Lucene search
+L

3192 matches found

Rockylinux
Rockylinux
added 2023/04/06 3:52 p.m.20 views

nmstate bug fix and enhancement update

An update is available for nmstate. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Nmstate is a library with an accompanying command line tool that manages host...

6.7AI score
SaveExploits0
Microsoft Secure
Microsoft Secure
added 2023/03/28 3:30 p.m.60 views

Microsoft Secure: Explore innovations transforming the future of security

Building a more secure future requires an end-to-end approach. There is no question that technology plays an essential role, but security will always be human-centered. That’s what Microsoft Secure is all about. It’s about sharing knowledge, best practices, and technology innovations that empower...

6.9AI score
SaveExploits0
Patchstack
Patchstack
added 2023/03/21 12:00 a.m.14 views

WordPress Simple Custom Author Profiles Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Simple Custom Author Profiles Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-24372 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 5136de6d27f7 Credits Nithissh S...

5.9CVSS5.8AI score0.00369EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/03/20 12:00 a.m.14 views

WordPress TreePress – Easy Family Trees & Ancestor Profiles Plugin <= 2.0.22 is vulnerable to Cross Site Scripting (XSS)

Software TreePress – Easy Family Trees & Ancestor Profiles Type Plugin Vulnerable versions = 2.0.22 Fixed in 3.0.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23863 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID...

5.9CVSS5.7AI score0.00369EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2023/03/16 9:15 a.m.33 views

CVE-2022-38971

Stored Cross-Site Scripting XSS vulnerability in ThemeKraft Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions plugin = 2.7.5 versions...

5.4CVSS4.8AI score0.00402EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/16 9:15 a.m.10 views

CVE-2022-38971

Stored Cross-Site Scripting XSS vulnerability in ThemeKraft Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions plugin = 2.7.5 versions...

5.4CVSS5.8AI score0.00402EPSS
SaveExploits0References1
Prion
Prion
added 2023/03/16 9:15 a.m.23 views

Cross site scripting

Stored Cross-Site Scripting XSS vulnerability in ThemeKraft Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions plugin = 2.7.5 versions...

4.9CVSS5.3AI score0.00402EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/03/16 8:49 a.m.39 views

CVE-2022-38971 WordPress BuddyForms Plugin <= 2.7.5 is vulnerable to Cross Site Scripting (XSS)

Stored Cross-Site Scripting XSS vulnerability in ThemeKraft Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions plugin = 2.7.5 versions...

4.7CVSS5.5AI score0.00402EPSS
SaveExploits0References1
CVE
CVE
added 2023/03/16 8:49 a.m.62 views

CVE-2022-38971

CVE-2022-38971 is a stored XSS vulnerability affecting the WordPress BuddyForms/ThemeKraft Post Form family (Registration, Profile, and Content Forms) for version

5.4CVSS4.8AI score0.00402EPSS
SaveExploits0References1Affected Software1
Wired Threat Level
Wired Threat Level
added 2023/03/15 11:00 a.m.23 views

A Spy Wants to Connect With You on LinkedIn

Russia, North Korea, Iran, and China have been caught using fake profiles to gather information. But the platform’s tools to weed them out only go so far...

1.5AI score
SaveExploits0
Prion
Prion
added 2023/03/14 9:15 p.m.19 views

Stack overflow

Rizin is a UNIX-like reverse engineering framework and command-line toolset. In version 0.5.1 and prior, converting a GDB registers profile file into a Rizin register profile can result in a stack-based buffer overflow when the name, type, or groups fields have longer values than expected. Users...

4.4CVSS7.9AI score0.00315EPSS
SaveExploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/14 12:00 a.m.6 views

PT-2023-21230 · Rizin · Rizin

Name of the Vulnerable Software and Affected Versions: Rizin versions 0.5.1 and prior Description: Rizin is a UNIX-like reverse engineering framework and command-line toolset. Converting a GDB registers profile file into a Rizin register profile can result in a stack-based buffer overflow when th...

7.8CVSS7.6AI score0.00315EPSS
SaveExploits0References10
Veracode
Veracode
added 2023/03/13 12:11 a.m.26 views

Denial Of Service (DoS)

Google Chrome is vulnerable to Denial Of Service DoS. The vulnerability exists due to the use after free in Profiles, which allows an attacker to potentially exploit heap corruption via a crafted HTML page, leading to an application crash...

8.8CVSS8.7AI score0.00612EPSS
SaveExploits0References5Affected Software1
HackRead
HackRead
added 2023/03/09 2:58 p.m.26 views

Beware of Fake Facebook Profiles, Google Ads Pushing Sys01 Stealer

By Deeba Ahmed The researchers have been tracking the malware campaign since November 2020. This is a post from HackRead.com Read the original post: Beware of Fake Facebook Profiles, Google Ads Pushing Sys01 Stealer...

3.1AI score
SaveExploits0
Circl
Circl
added 2023/03/09 9:29 a.m.10 views

CVE-2015-2551

creationtimestamp| type| source ---|---|--- 2023-03-09 09:29:35+00:00| seen| https://t.me/alexredsec/309 2025-03-30 17:32:48+00:00| seen| https://bsky.app/profile/attrition.org/post/3llmesm3laf2g 2025-03-31 11:15:39+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lloa75nzqz25...

5.8AI score
SaveExploits0References3
The Hacker News
The Hacker News
added 2023/03/07 1:58 p.m.47 views

SYS01stealer: New Threat Using Facebook Ads to Target Critical Infrastructure Firms

Cybersecurity researchers have discovered a new information stealer dubbed SYS01stealer targeting critical government infrastructure employees, manufacturing companies, and other sectors since November 2022. "The threat actors behind the campaign are targeting Facebook business accounts by using...

1.3AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/03/02 11:35 a.m.8 views

2023 Browser Security Report Uncovers Major Browsing Risks and Blind Spots

As a primary working interface, the browser plays a significant role in today's corporate environment. The browser is constantly used by employees to access websites, SaaS applications and internal applications, from both managed and unmanaged devices. A new report published by LayerX, a browser...

6.9AI score
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 8:02 p.m.64 views

K86772626: OpenSSL vulnerability CVE-2015-3194

Security Advisory Description crypto/rsa/rsaameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an RSA PSS ASN.1 signature that lacks a mask generation function parameter...

7.5CVSS7.6AI score0.44016EPSS
SaveExploits1Affected Software17
F5 Networks
F5 Networks
added 2023/02/21 7:59 p.m.37 views

K13053402: TMM vulnerability CVE-2016-7468

Security Advisory Description An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devices with maliciously crafted network traffic. This vulnerability affects virtual servers associated with TCP profiles when the BIG-IP system's tm.tcpprogressive db...

5.9CVSS6.7AI score0.01657EPSS
SaveExploits0Affected Software10
F5 Networks
F5 Networks
added 2023/02/21 7:56 p.m.35 views

K90879323: BIG-IP 11.5.4 HF3 regression may modify security configurations

Security Advisory Description F5 has discovered a regression in BIG-IP 11.5.4 HF3, which has the potential to create a security exposure during the installation process. Operating with an abundance of caution, F5 has decided to remove 11.5.4 HF3 from the Downloads site. To correct the regression,...

6.5AI score
SaveExploits0
Rows per page
Query Builder