Lucene search
+L

4340 matches found

OSV
OSV
•added 2024/06/27 11:15 a.m.•30 views

AZL-47733 CVE-2024-5535 affecting package hvloader for versions less than 1.0.1-6

Issue summary: Calling the OpenSSL API function SSLselectnextproto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences such as unexpected application beahviour or ...

9.1CVSS7AI score0.05582EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2024/06/27 12:00 a.m.•474 views

OpenSSL 1.0.2 < 1.0.2zk Vulnerability

The version of OpenSSL installed on the remote host is prior to 1.0.2zk. It is, therefore, affected by a vulnerability as referenced in the 1.0.2zk advisory. - Issue summary: Calling the OpenSSL API function SSLselectnextproto with an empty supported client protocols buffer may cause a crash or...

9.1CVSS7.6AI score0.05582EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/06/27 12:00 a.m.•12 views

OpenSSL Security Vulnerabilities

OpenSSL is an open source general-purpose cryptographic library capable of implementing the Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols from the OpenSSL team. It supports a variety of cryptographic algorithms, including symmetric ciphers, hashing algorithms, secure...

9.1CVSS6.9AI score0.05582EPSS
SaveExploits1References19
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 12:21 p.m.•7 views

Malicious code in @next-translate-root/locales (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 12:21 p.m.•13 views

Malicious code in @next-translate-root/i18n (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2024/06/06 7:15 p.m.•13 views

CVE-2023-45192

IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 268758...

8.2CVSS5.8AI score0.00678EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/06/06 6:49 p.m.•44 views

CVE-2023-45192 IBM Engineering Requirements Management DOORS Next XML external entity injection

IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 268758...

8.2CVSS0.00678EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/06/06 6:49 p.m.•40 views

CVE-2023-45192 IBM Engineering Requirements Management DOORS Next XML external entity injection

IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 268758...

8.2CVSS6.6AI score0.00678EPSS
SaveExploits0References2
CVE
CVE
•added 2024/06/06 6:49 p.m.•76 views

CVE-2023-45192

IBM Engineering Requirements Management DOORS Next versions 7.0.2 and 7.0.3 are affected by an XML External Entity Injection (XXE) when processing XML data. A remote attacker could potentially expose sensitive information or exhaust memory resources due to the vulnerable XML processing. Remediati...

8.2CVSS8.1AI score0.00678EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2024/06/06 12:00 a.m.•18 views

IBM Engineering Requirements Management DOORS Next Code Issue Vulnerability

IBM Engineering Requirements Management DOORS Next is a scalable solution from International Business Machines IBM. The solution helps you capture, track, analyze, and manage systems and advanced IT application development. A code issue vulnerability exists in IBM Engineering Requirements...

8.2CVSS7AI score0.00678EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/06/06 12:00 a.m.•24 views

PT-2024-13223 · Ibm · Ibm Engineering Requirements Management Doors Next

Name of the Vulnerable Software and Affected Versions: IBM Engineering Requirements Management DOORS Next versions 7.0.2 through 7.0.3 Description: The issue is related to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to expose sensitiv...

8.2CVSS7.2AI score0.00678EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/06 12:00 a.m.•6 views

CVE-2023-45192: Improper Restriction of XML External Entity Reference

IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 268758...

8.2CVSS5.8AI score0.00678EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2024/06/05 1:14 p.m.•25 views

Security Bulletin: IBM Engineering Requirements Management DOORS Next is vulnerable to XML External Entity Injection (XEE) (CVE-2023-45192)

Summary IBM Engineering Requirements Management DOORS Next is vulnerable to CVE-2023-45192 potential XML External Entity Injection XEE attacks. Vulnerability Details CVEID:CVE-2023-45192 DESCRIPTION: IBM Engineering Requirements Management DOORS Next is vulnerable to an XML External Entity...

8.2CVSS8.3AI score0.00678EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
•added 2024/06/05 10:05 a.m.•13 views

kernel: wifi: iwlwifi: fix a memory corruption

A memory corruption flaw was found in the Linux kernel Intel Wireless WiFi Next Gen AGN module. This issue could allow a local user to crash the system...

7.8CVSS6.8AI score0.0031EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2024/06/05 12:36 a.m.•13 views

kernel: wifi: iwlwifi: fix a memory corruption

A memory corruption flaw was found in the Linux kernel Intel Wireless WiFi Next Gen AGN module. This issue could allow a local user to crash the system...

7.8CVSS6.8AI score0.0031EPSS
SaveExploits0References5
NVD
NVD
•added 2024/06/03 11:15 a.m.•17 views

CVE-2024-34793

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kharim Tomlinson WP Next Post Navi allows Stored XSS.This issue affects WP Next Post Navi: from n/a through 1.8.3...

5.9CVSS6.1AI score0.00259EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/03 10:52 a.m.•17 views

CVE-2024-34793 WordPress WP Next Post Navi plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kharim Tomlinson WP Next Post Navi allows Stored XSS.This issue affects WP Next Post Navi: from n/a through 1.8.3...

5.9CVSS6.8AI score0.00259EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/03 12:00 a.m.•5 views

PT-2024-26188

Name of the Vulnerable Software and Affected Versions WP Next Post Navi versions 1.8.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, which can be exploited by...

5.9CVSS0.00259EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/03 12:00 a.m.•6 views

CVE-2024-34793: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kharim Tomlinson WP Next Post Navi allows Stored XSS.This issue affects WP Next Post Navi: from n/a through 1.8.3...

5.9CVSS5.8AI score0.00259EPSS
SaveExploits0References1
Trend Micro Simply Security
Trend Micro Simply Security
•added 2024/06/02 12:00 a.m.•37 views

Explore AI-Driven Cybersecurity with Trend Micro, Using NVIDIA NIM

Discover Trend Micro's integration of NVIDIA NIM to deliver an AI-driven cybersecurity solution for next-generation data centers. Engage with experts, explore demos, and learn strategies for securing AI data centers and optimizing cloud performance...

7.3AI score
SaveExploits0
Rows per page
Query Builder