Lucene search
+L

10923 matches found

Patchstack
Patchstack
added 2023/01/10 12:00 a.m.19 views

WordPress PDF.js Viewer Plugin < 2.1.8 is vulnerable to Cross Site Scripting (XSS)

Software PDF.js Viewer Type Plugin Vulnerable versions 2.1.8 Fixed in 2.1.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4670 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID 33028ec86f1d Credits Lana Codes Required...

5.4CVSS5.9AI score0.00562EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
added 2023/01/10 12:00 a.m.39 views

CVE-2023-0136

Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to execute incorrect security UI via a crafted HTML page. Chromium security severity: Medium...

8.2AI score0.00647EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2023/01/10 12:00 a.m.19 views

WordPress Post Category Image With Grid and Slider Plugin < 1.4.8 is vulnerable to Cross Site Scripting (XSS)

Software Post Category Image With Grid and Slider Type Plugin Vulnerable versions 1.4.8 Fixed in 1.4.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4747 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID e6ed2518069c...

5.4CVSS5.9AI score0.00685EPSS
SaveExploits2References4Affected Software1
CVE
CVE
added 2023/01/10 12:00 a.m.326 views

CVE-2023-0131

The CVE-2023-0131 entry concerns Google Chrome before version 109.0.5414.74, where an inappropriate implementation in the iframe Sandbox could allow a remote attacker to bypass file download restrictions via a crafted HTML page. The vulnerability affects Chrome/Chromium sandbox behavior and is ra...

6.5CVSS5.7AI score0.00595EPSS
SaveExploits0References4Affected Software1
Patchstack
Patchstack
added 2023/01/10 12:00 a.m.18 views

WordPress PPWP – WordPress Password Protect Page Plugin < 1.8.6 is vulnerable to Cross Site Scripting (XSS)

Software PPWP – WordPress Password Protect Page Type Plugin Vulnerable versions 1.8.6 Fixed in 1.8.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4626 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID c899b093125c Credi...

5.4CVSS5.9AI score0.00649EPSS
SaveExploits2References4Affected Software1
Patchstack
Patchstack
added 2023/01/10 12:00 a.m.18 views

WordPress Strong Testimonials Plugin < 3.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Strong Testimonials Type Plugin Vulnerable versions 3.0.3 Fixed in 3.0.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4717 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID fb189a8a235c Credits Lana Codes...

5.4CVSS5.9AI score0.00649EPSS
SaveExploits2References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/01/10 12:00 a.m.4 views

CVE-2023-0135

Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. Chromium security severity: Medium...

9.1AI score0.00452EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2023/01/10 12:00 a.m.5 views

CVE-2023-0132

Inappropriate implementation in in Permission prompts in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to force acceptance of a permission prompt via a crafted HTML page. Chromium security severity: Medium...

5.9AI score0.00496EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2023/01/10 12:00 a.m.3 views

CVE-2023-0136

Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to execute incorrect security UI via a crafted HTML page. Chromium security severity: Medium...

8.1AI score0.00647EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2023/01/10 12:00 a.m.41 views

CVE-2023-0136

Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to execute incorrect security UI via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS8.7AI score0.00647EPSS
SaveExploits0
CVE
CVE
added 2023/01/10 12:00 a.m.198 views

CVE-2023-0136

CVE-2023-0136 affects Google Chrome/Chromium’s Fullscreen API implementation. The issue is an inappropriate implementation in Fullscreen API that can allow a remote attacker to trigger an incorrect security UI via a crafted HTML page. Public source records consistently tie this CVE to Chrome/Chro...

8.8CVSS7.9AI score0.00647EPSS
SaveExploits0References4Affected Software1
Lenovo
Lenovo
added 2023/01/06 8:18 p.m.18 views

Synaptics Fingerprint Driver Vulnerability - Lenovo Support US

No description provided...

7.1CVSS7AI score0.00263EPSS
SaveExploits0
Lenovo
Lenovo
added 2023/01/06 7:36 p.m.7 views

Intel PROSet Wireless WiFi, Intel vPro CSME WiFi and Killer WiFi Advisory - Lenovo Support US

No description provided...

6.7AI score
SaveExploits0
Lenovo
Lenovo
added 2023/01/06 7:29 p.m.7 views

AMD Graphics Driver Vulnerabilities- November, 2022 - Lenovo Support US

No description provided...

7.8AI score
SaveExploits0
Lenovo
Lenovo
added 2023/01/06 7:25 p.m.7 views

Realtek High-Definition Audio Driver Vulnerability - Lenovo Support US

No description provided...

7.3AI score
SaveExploits0
Lenovo
Lenovo
added 2023/01/06 7:00 p.m.10 views

Intel Graphics Drivers Advisory - Lenovo Support US

No description provided...

7.8CVSS7.6AI score0.00247EPSS
SaveExploits0
Lenovo
Lenovo
added 2023/01/06 6:54 p.m.6 views

NVIDIA GPU Display Driver Advisory - February 2022 - Lenovo Support US

No description provided...

6.5AI score
SaveExploits0
Lenovo
Lenovo
added 2023/01/06 6:34 p.m.8 views

Intel Wireless Bluetooth and Killer Bluetooth Advisory - Lenovo Support US

No description provided...

5.9AI score
SaveExploits0
Lenovo
Lenovo
added 2023/01/06 4:11 p.m.16 views

Intel Wireless Bluetooth and Killer Bluetooth for Windows Advisory - Lenovo Support US

No description provided...

6.5CVSS6.5AI score0.00504EPSS
SaveExploits0
Lenovo
Lenovo
added 2023/01/06 3:47 p.m.7 views

Aggregation and Fragmentation Attacks against Wi-Fi (FragAttacks) Vulnerabilities - Lenovo Support US

No description provided...

3.5CVSS6.6AI score0.05765EPSS
SaveExploits4
Rows per page
Query Builder