Lucene search
+L

365 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 5:50 a.m.9 views

SUSE CVE-2011-3635

Cross-site scripting XSS vulnerability in the themeadiumappendmessage function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted alias aka nickname...

4.3CVSS5.9AI score0.01962EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:49 a.m.7 views

SUSE CVE-2011-4897

Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname value, which allows remote attackers to obtain potentially sensitive information by reading this value...

4.3CVSS8.9AI score0.01528EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:49 a.m.6 views

SUSE CVE-2011-4939

The pidginconvchatrenameuser function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by changing a nickname while in an XMPP chat room...

6.4CVSS6.4AI score0.03509EPSS
SaveExploits1References3
Veracode
Veracode
added 2023/01/02 6:59 p.m.15 views

Denial Of Service (DoS)

github.com/usememos/memos is vulnerable to denial of service attacks. A malicious user is able to pass a huge number of characters through the Nickname parameter, causing the application to crash through the POST request...

7.5CVSS7AI score0.00678EPSS
SaveExploits1References4Affected Software1
Huntr
Huntr
added 2022/12/23 12:28 p.m.23 views

Denial of Service

Description There is no limit of "Nickname" content length while updating your information that lead to Denial of Service by entering huge number of characters if you insert the following POST request "email": "[email protected]", "id": 104, "nickname":...

5CVSS0.1AI score0.00678EPSS
SaveExploits1
OSV
OSV
added 2022/09/13 3:15 p.m.7 views

CVE-2022-36778

insert HTML / js code inside input how to get to the vulnerable input : Workers worker nickname inject in this input the code...

5.4CVSS5.8AI score0.00399EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/09/13 2:58 p.m.33 views

CVE-2022-36778 Synel - eHarmony Stored XSS

insert HTML / js code inside input how to get to the vulnerable input : Workers worker nickname inject in this input the code...

6.5CVSS6.7AI score0.00399EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/09/13 12:00 a.m.9 views

PT-2022-23618 · Synel · Eharmony

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows an attacker to insert HTML or JavaScript code into a specific input field. To access the vulnerable input, an attacker would navigate t...

6.5CVSS5.4AI score0.00399EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/08/21 11:14 a.m.12 views

CVE-2022-36778

insert HTML / js code inside input how to get to the vulnerable input : Workers worker nickname inject in this input the code...

6.5CVSS5.9AI score0.00399EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/08/05 4:15 p.m.21 views

Input validation

insert HTML / js code inside input how to get to the vulnerable input : Workers worker nickname inject in this input the code...

5CVSS7.5AI score0.0048EPSS
SaveExploits0References1
CVE
CVE
added 2022/08/05 3:24 p.m.91 views

CVE-2022-34768

CVE-2022-34768 allows injection of HTML/JavaScript into the “Workers > worker nickname” input. Affected component: the input field used for worker nicknames; root cause is input handling that permits code insertion. Impact as per NVD: base CVSS v3.1 = 7.5 (HIGH), with I = HIGH, C/N? per vector...

7.5CVSS6.9AI score0.0048EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/08/05 3:24 p.m.17 views

CVE-2022-34768 Synel - eHarmony Stored XSS

insert HTML / js code inside input how to get to the vulnerable input : Workers worker nickname inject in this input the code...

6.5CVSS7.2AI score0.0048EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/03 2:40 p.m.6 views

CVE-2022-34768

insert HTML / js code inside input how to get to the vulnerable input : Workers worker nickname inject in this input the code...

7.5CVSS6AI score0.0048EPSS
SaveExploits0References3Affected Software1
Talos
Talos
added 2022/01/26 12:00 a.m.20 views

Reolink RLC-410W device TestEmail out-of-bounds write vulnerability

Summary An out-of-bounds write vulnerability exists in the device TestEmail functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted network request can lead to an out-of-bounds write. An attacker can send an HTTP request to trigger this vulnerability. Tested Versions Reolink...

9.8CVSS9.7AI score0.01213EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/01/25 4:15 p.m.9 views

CVE-2021-46034

A problem was found in ForestBlog, as of 2021-12-29, there is a XSS vulnerability that can be injected through the nickname input box...

6.1CVSS6.2AI score0.00588EPSS
SaveExploits1References2
Prion
Prion
added 2022/01/25 4:15 p.m.17 views

Cross site scripting

A problem was found in ForestBlog, as of 2021-12-29, there is a XSS vulnerability that can be injected through the nickname input box...

4.3CVSS6AI score0.00588EPSS
SaveExploits1References1
CVE
CVE
added 2022/01/25 3:04 p.m.57 views

CVE-2021-46034

ForestBlog is affected by a cross-site scripting (XSS) vulnerability exploitable via the nickname input box. The issue stems from insufficient validation of client-side data, allowing injected JavaScript to execute in the victim’s browser. Public references describe the vulnerability across multi...

6.1CVSS5.9AI score0.00588EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/12/07 5:15 p.m.10 views

CVE-2021-37058

There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user's nickname is maliciously tampered with...

5.3CVSS6.7AI score0.00483EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/12/07 5:15 p.m.10 views

CVE-2021-37058

There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user's nickname is maliciously tampered with...

5.3CVSS5.8AI score0.00483EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/12/07 4:02 p.m.31 views

CVE-2021-37058

There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user's nickname is maliciously tampered with...

5.5AI score0.00483EPSS
SaveExploits0References1
Rows per page
Query Builder