Lucene search
+L

7909 matches found

BDU FSTEC
BDU FSTEC
added 2022/06/29 12:00 a.m.13 views

The vulnerability of the `fuse_lib_readdir` function in the `libfuse-lite` library of the NTFS file system, which allows a attacker to execute arbitrary code with elevated privileges on the FUSE NTFS-3G module.

The vulnerability of the fuselibreaddir function in the libfuse-lite library of the NTFS file system for the FUSE NTFS-3G module is related to a numerical value loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a...

7.4CVSS7.4AI score0.00422EPSS
SaveExploits0References20Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:00 a.m.12 views

The vulnerability of the `fuse_kern_mount` function in the `libfuse-lite` library, implemented in the NTFS file system, allows a malicious actor to execute arbitrary code with elevated privileges.

The vulnerability of the fusekernmount function in the libfuse-lite library, implemented in the NTFS file system, affects the FUSE module NTFS-3G. This vulnerability involves returning an incorrect process status code. Exploiting this vulnerability could allow an attacker to execute arbitrary cod...

6.8CVSS7.4AI score0.00422EPSS
SaveExploits0References21Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/06/22 12:00 a.m.13 views

The vulnerability of the Yandex Browser Lite browser for Android allows a hacker to replace the value of the URL bar with a spoofing IDN.

The vulnerability of the Yandex Browser Lite browser for Android is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to remotely replace values in the address bar using IDN spoofing techniques...

7.8CVSS5.5AI score0.00436EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/22 12:00 a.m.12 views

The vulnerability of the Yandex Browser Lite browser for Android, related to bypassing authentication through spoofing, allows a perpetrator to replace the value of the URL address line.

The vulnerability of the Yandex Browser Lite browser for Android relates to bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to remotely replace the value of the address bar...

5.3CVSS5.5AI score0.00541EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/22 12:00 a.m.11 views

The vulnerability of the Yandex Browser Lite browser for Android, related to bypassing authentication through spoofing, allows a perpetrator to trigger a service denial.

The vulnerability of the Yandex Browser Lite browser for Android relates to bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to cause service failures...

7.8CVSS5.5AI score0.00786EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/22 12:00 a.m.25 views

The vulnerability of the Yandex Browser Lite browser for Android, related to bypassing authentication through spoofing, allows a perpetrator to replace the value of the URL address line.

The vulnerability of the Yandex Browser Lite browser for Android relates to bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to remotely replace the value of the address bar...

5.3CVSS5.9AI score0.01321EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/06/21 12:00 a.m.41 views

Debian DLA-3055-1 : ntfs-3g - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3055 advisory. Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of these flaws for local root privilege...

7.8CVSS7.6AI score0.00436EPSS
SaveExploits0References18
OSV
OSV
added 2022/06/20 8:23 p.m.7 views

MAL-2022-7129 Malicious code in wfs-lite-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2b68a3be380b0d140924d1d8f3e5bb5a834259149c1e0e08e8a2dcc3badabaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:23 p.m.4 views

Malicious code in wfs-lite-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2b68a3be380b0d140924d1d8f3e5bb5a834259149c1e0e08e8a2dcc3badabaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/06/16 2:15 a.m.6 views

CVE-2022-30533

Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors...

5.4CVSS6.2AI score0.0054EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2022/06/16 2:15 a.m.26 views

CVE-2022-30533

Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors...

5.4CVSS0.0054EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/06/16 2:15 a.m.6 views

CVE-2022-30549

Out-of-bounds read vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

7.8CVSS7.5AI score0.00893EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/06/16 2:15 a.m.6 views

CVE-2022-30533

Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors...

5.4CVSS6.2AI score0.0054EPSS
SaveExploits0References2
OSV
OSV
added 2022/06/16 2:15 a.m.4 views

CVE-2022-30549

Out-of-bounds read vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

7.8CVSS6AI score0.00893EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/06/16 1:35 a.m.33 views

CVE-2022-30549

Out-of-bounds read vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

7.8AI score0.00893EPSS
SaveExploits0References3
CVE
CVE
added 2022/06/16 1:35 a.m.112 views

CVE-2022-30533

CVE-2022-30533 affects the WordPress Modern Events Calendar Lite plugin (versions before 6.3.0). Vulnerability type: authenticated stored cross-site scripting (XSS) in the plugin, enabling an authenticated attacker to inject arbitrary scripts that run in a victim’s browser via unspecified vectors...

5.4CVSS5.1AI score0.0054EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/06/16 1:35 a.m.33 views

CVE-2022-30533

Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors...

5.5AI score0.0054EPSS
SaveExploits0References2
OSV
OSV
added 2022/06/14 9:15 a.m.4 views

CVE-2022-29524

Out-of-bounds write vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...

7.8CVSS6AI score0.00919EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/06/13 1:15 p.m.8 views

CVE-2022-1604

The MailerLite WordPress plugin before 1.5.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.4AI score0.00849EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2022/06/11 12:00 a.m.57 views

Debian DSA-5160-1 : ntfs-3g - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5160 advisory. - ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+5123-2. NOTE: the upstream position is that ntfsck is deprecated;...

7.8CVSS7.7AI score0.00504EPSS
SaveExploits1References21
Rows per page
Query Builder