SUSE CVE-2023-45232

EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...

7.5CVSS6.8AI score0.02101EPSS
SaveExploits1References8
SUSE CVE
SUSE CVE
added 2024/01/18 2:47 a.m.7 views

SUSE CVE-2023-45233

EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...

7.5CVSS6.8AI score0.02101EPSS
SaveExploits1References8
OpenVAS
OpenVAS
added 2024/01/18 12:00 a.m.19 views

Fedora: Security Advisory for exim (FEDORA-2024-e0841c83bb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS5.7AI score0.01102EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2024/01/18 12:00 a.m.22 views

Fedora: Security Advisory (FEDORA-2024-1ef6197a49)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS5.7AI score0.01102EPSS
SaveExploits1References5
OSV
OSV
added 2024/01/17 12:32 p.m.18 views

CLSA-2024-1705494763 kernel: Fix of 13 CVEs

Bluetooth: L2CAP: Fix use-after-free in l2capsockreadycb CVE-2023-40283 - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet CVE-2023-6932 - smb: client: fix OOB in smbCalcSize CVE-2023-6606 - net/sched: schhfsc: Ensure inner classes have fsc curve CVE-2023-4623 - net/sched: clsfw:...

8.8CVSS5.9AI score0.03585EPSS
SaveExploits1References1
Rows per page
Query Builder