Lucene search
+L

7616 matches found

BDU FSTEC
BDU FSTEC
added 2022/09/14 12:00 a.m.12 views

The vulnerability of the WPE WebKit web page rendering module, related to the use of open redirection, allows attackers to access confidential data.

The vulnerability of the WPE WebKit web page rendering module is related to the use of open redirection. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

7.4CVSS6.6AI score0.01729EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/14 12:00 a.m.14 views

The vulnerability of the WebPage rendering module in WebKitGTK, related to the use of memory after it is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebPageRendering module in WebKitGTK relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.1AI score0.01555EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/14 12:00 a.m.9 views

The vulnerability of the WPE WebKit web page rendering module, related to the use of an untrusted intermediate policy file, allows a attacker to compromise data integrity.

The vulnerability of the WPE WebKit web page rendering module is related to the use of an untrusted intermediate policy file. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

7.1CVSS6.5AI score0.01784EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/14 12:00 a.m.8 views

The vulnerability of the WPE WebKit web page rendering module, related to the lack of measures taken to protect the structure of the web page, allows attackers to compromise the integrity of the data.

The vulnerability of the WPE WebKit web page rendering module is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of the data...

6.1CVSS6.5AI score0.01456EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/14 12:00 a.m.12 views

The vulnerability of the WebPage rendering module in WebKitGTK, related to improper limitation of the number of user interface layers that can be rendered, allows attackers to compromise data integrity.

The vulnerability of the WebPage rendering module in WebKitGTK is related to an improper limitation on the number of user interface layers that can be rendered. Exploiting this vulnerability allows a remote attacker to compromise the integrity of data...

7.1CVSS6.5AI score0.01623EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/14 12:00 a.m.10 views

The vulnerability of the WPE WebKit web page rendering module, related to copying buffers without checking input data, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WPE WebKit web page rendering module is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS6.6AI score0.01932EPSS
SaveExploits0References8Affected Software5
Ubuntu
Ubuntu
added 2022/09/12 6:25 p.m.76 views

USN-5606-1: poppler vulnerability

It was discovered that poppler incorrectly handled certain PDF. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...

7.8CVSS8.3AI score0.00627EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2022/09/09 12:00 a.m.69 views

Cisco Webex Meetings App Character Interface Manipulation (cisco-sa-webex-app-qrtO6YC2)

A vulnerability in the messaging interface of Cisco Webex App, formerly Webex Teams, could allow an unauthenticated, remote attacker to manipulate links or other content within the messaging interface. This vulnerability exists because the affected software does not properly handle character...

5.3CVSS6.1AI score0.00857EPSS
SaveExploits0References2
OSV
OSV
added 2022/09/08 1:15 p.m.10 views

CVE-2022-20863

A vulnerability in the messaging interface of Cisco Webex App, formerly Webex Teams, could allow an unauthenticated, remote attacker to manipulate links or other content within the messaging interface. This vulnerability exists because the affected software does not properly handle character...

5.3CVSS5.8AI score0.00857EPSS
SaveExploits0References1
NVD
NVD
added 2022/09/08 1:15 p.m.26 views

CVE-2022-20863

A vulnerability in the messaging interface of Cisco Webex App, formerly Webex Teams, could allow an unauthenticated, remote attacker to manipulate links or other content within the messaging interface. This vulnerability exists because the affected software does not properly handle character...

5.3CVSS0.00857EPSS
SaveExploits0References1
Prion
Prion
added 2022/09/08 1:15 p.m.31 views

Design/Logic Flaw

A vulnerability in the messaging interface of Cisco Webex App, formerly Webex Teams, could allow an unauthenticated, remote attacker to manipulate links or other content within the messaging interface. This vulnerability exists because the affected software does not properly handle character...

5CVSS5.2AI score0.00857EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2022/09/08 12:00 a.m.28 views

Debian: Security Advisory (DSA-5224-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.016EPSS
SaveExploits2References4
ATTACKERKB
ATTACKERKB
added 2022/09/07 11:00 p.m.16 views

CVE-2022-20863

A vulnerability in the messaging interface of Cisco Webex App, formerly Webex Teams, could allow an unauthenticated, remote attacker to manipulate links or other content within the messaging interface. This vulnerability exists because the affected software does not properly handle character...

5.3CVSS6.3AI score0.00857EPSS
SaveExploits0References2
Cisco
Cisco
added 2022/09/07 4:00 p.m.49 views

Cisco Webex Meetings App Character Interface Manipulation Vulnerability

A vulnerability in the messaging interface of Cisco Webex App, formerly Webex Teams, could allow an unauthenticated, remote attacker to manipulate links or other content within the messaging interface. This vulnerability exists because the affected software does not properly handle character...

4.3CVSS5AI score0.00857EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/07 7:27 a.m.6 views

SUSE-SU-2022:3137-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: - Updated to version 2.36.7 bsc1202807: - CVE-2022-32893: Fixed an issue that would be triggered when processing malicious web content and that could lead to arbitrary code execution. - Fixed several crashes and rendering issues. - Updated t...

8.8CVSS8.9AI score0.09864EPSS
SaveExploits0References4
Debian
Debian
added 2022/09/06 7:32 p.m.50 views

[SECURITY] [DSA 5224-1] poppler security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5224-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 06, 2022 https://www.debian.org/security/faq -...

7.8CVSS8.4AI score0.016EPSS
SaveExploits2
NVD
NVD
added 2022/09/02 9:15 p.m.37 views

CVE-2022-31176

Grafana Image Renderer is a Grafana backend plugin that handles rendering of panels & dashboards to PNGs using a headless browser Chromium/Chrome. An internal security review identified an unauthorized file disclosure vulnerability. It is possible for a malicious user to retrieve unauthorized fil...

8.3CVSS0.0122EPSS
SaveExploits0References3
Prion
Prion
added 2022/09/02 9:15 p.m.24 views

Design/Logic Flaw

Grafana Image Renderer is a Grafana backend plugin that handles rendering of panels & dashboards to PNGs using a headless browser Chromium/Chrome. An internal security review identified an unauthorized file disclosure vulnerability. It is possible for a malicious user to retrieve unauthorized fil...

5.5CVSS7.7AI score0.0122EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2022/09/02 12:00 a.m.167 views

CVE-2022-31176

CVE-2022-31176 concerns Grafana Image Renderer, a Grafana backend plugin that renders panels to PNGs via a headless browser. An internal security review identified an unauthorized file disclosure vulnerability: a malicious user could retrieve unauthorized files under certain network conditions or...

8.3CVSS7.8AI score0.0122EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/09/02 12:00 a.m.9 views

PT-2022-20588 · Grafana · Grafana

Name of the Vulnerable Software and Affected Versions: Grafana versions prior to 3.6.1 Description: An unauthorized file disclosure issue was identified in Grafana, allowing a malicious user to retrieve unauthorized files under certain network conditions or via a fake datasource, particularly if...

8.3CVSS7.7AI score0.0122EPSS
SaveExploits0References7
Rows per page
Query Builder