Lucene search
+L

4640 matches found

Citrix
Citrix
added 2023/11/29 12:00 a.m.16 views

Expression for EPA scan to check for version Win 11

Run EPA scan to check Win 11...

7.1AI score
SaveExploits0
Prion
Prion
added 2023/11/27 5:15 p.m.22 views

Design/Logic Flaw

The Security & Malware scan by CleanTalk WordPress plugin before 2.121 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to bypass bruteforce protection...

5CVSS7AI score0.00653EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2023/11/27 4:22 p.m.37 views

CVE-2023-5239 Security & Malware scan by CleanTalk < 2.121 - IP Spoofing

The Security & Malware scan by CleanTalk WordPress plugin before 2.121 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to bypass bruteforce protection...

7.7AI score0.00653EPSS
SaveExploits2References1
CVE
CVE
added 2023/11/27 4:22 p.m.68 views

CVE-2023-5239

CVE-2023-5239 affects the CleanTalk Security & Malware scan plugin for WordPress prior to version 2.121. The issue arises from the plugin retrieving client IP addresses from potentially untrusted headers, allowing an attacker to spoof/manipulate the IP value and potentially bypass bruteforce prot...

7.5CVSS7.5AI score0.00653EPSS
SaveExploits2References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/11/21 12:00 a.m.45 views

RHEL 7 : kpatch-patch (RHSA-2023:7419)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7419 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

7.8CVSS7.2AI score0.00565EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2023/11/16 12:00 a.m.5 views

PT-2023-35593 · Git +1 · Vulkan-Loader

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ, with a crash state involving functions such as loader log, loader scanned icd add, and loader icd...

6.8AI score
SaveExploits0References2
Microsoft KB
Microsoft KB
added 2023/11/14 8:00 a.m.110 views

Internet Explorer help

None None...

8.8CVSS7.3AI score0.25289EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2023/11/14 12:00 a.m.35 views

Trend Micro Apex One Security Agent Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

7.8CVSS7.7AI score0.00244EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:00 a.m.13 views

The vulnerability of the `scan_unit_for_symbols` function in the `dwarf2.c` component of the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the scanunitforsymbols function in the dwarf2.c component of the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker who operates remotely to trigger a service failure using a specially created ELF fil...

7.8CVSS6.8AI score0.01938EPSS
SaveExploits0References7Affected Software2
Tenable Nessus
Tenable Nessus
added 2023/11/14 12:00 a.m.26 views

Zoom Client for Meetings < 5.16.0 Vulnerability (ZSB-23047)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23047 advisory. - Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow a...

7.5CVSS7.4AI score0.00928EPSS
SaveExploits0References2
OSV
OSV
added 2023/11/09 10:03 p.m.79 views

GHSA-2RMR-XW8M-22Q9 Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint

Impact An unsanitized input of Next.js SDK tunnel endpoint allows sending HTTP requests to arbitrary URLs and reflecting the response back to the user. This could open door for other attack vectors: client-side vulnerabilities: XSS/CSRF in the context of the trusted domain; interaction with...

6.1CVSS7.5AI score0.00631EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2023/11/08 3:45 p.m.8 views

mariadb: node crashes with Transport endpoint is not connected mysqld got signal 6

A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service...

7.5CVSS5.8AI score0.02021EPSS
SaveExploits0References4
NVD
NVD
added 2023/11/07 6:15 a.m.40 views

CVE-2023-28572

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list...

8.8CVSS7.3AI score0.00402EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/07 6:15 a.m.23 views

Memory corruption

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list...

6.5CVSS7.3AI score0.00402EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/11/07 5:26 a.m.44 views

CVE-2023-28572 Buffer Over-read in WLAN HOST

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list...

6.6CVSS9.1AI score0.00402EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/11/07 5:26 a.m.18 views

CVE-2023-28572 Buffer Over-read in WLAN HOST

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list...

6.6CVSS7.4AI score0.00402EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/07 5:26 a.m.126 views

CVE-2023-28572

CVE-2023-28572 corresponds to a memory corruption issue in Qualcomm WLAN HOST when processing the WLAN scan descriptor list. The vulnerability is referenced across multiple sources (including Red Hat’s CVE entry and the Pixel Update Bulletin), indicating it affects Qualcomm WLAN components and is...

8.8CVSS7.3AI score0.00402EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/11/07 12:00 a.m.11 views

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a WLAN host memory corruption when processing a WLAN scan descriptor list...

8.8CVSS6.9AI score0.00402EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/11/07 12:00 a.m.8 views

PT-2023-21821 · Qualcomm · Snapdragon +49

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue involves memory corruption in the WLAN HOST when processing the WLAN scan descriptor list. Recommendations: At the moment, there is no information about a newer version th...

8.8CVSS8.9AI score0.00402EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
added 2023/11/06 12:00 a.m.17 views

Security & Malware scan by CleanTalk < 2.121 - IP Spoofing

Description This plugin retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to bypass bruteforce protection. PoC Send 5 invalid login requests and thus block the IP address. POST /wp-login.php HTTP/1.1 Host: localhost...

7.5CVSS7.5AI score0.00653EPSS
SaveExploits2Affected Software1
Rows per page
Query Builder