Lucene search
+L

9 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2008-6068

Malware in sbrugna...

4CVSS6.1AI score0.01146EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2002-2239

Malware in sbrugna...

4.3CVSS6.2AI score0.0109EPSS
SaveExploits0References6
OSV
OSV
•added 2025/08/14 6:52 p.m.•8 views

MAL-2025-8938 Malicious code in @malware-test-sordo-quips-tokes-flory/test-mlw3-sordo-quips-tokes-flory (npm)

The package @malware-test-sordo-quips-tokes-flory/test-mlw3-sordo-quips-tokes-flory was found to contain malicious code...

7.2AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/02/15 5:55 a.m.•8 views

SUSE CVE-2011-0046

Multiple cross-site request forgery CSRF vulnerabilities in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 allow remote attackers to hijack the authentication of arbitrary users for requests related to 1 adding a saved search in buglist.cgi, 2 voting in...

6.8CVSS7.1AI score0.01136EPSS
SaveExploits0References3
QT
QT
•added 2023/01/23 12:00 a.m.•50 views

Regarding recent reported security vulnerabilities from Cisco Talos

Back in October 2022, the Qt Project Security team was contacted by someone at Cisco Talos to report an issue with integer and buffer overflow issues in QML which they considered a vulnerability in Qt 6.3. This has recently been made public by Cisco Talos here. This has also resulted in two CVEs ...

6.8CVSS8.8AI score0.01144EPSS
SaveExploits2
Prion
Prion
•added 2011/01/28 4:00 p.m.•32 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 allow remote attackers to hijack the authentication of arbitrary users for requests related to 1 adding a saved search in buglist.cgi, 2 voting in...

6.8CVSS7.7AI score0.01136EPSS
SaveExploits0References22Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/09 12:00 a.m.•4 views

CVE-2008-6098: Undefined Security Weakness

Bugzilla 3.2 before 3.2 RC2, 3.0 before 3.0.6, 2.22 before 2.22.6, 2.20 before 2.20.7, and other versions after 2.17.4 allows remote authenticated users to bypass moderation to approve and disapprove quips via a direct request to quips.cgi with the action parameter set to "approve."...

4CVSS5.8AI score0.01146EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/10/18 12:00 a.m.•4 views

CVE-2002-2260: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the quips feature in Mozilla Bugzilla 2.10 through 2.17 allows remote attackers to inject arbitrary web script or HTML via the "show all quips" page...

4.3CVSS6AI score0.0109EPSS
SaveExploits0References2
securityvulns
securityvulns
•added 2002/11/27 12:00 a.m.•46 views

XSS vulnerability in Bugzilla if upgraded from 2.10 or earlier

Bugzilla Security Advisory November 26th, 2002 Severity: Minor Summary ======= The Bugzilla team recently discovered a cross-site scripting vulnerability. The vulnerability, present in Bugzilla's 'quips' feature, affects all installations who originally installed Bugzilla 2.10 or earlier and whic...

0.2AI score
SaveExploits0
Rows per page
Query Builder