Lucene search
+L

531 matches found

Vulnrichment
Vulnrichment
added 2022/12/02 12:00 a.m.7 views

CVE-2022-45483

Lazy Mouse allows an attacker in a man in the middle position between the server and a connected device to see all data including keypresses in cleartext. CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N...

6.8AI score0.00382EPSS
SaveExploits0References1
CVE
CVE
added 2022/12/02 12:00 a.m.61 views

CVE-2022-45483

CVE-2022-45483—Lazy Mouse vulnerability: in a man-in-the-middle position between the server and a connected device, an attacker can view all data, including keypresses, in cleartext. This indicates unencrypted or improperly protected traffic exposing confidentiality (C:H) with no integrity impact...

5.9CVSS6.5AI score0.00382EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/12/02 12:00 a.m.45 views

CVE-2022-45482

Lazy Mouse server enforces weak password requirements and doesn't implement rate limiting, allowing remote unauthenticated users to easily and quickly brute force the PIN and execute arbitrary commands. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...

10AI score0.01333EPSS
SaveExploits0References1
CVE
CVE
added 2022/12/02 12:00 a.m.77 views

CVE-2022-45482

CVE-2022-45482 concerns the Lazy Mouse server, where the vulnerability is caused by weak password requirements and lack of rate limiting. This allows remote, unauthenticated attackers to brute force the PIN and potentially execute arbitrary commands. The core data sources describe the affected co...

9.8CVSS9.8AI score0.01333EPSS
SaveExploits0References1Affected Software1
Microsoft KB
Microsoft KB
added 2022/11/08 8:00 a.m.116 views

Description of the security update for SharePoint Server 2019: September 13, 2022 (KB5002258)

None None...

8.8CVSS6.8AI score0.53569EPSS
SaveExploits0
Code423n4
Code423n4
added 2022/08/07 12:00 a.m.21 views

The lazy update of _currentProxies results in non-owners being able to execute functions that require owner privileges

Lines of code Vulnerability details Impact In the MIMOProxyRegistry contract, the getCurrentProxy function returns the address of the mimoProxy contract corresponding to the owner's address in currentProxies. function getCurrentProxyaddress owner external view override returns IMIMOProxy proxy...

6.9AI score
SaveExploits0
Fedora
Fedora
added 2022/07/31 1:37 a.m.46 views

[SECURITY] Fedora 36 Update: stargz-snapshotter-0.12.0-2.fc36

Fast container image distribution plugin with lazy pulling...

9.3CVSS2.5AI score0.0995EPSS
SaveExploits4
Fedora
Fedora
added 2022/07/20 1:40 a.m.18 views

[SECURITY] Fedora 35 Update: stargz-snapshotter-0.10.2-4.fc35

Fast container image distribution plugin with lazy pulling...

2.5AI score
SaveExploits0
Fedora
Fedora
added 2022/07/17 1:15 a.m.43 views

[SECURITY] Fedora 35 Update: golang-github-containerd-stargz-snapshotter-0.10.1-3.fc35

Fast container image distribution plugin with lazy pulling...

9.3CVSS2.5AI score0.0995EPSS
SaveExploits3
OpenVAS
OpenVAS
added 2022/07/06 12:00 a.m.16 views

Fedora: Security Advisory for golang-github-containerd-stargz-snapshotter (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
Fedora
Fedora
added 2022/07/04 1:35 a.m.31 views

[SECURITY] Fedora 36 Update: golang-github-containerd-stargz-snapshotter-0.10.1-2.fc36

Fast container image distribution plugin with lazy pulling...

9.3CVSS8.2AI score0.0995EPSS
SaveExploits4
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:13 p.m.7 views

Malicious code in postcss-lazy-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3af0b17a0cca4f52c02b138fec9e69ba2c506346ef1a6b57cbf893a03b7b5c46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:13 p.m.13 views

MAL-2022-5424 Malicious code in postcss-lazy-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3af0b17a0cca4f52c02b138fec9e69ba2c506346ef1a6b57cbf893a03b7b5c46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Fedora
Fedora
added 2022/05/07 5:06 a.m.27 views

[SECURITY] Fedora 36 Update: golang-github-containerd-stargz-snapshotter-0.7.0-4.fc36

Fast container image distribution plugin with lazy pulling...

7.5CVSS2.5AI score0.03931EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2022/04/29 12:00 a.m.14 views

Fedora: Security Advisory for golang-github-containerd-stargz-snapshotter (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
Fedora
Fedora
added 2022/04/28 5:53 a.m.24 views

[SECURITY] Fedora 35 Update: golang-github-containerd-stargz-snapshotter-0.7.0-4.fc35

Fast container image distribution plugin with lazy pulling...

7.5CVSS2.5AI score0.03931EPSS
SaveExploits0
Fedora
Fedora
added 2022/04/14 4:07 p.m.48 views

[SECURITY] Fedora 35 Update: stargz-snapshotter-0.10.2-1.fc35

Fast container image distribution plugin with lazy pulling...

7.5CVSS2.5AI score0.05994EPSS
SaveExploits0
Fedora
Fedora
added 2022/04/14 4:06 p.m.55 views

[SECURITY] Fedora 34 Update: stargz-snapshotter-0.10.2-1.fc34

Fast container image distribution plugin with lazy pulling...

7.5CVSS2.5AI score0.05994EPSS
SaveExploits0
OSV
OSV
added 2022/04/11 2:41 p.m.25 views

CVE-2022-0969 Image optimization & Lazy Load < 3.3.2 - Admin+ Stored Cross-Site Scripting

The Image optimization & Lazy Load by Optimole WordPress plugin before 3.3.2 does not sanitise and escape its "Lazyload background images for selectors" settings, which could allow high privilege users such as admin to perform Cross-Site scripting attacks even when the unfilteredhtml capability i...

5.9AI score
SaveExploits0References4
CVE
CVE
added 2022/04/11 2:41 p.m.95 views

CVE-2022-0969

CVE-2022-0969 affects the WordPress Optimole plugin prior to 3.3.2. The issue is that the settings for “Lazyload background images for selectors” are not properly sanitised/escaped, which could allow high-privilege users (e.g., admins) to perform Cross-Site Scripting even when unfiltered_html is ...

4.8CVSS4.8AI score0.00741EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder